last executing test programs: 1.851799986s ago: executing program 1 (id=2): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000900)={'gre0\x00', 0x0, 0x40, 0x8000, 0x100, 0xb8e4, {{0x31, 0x4, 0x0, 0x38, 0xc4, 0x65, 0x0, 0x6, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x54, 0x3e, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800003}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@broadcast, 0x7a}, {@remote, 0x8}, {@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6718}, {@rand_addr=0x64010100, 0x2}, {@empty, 0x8}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @noop, @noop, @lsrr={0x83, 0x23, 0x16, [@dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @loopback]}, @timestamp={0x44, 0x1c, 0xf, 0x0, 0x1, [0x8, 0x6, 0x9, 0xf1, 0xad, 0x9]}, @ssrr={0x89, 0x13, 0xac, [@initdev={0xac, 0x1e, 0xfe, 0x0}, @private=0xa010100, @loopback, @local]}, @lsrr={0x83, 0x7, 0xb5, [@multicast2]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a40000000c0000000000000000000003000000000000010000000000c2a900000b00000007000005ffffff7f0d00000004000000010000000000140f00000c00000005000000010000000c00000005000000027e00000f00000000000000abffffff0d00000004000000530400000a00000000000000070000000300000000000001000000002e0023030900000000000001000000006f0039040d0000000000000c03000000000061000030302e002e5f005023ecff7683712444b313604934881ac977a8000000000000"], &(0x7f00000007c0)=""/182, 0xc8, 0xb6, 0x1, 0x5}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x20, 0xff, 0x5, 0x9, 0x20048, r1, 0x4, '\x00', r2, r3, 0x1, 0x1}, 0x50) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x3, 0x3, 0x1, &(0x7f0000000000)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000040), 0x8) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xea8, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x20, 0x40, 0x70, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x66, 0x0, 0x4, 0x4, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x2, 0x4, "23a9"}, {0x2, 0xc, "4553a060a750fa767fba"}, {0x0, 0x2}, {0x0, 0xa, "a465c7d05c86a535"}, {0x6, 0x7, "aa268c7e02"}, {0x6, 0x5, "f01991"}]}, @timestamp_prespec={0x44, 0x24, 0x5c, 0x3, 0x6, [{@broadcast, 0x3}, {@local, 0xc9}, {@private=0xa010101, 0x6}, {@broadcast, 0x2}]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000001000000080000000200000080310000", @ANYRES32=r4, @ANYBLOB="4d8a56c90bfcc75900"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r11, &(0x7f0000000380), 0x0}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x48) socket(0x3, 0xa, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r12}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r12}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000, 0x3]}}) r13 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x890b, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)={0xf0, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6c}, @CTA_TUPLE_MASTER={0xa0, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x40880) 1.830666861s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x5, 0x5, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000019000318000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.570382807s ago: executing program 1 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e00)={0x1c, 0x0, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x840) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="8ec6b1ee58ca706c1650eb9a56cb55897a498e6841bedf1145bb9b3a049dc5f35a05b9fc944a17802af0a89c28db4d911720f368d3ed2d2ed06396b7d4db9619ee1eac8fedc33624e74db8132c9ee4b5604686bd73df8ade2e4b9f", &(0x7f0000000740)=""/4096}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.544138182s ago: executing program 0 (id=7): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) unshare(0x2a020400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x3f2, 0x8, 0x70bd27, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 1.212272331s ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c00000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001c80)={0x224, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "59ca98f591a8b35aab1af75a533a5b36d870a2244e59122268546d498fdf7be411"}}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1c08f85}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f05}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e37}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x44fa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x35819b62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x29}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a91798e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd41}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x613, @local, 0xdf9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) sendto$inet6(r0, &(0x7f0000000440)="830b77a3c22d11cf560d377488c7dd5093cf12fd2499050f20642439ed5c289356a6b04b35c1e54567ebf069d81ccd7ebf518e4a372fbc54968fd888fd0627d49e3b848f7dadc1de5b7dd4cf88d33b8b42500bb4fc9cf7aa64de7c0f6ba1a9cc635b994276cef02364cee1e538b04f6d0b1b08000000ac030cacf94e1830cb99395545dce65a7de4c7caadb6c407f1d0aac007b90e39e488f9335f6f5a6b56405141ee01318a7300a3ea975f6b6d79846b38e3a157463ef2c5090112b5f44ad2202c161e1dd7fa200543a0651f417df59d2b9c9b4ec3ea", 0xffffffffffffffe8, 0x4000, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e24, @private=0xa010101}, {0x306, @multicast}, 0x32, {0x2, 0x4e21, @private=0xa010102}, 'team_slave_0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) pipe(&(0x7f0000002080)={0xffffffffffffffff}) bpf$ITER_CREATE(0xb, &(0x7f0000002040)={r6}, 0x2) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f00000003c0)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000008c0)="5cf6b5908ac48660204f8ad4c94a3ee68f6b82ef973fb2f5bcf3e8877f16a8e05dc8f33a57f5b6e6301de75abad8e3ef7bdf3883b499c272cc59fbcc837455a9aed130557773c5fc3d2a028e14d3f52e371e5bd1959531c2ed6a59003a15c24f8989e3b031bcb4b22869074eede6f21acf08133573ad3fa9d7e3f2d164c2625a40dc1eeb430034464dd7715d275c7064f399f6af0a2d393dffd55f385f32e42c6275f53abc7b786556b5364bb4402c659f1e1adfbff9aea58714c9ae124604b88d24b36da85f6e39d67c8851fe9ff9998cbf3abbf8", 0xd5}, {&(0x7f0000000a40)="d455cbdaa78fe9f1830157e55e71df016ffddb0e4ccc8e623737ea89043bc7650f44581a51d67b79907025767bd7dfc18de5035baba3febef8296a37da469f0b0f86b6c57671a9520bfad931a3f158feea5d1e728e4384db3e318bbbeea9bf45744bf6fa604d958aa439e8b80a7f0a62d34c5b78d0ab6b6fdf687cbb3c5c737869a6a3eea54e21aa50fedae8", 0x8c}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="0d05676a17c1211127b7924e51c6b1528d85725347dffa09ab0bf66d20df4c9f853e6f76b5598782db555c63f495d294e048f2a57f4e7fbc52493522855a9a19084023dd7b1cb988929cfa490e49e888283bb23ddcaf4b4b34", 0x59}], 0x4, &(0x7f0000001b80)=[{0xc0, 0x112, 0x45, "c36d8961a21cc185b544dc71bafd8afbce87549f432305164390fb65d847ffe0bcca45767e4d2fa16d9cea4965560a5ad90a42795bcec538cd392bca69444e7d322da4739fe653c28c110d1bd5e15e8210181f8b86c2af6be7256566bf32f99ac755e9eabfaaa703d05fbc3d30c328b41ab30ae37d2d14cb388cf77bfd8d484079a3ac525d0ad5269ff68a395afa92ba00e0d78b59d64cbfa1c1ad134a800bf0980b2a83f05d565efd86"}, {0x18, 0x108, 0x2, "1b01071279"}], 0xd8}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000300)=""/19, 0x4000, 0x40000041, 0x0, 0x0) 1.030810123s ago: executing program 2 (id=8): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b", 0x1a}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x142}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="99f8ee40de143dd62dc7cf8951bd537eb95f29353b0e655a501fa595b474eb130c4caa8d31c1958f8c876e44e4d16a7a38c4f52e98dfd11ccf54c2e26cfff46bc27e0947e391847f604765a38dddda3600abb8aa5bed85ed170c14c9f864cd5f303c0f5768013e1f24a8579e3ddfbfa84c0773ee95be4910d8b476f68dc005e58b6eb0b949b3d2b860c2ea8c9f0ff61cf2b910513ebdbd724d3c3088034ecc6e555ca40b4c797b88b8e3f0efba5ad929", 0xb0}, {&(0x7f00000007c0)="a6643c5a8d917ff4438f8b93b5bd73d1b3871afea241d79bc7d9ccd930fbf81d3b2b270ca358839d2cf3712108bed062b412eb799e681a6cde9bdcac5648ec9f4b0808e303d8ee189f22bd10afd8042c36b79dbe4270d22ac53a819a4d965ab776b4500ed7e9d18a936ac4423b6823aed7a2e822acf883af66a80887f153ea80eb289406cf63ff44e1d48d1a37244edf9b3bd6e14ac417126155d3086d3e0ebef87257433283fd74fe435609e5fc67767ab7a9c49fd6fe08bed196369f25bc8dc48d9cba87865b3f0f902452971f9ed676cff4c84a4ccc4e4e6349", 0xdb}, {&(0x7f00000006c0)="6202873c4198136e1418d24a637e53f08567184b793f1e406fa7895129a74f70b9c472d23e723cab5314c51c56e1ce005d639d80db85dbbfdeef36e9266310d4e9fec2236051685e9a6aa2b3549780ca8e54faf1753b2514be24442960064b0938873974214721681403a3f18b14a2d8e0ed36c7975dc930170a0a3526ddc3c2f5ad4cdf728e832d8478ba5d0c04a5aa25df9dc7e185dfa193b198e4bc05533f6a11de9a06dd484930abc2ebe327a93a", 0xb0}, {&(0x7f0000000380)="361b0d0b2e2c95d7ac23a896f0932cc52bad2ad1a85e0734bf4b516da870f56e667461b8e3cee9340dcbd69531f5cd24ae7079750fb9ccbdef278a2f453cb4ed1a0f7e655dc3e36f25e71c3947c288e05f7218d9e40f8f88c41d769a846e", 0x5e}, {&(0x7f0000000240)="fe5eb813379da35820790e63ccbd5066c37c0b39f88d2e7736", 0x19}, {&(0x7f0000000a40)="3ffa1f821a79fbed1b79d9ec5563cb759519b818a7d813a0eb0ac9f52cff06b6a5b827fb22a897260c5e43116dc329c3401361651cc527df17e3698331925d734875b75c268fb70813fae8ac06294c70b4a9b6", 0x53}], 0x6}}], 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x3e) sendto$inet(r0, &(0x7f0000000580)='0', 0x1, 0x10008095, 0x0, 0x0) 917.305581ms ago: executing program 0 (id=9): r0 = socket$packet(0x11, 0x2, 0x300) r1 = epoll_create(0x374) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x2000}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x6, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x70}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f00000004c0)={&(0x7f00000005c0), 0x7, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xe}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000000001a584bd1772e426701db1d078b40f648a612cd77a7bdc20446e4f9229e22b2231a1d1911245437abbde89a587963c15193656c0b860aec161c003e54c457af896febb56040028fcf3e8fe8af34b5b499f53b2b4020c05d8d258caed990e"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) pipe(0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xf9d}]]}}}]}, 0x38}}, 0x10) sendmmsg$inet6(r5, &(0x7f0000009940)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x3b1}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="000000010700000000000000000000003600"/28], 0x40}}], 0x1, 0x10) 711.232705ms ago: executing program 2 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0x2}}]}, 0x28}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0xa4, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0xffff}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_HDR={0x21, 0x3, "6203455e663ca843f9df6aa72f0862e1fe2e59c2e0e9666a0a8bc6d139"}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x1f, 0x1, 0xb, 0x4, 0x6, 0x7, 0x8}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, r5, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x15}}, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) accept4(r3, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000040)=0x80, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbb3bbbbbbfb0800ac46000020000090780a010102acffffffff035b00080090030000000305fd8711587f9aa1bcd9a92473a356f461a7742b"], 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040207fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00001700000000001c0037800b0003086970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(r7) splice(r6, 0x0, r7, &(0x7f00000002c0), 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0xc0000000}) 538.879073ms ago: executing program 0 (id=11): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/20, 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000240)=""/18, 0x12}], 0x2}}], 0x2, 0x220, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'ip_vti0\x00', {0x2, 0x4e23, @empty}}) 387.783501ms ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3, 0x1000000}, 0x20) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000004c0)) sendmmsg(r2, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="72a6", 0x2}], 0x1, &(0x7f0000007500)=ANY=[], 0x150}}], 0x1, 0x40) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x4}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={r5, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x0, 0x7, 0x80, 0x1, 0x62, 0x3}, 0x9c) close(0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40), 0xfffffffffffffe63) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000780)="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", 0x285}], 0x2}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x1a, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_type(r12, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000000b00)=[{r2}, {r6}, {r8, 0x400}, {0xffffffffffffffff, 0x8000}, {r2, 0x8000}], 0x5, 0xffffff80) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000540)=""/202, &(0x7f0000000480)=0xca) sendfile(r11, r13, &(0x7f0000000240)=0x6, 0x9) socket$netlink(0x10, 0x3, 0x15) 354.175757ms ago: executing program 0 (id=12): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r2, 0x118, 0x3, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='signal_generate\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xffffffff004) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x48, 0x1, 0x0, 0x182, 0xfffffffa}) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x894) 183.749684ms ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, 0x0, &(0x7f0000000940)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x3, 'lblc\x00', 0x1, 0xfffffffd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000400000000600fc0008000000000000006cb0ae212f9fe9c24f972f65f94d25ded818f3222bffed6d8c6c6d361004deb3ef59e41eaaac3336174b6f1e533b20849ef48c2d10e6674a2bd49bef0e84143b96599437d6740d85a5d18c9cb2c75407a93a46a5f458144ff770a2b927bfa32a18ce469c732fe06b3e57374cd8774d68", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f00000002c0)={0x5c, @remote, 0x0, 0x0, 'ovf\x00'}, 0x2c) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r7, 0x8f5, 0x100000000000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff050006"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) write$cgroup_type(r7, &(0x7f0000000180), 0x9) 0s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93, 0x400}, [@ldst={0x6, 0x0, 0x0, 0x0, 0xb, 0x18}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000738000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x0, 0x0}, &(0x7f00000064c0)=0x40) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002}) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x40000000000003}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 87.697244][ T5837] cgroup: Unknown subsys name 'net' [ 87.848794][ T5837] cgroup: Unknown subsys name 'cpuset' [ 87.857666][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.537911][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.123852][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.151496][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.162667][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.171150][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.201559][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.273009][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.281477][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.291644][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.302340][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.313326][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.408378][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.416973][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.425430][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.445558][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.453309][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.462373][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.478829][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.489924][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.503787][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.511802][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.622796][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.644640][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.653061][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.671432][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.679550][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.114390][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 93.211374][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 93.445543][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.453515][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.460984][ T5847] bridge_slave_0: entered allmulticast mode [ 93.468754][ T5847] bridge_slave_0: entered promiscuous mode [ 93.513277][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.520520][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.527950][ T5852] bridge_slave_0: entered allmulticast mode [ 93.535792][ T5852] bridge_slave_0: entered promiscuous mode [ 93.549915][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.557349][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.564977][ T5852] bridge_slave_1: entered allmulticast mode [ 93.573009][ T5852] bridge_slave_1: entered promiscuous mode [ 93.580461][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.587892][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.595259][ T5847] bridge_slave_1: entered allmulticast mode [ 93.603094][ T5847] bridge_slave_1: entered promiscuous mode [ 93.609897][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 93.635952][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 93.735254][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.763696][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.776653][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.797204][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.906459][ T5852] team0: Port device team_slave_0 added [ 93.965625][ T5852] team0: Port device team_slave_1 added [ 93.987927][ T5847] team0: Port device team_slave_0 added [ 93.998008][ T5847] team0: Port device team_slave_1 added [ 94.080614][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.087982][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.098861][ T5857] bridge_slave_0: entered allmulticast mode [ 94.107877][ T5857] bridge_slave_0: entered promiscuous mode [ 94.120590][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.128188][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.139465][ T5857] bridge_slave_1: entered allmulticast mode [ 94.148103][ T5857] bridge_slave_1: entered promiscuous mode [ 94.173296][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.180278][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.206730][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.220343][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.227696][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.254067][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.265455][ T5850] Bluetooth: hci0: command tx timeout [ 94.326544][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 94.354573][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.361912][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.388083][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.401520][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.401615][ T5850] Bluetooth: hci1: command tx timeout [ 94.408499][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.442874][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.470420][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.478121][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.483486][ T5850] Bluetooth: hci2: command tx timeout [ 94.486130][ T5855] bridge_slave_0: entered allmulticast mode [ 94.498154][ T5855] bridge_slave_0: entered promiscuous mode [ 94.506248][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.514004][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.521275][ T5855] bridge_slave_1: entered allmulticast mode [ 94.528570][ T5855] bridge_slave_1: entered promiscuous mode [ 94.561353][ T5850] Bluetooth: hci3: command tx timeout [ 94.563401][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.578840][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.686413][ T5852] hsr_slave_0: entered promiscuous mode [ 94.693678][ T5852] hsr_slave_1: entered promiscuous mode [ 94.726053][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.731912][ T5850] Bluetooth: hci4: command tx timeout [ 94.780813][ T5857] team0: Port device team_slave_0 added [ 94.789784][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.807957][ T5847] hsr_slave_0: entered promiscuous mode [ 94.814954][ T5847] hsr_slave_1: entered promiscuous mode [ 94.821327][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.829125][ T5847] Cannot create hsr debugfs directory [ 94.849889][ T5857] team0: Port device team_slave_1 added [ 94.988820][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.996945][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.004649][ T5861] bridge_slave_0: entered allmulticast mode [ 95.012302][ T5861] bridge_slave_0: entered promiscuous mode [ 95.020910][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.028290][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.054804][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.067892][ T5855] team0: Port device team_slave_0 added [ 95.077579][ T5855] team0: Port device team_slave_1 added [ 95.097646][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.104929][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.113212][ T5861] bridge_slave_1: entered allmulticast mode [ 95.120502][ T5861] bridge_slave_1: entered promiscuous mode [ 95.128414][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.135763][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.162196][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.252119][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.259111][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.289590][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.308305][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.315448][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.342173][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.428950][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.442696][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.514827][ T5857] hsr_slave_0: entered promiscuous mode [ 95.521391][ T5857] hsr_slave_1: entered promiscuous mode [ 95.527606][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.535499][ T5857] Cannot create hsr debugfs directory [ 95.632846][ T5861] team0: Port device team_slave_0 added [ 95.656735][ T5855] hsr_slave_0: entered promiscuous mode [ 95.664094][ T5855] hsr_slave_1: entered promiscuous mode [ 95.670319][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.678563][ T5855] Cannot create hsr debugfs directory [ 95.717553][ T5861] team0: Port device team_slave_1 added [ 95.860350][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.868454][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.894661][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.937069][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.947810][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.974411][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.119518][ T5861] hsr_slave_0: entered promiscuous mode [ 96.126674][ T5861] hsr_slave_1: entered promiscuous mode [ 96.133308][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.140905][ T5861] Cannot create hsr debugfs directory [ 96.154012][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.200589][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.254148][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.293657][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.321609][ T5850] Bluetooth: hci0: command tx timeout [ 96.399073][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.427515][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.448373][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.460144][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.481525][ T5850] Bluetooth: hci1: command tx timeout [ 96.561507][ T5850] Bluetooth: hci2: command tx timeout [ 96.629427][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.641904][ T5850] Bluetooth: hci3: command tx timeout [ 96.655819][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.668363][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.683013][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.790119][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.802043][ T5850] Bluetooth: hci4: command tx timeout [ 96.840669][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.869506][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.898970][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.908037][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.994356][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.007338][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.035212][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.042848][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.069985][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.090196][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.118627][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.125912][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.178541][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.185739][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.230022][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.246946][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.273053][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.280221][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.298917][ T9] cfg80211: failed to load regulatory.db [ 97.313219][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.320399][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.402886][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.473534][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.480684][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.508389][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.547168][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.554382][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.642835][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.694496][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.729020][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.736211][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.766354][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.773590][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.844941][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.912440][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.919687][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.989137][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.996376][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.166825][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.197566][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.235670][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.362037][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.408190][ T5850] Bluetooth: hci0: command tx timeout [ 98.469113][ T5847] veth0_vlan: entered promiscuous mode [ 98.565038][ T5850] Bluetooth: hci1: command tx timeout [ 98.570190][ T5847] veth1_vlan: entered promiscuous mode [ 98.610238][ T5852] veth0_vlan: entered promiscuous mode [ 98.624488][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.647052][ T5850] Bluetooth: hci2: command tx timeout [ 98.688237][ T5852] veth1_vlan: entered promiscuous mode [ 98.724001][ T5850] Bluetooth: hci3: command tx timeout [ 98.819543][ T5847] veth0_macvtap: entered promiscuous mode [ 98.858278][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.891765][ T5847] veth1_macvtap: entered promiscuous mode [ 98.891826][ T5850] Bluetooth: hci4: command tx timeout [ 98.925647][ T5861] veth0_vlan: entered promiscuous mode [ 98.968171][ T5852] veth0_macvtap: entered promiscuous mode [ 98.984724][ T5852] veth1_macvtap: entered promiscuous mode [ 98.999501][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.026639][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.037552][ T5861] veth1_vlan: entered promiscuous mode [ 99.068642][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.095908][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.113354][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.124317][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144602][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.158426][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.170923][ T5855] veth0_vlan: entered promiscuous mode [ 99.186385][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.209493][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.218496][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.239735][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266736][ T5861] veth0_macvtap: entered promiscuous mode [ 99.279055][ T5855] veth1_vlan: entered promiscuous mode [ 99.290359][ T5857] veth0_vlan: entered promiscuous mode [ 99.323308][ T5861] veth1_macvtap: entered promiscuous mode [ 99.370573][ T5857] veth1_vlan: entered promiscuous mode [ 99.463789][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.484983][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.500031][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.536844][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.568649][ T3549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.584687][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.598062][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.612399][ T3549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.630505][ T3549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.643260][ T5855] veth0_macvtap: entered promiscuous mode [ 99.673535][ T3549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.691012][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.699299][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.725530][ T5857] veth0_macvtap: entered promiscuous mode [ 99.735098][ T5855] veth1_macvtap: entered promiscuous mode [ 99.763371][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.773546][ T5857] veth1_macvtap: entered promiscuous mode [ 99.784467][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.860108][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.910530][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.918263][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.947657][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.970012][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.989636][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.999216][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.056595][ T3549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.093630][ T3549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.159910][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.180313][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216964][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.239748][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.279644][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.290303][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.304213][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.336922][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.350138][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.609325][ T51] Bluetooth: hci0: command tx timeout [ 100.617584][ T5975] Zero length message leads to an empty skb [ 100.641681][ T51] Bluetooth: hci1: command tx timeout [ 100.723236][ T51] Bluetooth: hci2: command tx timeout [ 100.767453][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.782259][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.803609][ T51] Bluetooth: hci3: command tx timeout [ 100.837628][ T5967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.961918][ T51] Bluetooth: hci4: command tx timeout [ 101.003660][ T5967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.060628][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.089451][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.155438][ T5967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.333971][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.347625][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.412882][ T5967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.483920][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 101.541003][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.578545][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.598652][ T5987] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 101.644121][ T5993] No such timeout policy "syz0" [ 101.742716][ T5994] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.823647][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.857027][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.926634][ T5967] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.971571][ T5849] IPVS: starting estimator thread 0... [ 101.994002][ T5998] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:0 [ 102.039326][ T36] ================================================================== [ 102.047441][ T36] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 102.054947][ T36] Read of size 8 at addr ffff8880334022b0 by task kworker/u8:2/36 [ 102.062921][ T36] [ 102.065299][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 102.065323][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.065336][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 102.065375][ T36] Call Trace: [ 102.065382][ T36] [ 102.065390][ T36] dump_stack_lvl+0x189/0x250 [ 102.065412][ T36] ? __kasan_check_byte+0x12/0x40 [ 102.065436][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.065455][ T36] ? lock_release+0x4b/0x3e0 [ 102.065475][ T36] ? __virt_addr_valid+0x4a5/0x5c0 [ 102.065498][ T36] print_report+0xca/0x230 [ 102.065512][ T36] ? __mutex_lock+0x144/0xe80 [ 102.065526][ T36] kasan_report+0x118/0x150 [ 102.065548][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 102.065572][ T36] ? __mutex_lock+0x144/0xe80 [ 102.065590][ T36] __mutex_lock+0x144/0xe80 [ 102.065604][ T36] ? __lock_acquire+0xab9/0xd20 [ 102.065619][ T36] ? __mutex_lock+0x51b/0xe80 [ 102.065636][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 102.065684][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 102.065701][ T36] ? __lock_acquire+0xab9/0xd20 [ 102.065722][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 102.065750][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 102.065769][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 102.065787][ T36] process_scheduled_works+0xae1/0x17b0 [ 102.065818][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.065844][ T36] worker_thread+0x8a0/0xda0 [ 102.065874][ T36] kthread+0x70e/0x8a0 [ 102.065898][ T36] ? __pfx_worker_thread+0x10/0x10 [ 102.065917][ T36] ? __pfx_kthread+0x10/0x10 [ 102.065940][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.065963][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.065986][ T36] ? __pfx_kthread+0x10/0x10 [ 102.066009][ T36] ret_from_fork+0x3fc/0x770 [ 102.066027][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 102.066046][ T36] ? __switch_to_asm+0x39/0x70 [ 102.066066][ T36] ? __switch_to_asm+0x33/0x70 [ 102.066086][ T36] ? __pfx_kthread+0x10/0x10 [ 102.066109][ T36] ret_from_fork_asm+0x1a/0x30 [ 102.066137][ T36] [ 102.066143][ T36] [ 102.276777][ T36] Allocated by task 5967: [ 102.281120][ T36] kasan_save_track+0x3e/0x80 [ 102.285822][ T36] __kasan_kmalloc+0x93/0xb0 [ 102.290432][ T36] __kmalloc_noprof+0x27a/0x4f0 [ 102.295296][ T36] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 102.301468][ T36] notifier_call_chain+0x1b3/0x3e0 [ 102.306596][ T36] register_netdevice+0x1608/0x1ae0 [ 102.311805][ T36] nsim_create+0xae8/0xf10 [ 102.316241][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 102.321358][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 102.326478][ T36] nsim_dev_reload_up+0x451/0x780 [ 102.331514][ T36] devlink_reload+0x4ec/0x8d0 [ 102.336206][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 102.341588][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 102.347158][ T36] genl_rcv_msg+0x60e/0x790 [ 102.351675][ T36] netlink_rcv_skb+0x208/0x470 [ 102.356453][ T36] genl_rcv+0x28/0x40 [ 102.360444][ T36] netlink_unicast+0x82c/0x9e0 [ 102.365225][ T36] netlink_sendmsg+0x805/0xb30 [ 102.369998][ T36] __sock_sendmsg+0x219/0x270 [ 102.374684][ T36] ____sys_sendmsg+0x505/0x830 [ 102.379461][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 102.384160][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 102.389121][ T36] do_syscall_64+0xfa/0x3b0 [ 102.393676][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.399595][ T36] [ 102.401934][ T36] Freed by task 5967: [ 102.405918][ T36] kasan_save_track+0x3e/0x80 [ 102.410615][ T36] kasan_save_free_info+0x46/0x50 [ 102.415649][ T36] __kasan_slab_free+0x62/0x70 [ 102.420430][ T36] kfree+0x18e/0x440 [ 102.424336][ T36] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 102.430600][ T36] notifier_call_chain+0x1b3/0x3e0 [ 102.435724][ T36] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 102.442156][ T36] unregister_netdevice_queue+0x33c/0x380 [ 102.447906][ T36] nsim_destroy+0x217/0x6a0 [ 102.452425][ T36] __nsim_dev_port_del+0x14d/0x1b0 [ 102.457548][ T36] nsim_dev_port_add_all+0xae/0xf0 [ 102.462672][ T36] nsim_dev_reload_up+0x451/0x780 [ 102.467712][ T36] devlink_reload+0x4ec/0x8d0 [ 102.472406][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 102.477797][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 102.483370][ T36] genl_rcv_msg+0x60e/0x790 [ 102.487889][ T36] netlink_rcv_skb+0x208/0x470 [ 102.492681][ T36] genl_rcv+0x28/0x40 [ 102.496696][ T36] netlink_unicast+0x82c/0x9e0 [ 102.501479][ T36] netlink_sendmsg+0x805/0xb30 [ 102.506263][ T36] __sock_sendmsg+0x219/0x270 [ 102.510983][ T36] ____sys_sendmsg+0x505/0x830 [ 102.515770][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 102.520459][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 102.525406][ T36] do_syscall_64+0xfa/0x3b0 [ 102.529920][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.535822][ T36] [ 102.538153][ T36] Last potentially related work creation: [ 102.543874][ T36] kasan_save_stack+0x3e/0x60 [ 102.548564][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 102.553774][ T36] insert_work+0x3d/0x330 [ 102.558115][ T36] __queue_work+0xbd9/0xfe0 [ 102.562626][ T36] queue_work_on+0x181/0x270 [ 102.567227][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 102.572876][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 102.578350][ T36] geneve_offload_rx_ports+0xd7/0x160 [ 102.583739][ T36] geneve_netdevice_event+0x6a/0x80 [ 102.588961][ T36] notifier_call_chain+0x1b3/0x3e0 [ 102.594096][ T36] call_netdevice_notifiers+0x88/0xc0 [ 102.599489][ T36] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 102.605754][ T36] notifier_call_chain+0x1b3/0x3e0 [ 102.610972][ T36] register_netdevice+0x1608/0x1ae0 [ 102.616210][ T36] nsim_create+0xae8/0xf10 [ 102.620661][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 102.625793][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 102.630912][ T36] nsim_dev_reload_up+0x451/0x780 [ 102.635945][ T36] devlink_reload+0x4ec/0x8d0 [ 102.640632][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 102.646031][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 102.651596][ T36] genl_rcv_msg+0x60e/0x790 [ 102.656106][ T36] netlink_rcv_skb+0x208/0x470 [ 102.660880][ T36] genl_rcv+0x28/0x40 [ 102.664959][ T36] netlink_unicast+0x82c/0x9e0 [ 102.669742][ T36] netlink_sendmsg+0x805/0xb30 [ 102.674686][ T36] __sock_sendmsg+0x219/0x270 [ 102.679381][ T36] ____sys_sendmsg+0x505/0x830 [ 102.684247][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 102.688945][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 102.693907][ T36] do_syscall_64+0xfa/0x3b0 [ 102.698427][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.704328][ T36] [ 102.706660][ T36] Second to last potentially related work creation: [ 102.713241][ T36] kasan_save_stack+0x3e/0x60 [ 102.717930][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 102.723138][ T36] insert_work+0x3d/0x330 [ 102.727483][ T36] __queue_work+0xcfc/0xfe0 [ 102.732003][ T36] queue_work_on+0x181/0x270 [ 102.736619][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 102.742301][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 102.747784][ T36] geneve_offload_rx_ports+0xd7/0x160 [ 102.753173][ T36] geneve_netdevice_event+0x6a/0x80 [ 102.758407][ T36] notifier_call_chain+0x1b3/0x3e0 [ 102.763530][ T36] call_netdevice_notifiers+0x88/0xc0 [ 102.768917][ T36] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 102.775171][ T36] notifier_call_chain+0x1b3/0x3e0 [ 102.780292][ T36] register_netdevice+0x1608/0x1ae0 [ 102.785499][ T36] nsim_create+0xae8/0xf10 [ 102.789933][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 102.795071][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 102.800283][ T36] nsim_dev_reload_up+0x451/0x780 [ 102.805321][ T36] devlink_reload+0x4ec/0x8d0 [ 102.810016][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 102.815410][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 102.820972][ T36] genl_rcv_msg+0x60e/0x790 [ 102.825489][ T36] netlink_rcv_skb+0x208/0x470 [ 102.830265][ T36] genl_rcv+0x28/0x40 [ 102.834258][ T36] netlink_unicast+0x82c/0x9e0 [ 102.839036][ T36] netlink_sendmsg+0x805/0xb30 [ 102.843807][ T36] __sock_sendmsg+0x219/0x270 [ 102.848502][ T36] ____sys_sendmsg+0x505/0x830 [ 102.853358][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 102.858046][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 102.862991][ T36] do_syscall_64+0xfa/0x3b0 [ 102.867502][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.873399][ T36] [ 102.875729][ T36] The buggy address belongs to the object at ffff888033402200 [ 102.875729][ T36] which belongs to the cache kmalloc-256 of size 256 [ 102.889788][ T36] The buggy address is located 176 bytes inside of [ 102.889788][ T36] freed 256-byte region [ffff888033402200, ffff888033402300) [ 102.903599][ T36] [ 102.905938][ T36] The buggy address belongs to the physical page: [ 102.912361][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33402 [ 102.921153][ T36] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.929686][ T36] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 102.937251][ T36] page_type: f5(slab) [ 102.941332][ T36] raw: 00fff00000000040 ffff88801a441b40 dead000000000122 0000000000000000 [ 102.949923][ T36] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 102.958510][ T36] head: 00fff00000000040 ffff88801a441b40 dead000000000122 0000000000000000 [ 102.967183][ T36] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 102.975868][ T36] head: 00fff00000000001 ffffea0000cd0081 00000000ffffffff 00000000ffffffff [ 102.984544][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 102.993224][ T36] page dumped because: kasan: bad access detected [ 102.999658][ T36] page_owner tracks the page as allocated [ 103.005385][ T36] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5967, tgid 5966 (syz.1.6), ts 101702082162, free_ts 101698839046 [ 103.026499][ T36] post_alloc_hook+0x240/0x2a0 [ 103.031293][ T36] get_page_from_freelist+0x21e4/0x22c0 [ 103.036862][ T36] __alloc_frozen_pages_noprof+0x181/0x370 [ 103.042680][ T36] alloc_pages_mpol+0x232/0x4a0 [ 103.047548][ T36] allocate_slab+0x8a/0x3b0 [ 103.052062][ T36] ___slab_alloc+0xbfc/0x1480 [ 103.056753][ T36] __kmalloc_cache_noprof+0x296/0x3d0 [ 103.062313][ T36] nsim_dev_psample_init+0x58/0x570 [ 103.067522][ T36] nsim_dev_reload_up+0x3e0/0x780 [ 103.072582][ T36] devlink_reload+0x4ec/0x8d0 [ 103.077272][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 103.082654][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 103.088224][ T36] genl_rcv_msg+0x60e/0x790 [ 103.092754][ T36] netlink_rcv_skb+0x208/0x470 [ 103.097534][ T36] genl_rcv+0x28/0x40 [ 103.101533][ T36] netlink_unicast+0x82c/0x9e0 [ 103.106322][ T36] page last free pid 5985 tgid 5985 stack trace: [ 103.112739][ T36] __free_frozen_pages+0xc71/0xe70 [ 103.117871][ T36] pagetable_dtor_free+0x2d2/0x3b0 [ 103.122994][ T36] __mmdrop+0xb5/0x460 [ 103.127068][ T36] exit_mm+0x1da/0x2c0 [ 103.131153][ T36] do_exit+0x648/0x22e0 [ 103.135367][ T36] do_group_exit+0x21c/0x2d0 [ 103.139983][ T36] __x64_sys_exit_group+0x3f/0x40 [ 103.145025][ T36] x64_sys_call+0x21ba/0x21c0 [ 103.149735][ T36] do_syscall_64+0xfa/0x3b0 [ 103.154263][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.160172][ T36] [ 103.162505][ T36] Memory state around the buggy address: [ 103.168161][ T36] ffff888033402180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.176227][ T36] ffff888033402200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.184294][ T36] >ffff888033402280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.192355][ T36] ^ [ 103.197996][ T36] ffff888033402300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.206116][ T36] ffff888033402380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.214187][ T36] ================================================================== [ 103.252479][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 103.269622][ T6000] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.340348][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.347611][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc6-syzkaller-01576-g4701ee5044fb #0 PREEMPT(full) [ 103.359612][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.369685][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 103.377027][ T36] Call Trace: [ 103.380316][ T36] [ 103.383255][ T36] dump_stack_lvl+0x99/0x250 [ 103.387861][ T36] ? __asan_memcpy+0x40/0x70 [ 103.392460][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.397665][ T36] ? __pfx__printk+0x10/0x10 [ 103.402278][ T36] panic+0x2db/0x790 [ 103.406195][ T36] ? __pfx_panic+0x10/0x10 [ 103.410626][ T36] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 103.416544][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.422916][ T36] ? print_memory_metadata+0x314/0x400 [ 103.428395][ T36] ? __mutex_lock+0x144/0xe80 [ 103.433082][ T36] check_panic_on_warn+0x89/0xb0 [ 103.438038][ T36] ? __mutex_lock+0x144/0xe80 [ 103.442719][ T36] end_report+0x78/0x160 [ 103.446990][ T36] kasan_report+0x129/0x150 [ 103.451508][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 103.457416][ T36] ? __mutex_lock+0x144/0xe80 [ 103.462107][ T36] __mutex_lock+0x144/0xe80 [ 103.466616][ T36] ? __lock_acquire+0xab9/0xd20 [ 103.471485][ T36] ? __mutex_lock+0x51b/0xe80 [ 103.476185][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 103.482461][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 103.487497][ T36] ? __lock_acquire+0xab9/0xd20 [ 103.492360][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 103.498448][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 103.504178][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 103.509910][ T36] process_scheduled_works+0xae1/0x17b0 [ 103.515504][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.521600][ T36] worker_thread+0x8a0/0xda0 [ 103.526224][ T36] kthread+0x70e/0x8a0 [ 103.530311][ T36] ? __pfx_worker_thread+0x10/0x10 [ 103.535438][ T36] ? __pfx_kthread+0x10/0x10 [ 103.540047][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.545265][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.550481][ T36] ? __pfx_kthread+0x10/0x10 [ 103.555094][ T36] ret_from_fork+0x3fc/0x770 [ 103.559720][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 103.564966][ T36] ? __switch_to_asm+0x39/0x70 [ 103.569747][ T36] ? __switch_to_asm+0x33/0x70 [ 103.574534][ T36] ? __pfx_kthread+0x10/0x10 [ 103.579147][ T36] ret_from_fork_asm+0x1a/0x30 [ 103.583938][ T36] [ 103.587258][ T36] Kernel Offset: disabled [ 103.591584][ T36] Rebooting in 86400 seconds..