last executing test programs: 5.366355431s ago: executing program 1 (id=113): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x100000000000009, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=ANY=[@ANYBLOB="880000000314010000000000000000000900020073797a3100000600080041007278650014003300627269646765300000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e3100000000000000002600020073797a300000000008004100736977001400330076657468305f746f5f7465616d0000007793e6d3494f48dfa07bc789918cbadff55af3fdea20f40983a390b2bf8833a1980875c0e4ee33b8890bf282dc65530cd708c75ab96fd666f4deb04df52121cc14d2ae"], 0x88}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000010000108000000000000000000000000789f258109c9", @ANYRES32=0x0, @ANYBLOB="332000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x803, 0x6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.101658109s ago: executing program 1 (id=120): unshare(0x22020600) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) poll(0x0, 0x0, 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) r2 = socket(0xa, 0x2, 0x101) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640), 0x0, 0x44000) unshare(0x22020600) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) poll(0x0, 0x0, 0x200) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) (async) socket(0xa, 0x2, 0x101) (async) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000640), 0x0, 0x44000) (async) 4.883276117s ago: executing program 1 (id=125): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 4.693555073s ago: executing program 1 (id=126): socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000003740), &(0x7f0000003780)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, 0x0) socket(0x23, 0x803, 0xfffffffd) 2.481871977s ago: executing program 0 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$igmp6(0xa, 0x3, 0x2) unshare(0x20000400) unshare(0x400) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.478442762s ago: executing program 2 (id=137): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x20, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) socket(0x11, 0x80000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xca, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x10, 0x4}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) 2.357938207s ago: executing program 2 (id=138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe124510e2198061c, 0x0) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) unshare(0x2c020400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0x128}, {&(0x7f0000000340)="6609aa369e8dc5592640f70614372e0955c2033399f3b940414e39346bb4c8369e082c54372264c187c4075386855c5bb77d4302ca4d411f99fdc3c6b06c29b36b2721e92e9e701573d81b19d7b84f05f3d64d2507d1e587789cdf8b3b06fc4decaa9525defab75adcf55c75e53e8a6c8d7c5500"/127, 0x7f}, {&(0x7f0000000300)='l3', 0x2}, {&(0x7f0000000680)="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", 0x1000}], 0x4}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000000c0)={0x20000014}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 2.305350352s ago: executing program 3 (id=139): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x11, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r3, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40c4}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x8044) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r2, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r2, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 2.165637503s ago: executing program 0 (id=141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="96a116664ad74559c53a5c37bf77920a8e24e3f87917904747209a1e7a7bbd4a06345f71398baf73fc4e2138ce24f0e88c777e4ca8b1fa1a97a591f1b018cf14de7f48a08e12d8b4e2d3f376b583963b", @ANYRES8=0x0], 0xa) bind$bt_hci(r0, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd08000340000000030900020073797a3200000000080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x8) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 1.953093898s ago: executing program 2 (id=142): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4624, 0x0, @local, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket(0xa, 0x3, 0x3a) recvmmsg(r6, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000000c0)=0x5, 0x4) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c0004804c0001800b000100736f636b657400003c0002800800030000000024080002400000000f08000140000000040000000000000012080002400000000a080003000000001108000240000000162c0001800c00010062697477697365001c000280080003400000000408000140000000"], 0x118}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r4}, 0xc) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r4}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.881644573s ago: executing program 4 (id=143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = socket(0x23, 0x80805, 0x0) connect$netlink(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}}, 0x20000040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80020}, 0x40440e4) 1.880837978s ago: executing program 0 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.806826504s ago: executing program 4 (id=145): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000001c0)={0x3, @null, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000400fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000080000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) listen(r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) (async) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000001c0)={0x3, @null, r2}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000400fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000080000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) 1.741715463s ago: executing program 0 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000dc0)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000300)="2d882f6a12ab94a4a257f974bc71733dcba337642096ec891761e283d180f798f50ec8ffc870e9a8fa863aa3b7aacf1c1047a4d6ab697b7f8302f155295a92bd72b9276e253a49baeb27acda904b0a8b5daf080741879190070e68631e0356d0fabd2e6566f6736958abce93bd0b08e0764990bcb5b04a2057f842ad04957f0c", 0x80) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) socket$kcm(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r7) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r8, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a927d7a8c8c0ca1cb000100767863616e00008323ad4445d0fe7e7ca0001800", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.629724764s ago: executing program 4 (id=147): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f10000fe06"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) 1.493231551s ago: executing program 4 (id=148): socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x1d, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r3) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x1, 0x80000, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) close(0x3) close(0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) unshare(0x400) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001680)='lp\x00', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000680)={r9, r10, "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", "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"}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffc8, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c581, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x40804) 1.431784804s ago: executing program 3 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004c814c84b2f681e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) (async, rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2e8, 0x12, 0x400, 0x70bd25, 0x25dfdbfb, {0x1e, 0x0, 0x1, 0x8b, {0x4e23, 0x4e22, [0x8, 0x2, 0x5, 0x40], [0x2, 0x3, 0x8, 0x4], r7, [0x2, 0x9]}, 0x7, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0x45, 0x1, "30a521af07db7b2fb78402cc8078edea0866830c1cc8325856064351984362f67a87c6c962242d50c91f1be1618b2bec1a499a9eef4d0a84cfee00ea7e08408e0c"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "e4fe39ccde2908ab13e66e8c32509b37f33905b87762b4d9bdb9e3862f76920accc2d94d1c136f3690033db711ae38c15a381172b73bd1248bb4495fb0fa3fecbb975a4793073a4fae4e0610761a81b56180d83e6dedb91da10dbb49"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "883b7a26284f87d280922135d981128de2e2e39012a65d61527c71819c284c60f95fbdd96355ee7a37c288614895341a840e2e5581320d8bd40f02adf9aaead9fa3a83956eabab05719b03c58225ee1b9be3beb1614088e1fb27a61fdf6804bd95f774e5142c85d999c453ef7ef049cd3afe866378bd3727d3aa3cf89123018caa8874834e2dc77724"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "7796fb83d2c92b93f020d4c46ad388d2cf78dca7c5cfd3c7bc9de423c7ea7970e078cabcd3cdb809a0af37c39e37c8cdd8540383df38f543c1a1c29a6550a41907c5beeaf53d5dc2a3c6f508438cfb2376c16187ffbcaaa66703bf0afc424981d9da405a6d746937c48ef833e42666525efe2ee23be71d86f176a507ddc57390778490f4a6058fac82570c1a4a1a4cf487b49475b61dcd9f659a79ab14a7f7354cb0b60ad967de9e7cc237450b81aa848d1333a46756e6890945fb7fe11f2e444d28fde9"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "a8902572ef6733382fccbed381f71829078c210aeec5cb0dde212dbe7c60437f4ee2ecccac03bc4db11ff48c9b3a722de4f52af83407b7ec80eabfd74b28e9160e0c602b5b6036999fe8f1325df22017208eac1d7f39c239ee7ec72f10046dde4debfe421930f5e2444a35c1b7c07024bc548cd0901ed31ca59cc6412f70ca886a25be92a16e3923a71f75202a780c3e64e4554e10ca1176"}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (async, rerun: 64) close(r0) 1.261527373s ago: executing program 2 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {0x5}, {0x2, 0xb}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x40000006}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x101}]}}]}, 0x50}}, 0x4008000) 1.173121556s ago: executing program 2 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r5) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x40000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x8}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) 1.133032496s ago: executing program 0 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048811}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xf51) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="2aa229111272ff", 0x7}, {&(0x7f0000000200)="3cc5c48b32b27a215ed6734667e778fd5e31bd2a645c1ad3521f8bb3347afdda1150f0871a3dc29260bd8c43222471588c75a894d31eb4e0a8b9439adf553dd6c343aa6a7cb47d37bfcc1b89ff13a3e68d9ec5751948ea50e29915258db6597fa5c3ed168fe9704d5ecced81fd9dc1400a7b749d9495e6e621", 0x79}], 0x2}, 0x24044014) r3 = socket(0x10, 0x80002, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000040)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/144, 0x102000, 0x1800, 0x5, 0xa67dfaf8ec4ff713}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) socket(0x14, 0x2, 0x4) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r7, 0x10, 0xc0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee80463cfe73b167bb1f9df4f88cea000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071f0c3d030e8bbbf0cfeeb9a4c7128dfd8e44892ec6ce67d467590f3fc0f97a601bab44b9f21bc1102ca8e63d6b2e756e6f0faedf144026e6651d456f06a1e535c7815b6ed3f037c44bf671cc065403aa936240f8cabfdc86eea3befb318cde87f017d07a687d3558852a7a469"], 0xb8}}, 0x0) 957.491114ms ago: executing program 2 (id=153): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000cbfdd5fd9f3a98756fba587524d3"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) r8 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x204, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe36d}, {0x6, 0x11, 0xe5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6f00}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x58a2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xac}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x204, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe36d}, {0x6, 0x11, 0xe5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6f00}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x58a2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xac}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff) r10 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r10, 0x6180, 0x0) 957.232992ms ago: executing program 3 (id=154): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x340}], 0x1, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) preadv(r0, &(0x7f0000000c00)=[{&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f0000000600)}, {&(0x7f0000000780)=""/138, 0x8a}, {&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000640)=""/52, 0x34}, {0x0}, {&(0x7f0000000940)=""/146, 0x92}, {&(0x7f0000000a00)=""/223, 0xdf}, {&(0x7f0000000b00)=""/227, 0xe3}], 0x9, 0x2, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40fffffffc0900010073797a31000000001400"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000280)={0x16, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000c060101000000000000000002000801"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4) socket$netlink(0x10, 0x3, 0xf) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r8, 0x0, 0x6}, 0x18) socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 822.753492ms ago: executing program 3 (id=155): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100004806"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r2, 0x0, 0xf}, 0x18) 622.009108ms ago: executing program 1 (id=156): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x4000400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x28000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) sendmmsg$inet6(r2, 0x0, 0x0, 0x10) socket$isdn(0x22, 0x3, 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000003c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, r6, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(r8, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 523.381143ms ago: executing program 4 (id=157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd25, 0xffffffff, {0xa, 0x0, 0x20, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f08}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 506.507735ms ago: executing program 3 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x80, 0xd16a}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0xfffffffc}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 321.45371ms ago: executing program 3 (id=159): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)="b1072e84", 0x0, 0x80}, 0x38) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff0}}]}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'macsec0\x00', 0x2}) unshare(0x66000080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x80, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) unshare(0x10000800) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000600)=r4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabb000000000000810015895636cd2e251826f5a97d6962c2306c00"/45], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045006000000000000190780a010102ac1414aa05009078e00000024100000000000000fd8800007f000001e0000001440c0001000000004e21000044240001e0000001000000000000000000000000ac141400"/109], 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000240)) 320.938444ms ago: executing program 4 (id=160): unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(r2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r0, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r1, @ANYBLOB="51000e0080000000ffffffffffff08021100000008021100000000000000000000000000640043a00100040603077f00fc0025030034042a01013c040102b308710700000000010e08760609027fffe900000000080026006c09000008000c006400000008000d000000000018005a8014007593830080040002000700010005040b0004000200"], 0xa0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1297}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x7f}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x6, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0xe1}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYRES64=r4], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 172.699533ms ago: executing program 1 (id=161): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="d888f21c0007b7a6ec4724610aa5a07d598b2149ea3c79ec5b9b36b58633bc", @ANYRES32=0x1, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="35b684512f936fd7a2bd8394b181ad6eb23b86640ed1dc86b7b105217561e66c501428f4f6b64464d86a3ed9088ab72591d9ac0a1478572b2380a317818b9e7adcb2ee3e165048d1410f9be22088955b4353a0b207dc7967e0d4c811300295dad4ac6243f80664b8f18efd9d3bdf6a597ccd570312a0", @ANYBLOB], 0x48) socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) r6 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) (async) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0f0016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 0 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000002000000014001a8010"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 71.255135][ T5848] cgroup: Unknown subsys name 'net' [ 71.386823][ T5848] cgroup: Unknown subsys name 'cpuset' [ 71.395873][ T5848] cgroup: Unknown subsys name 'rlimit' [ 71.547103][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 72.846812][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.318024][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.346611][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.354949][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.358324][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.363279][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.370901][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.385497][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.385607][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.393796][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.401825][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.408055][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.414814][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.422068][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.441198][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.449013][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.457066][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.467500][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.480117][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.488926][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.496718][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.505047][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.518370][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.526778][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.539016][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.546913][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.100143][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.138413][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 76.255047][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 76.391883][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.399932][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.407901][ T5861] bridge_slave_0: entered allmulticast mode [ 76.417096][ T5861] bridge_slave_0: entered promiscuous mode [ 76.472142][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.479681][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.487462][ T5861] bridge_slave_1: entered allmulticast mode [ 76.494778][ T5861] bridge_slave_1: entered promiscuous mode [ 76.528062][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.535398][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.542881][ T5858] bridge_slave_0: entered allmulticast mode [ 76.551578][ T5858] bridge_slave_0: entered promiscuous mode [ 76.565302][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 76.610662][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.618055][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.625702][ T5858] bridge_slave_1: entered allmulticast mode [ 76.632848][ T5858] bridge_slave_1: entered promiscuous mode [ 76.668162][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.724634][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 76.739283][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.766071][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.780504][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.790109][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.797474][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.804987][ T5875] bridge_slave_0: entered allmulticast mode [ 76.812413][ T5875] bridge_slave_0: entered promiscuous mode [ 76.857168][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.864435][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.871682][ T5875] bridge_slave_1: entered allmulticast mode [ 76.879001][ T5875] bridge_slave_1: entered promiscuous mode [ 76.951158][ T5861] team0: Port device team_slave_0 added [ 76.964370][ T5858] team0: Port device team_slave_0 added [ 77.001551][ T5861] team0: Port device team_slave_1 added [ 77.009312][ T5858] team0: Port device team_slave_1 added [ 77.031253][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.071840][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.079310][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.086948][ T5867] bridge_slave_0: entered allmulticast mode [ 77.094587][ T5867] bridge_slave_0: entered promiscuous mode [ 77.104697][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.148331][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.155573][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.162903][ T5867] bridge_slave_1: entered allmulticast mode [ 77.170828][ T5867] bridge_slave_1: entered promiscuous mode [ 77.206974][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.214238][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.241468][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.253836][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.260824][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.287110][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.335448][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.342439][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.370048][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.381808][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.389392][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.415401][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.446142][ T5875] team0: Port device team_slave_0 added [ 77.455085][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.465111][ T5874] Bluetooth: hci1: command tx timeout [ 77.465982][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.478110][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.485887][ T5869] bridge_slave_0: entered allmulticast mode [ 77.492964][ T5869] bridge_slave_0: entered promiscuous mode [ 77.509399][ T5875] team0: Port device team_slave_1 added [ 77.535994][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.545327][ T5874] Bluetooth: hci2: command tx timeout [ 77.545623][ T5874] Bluetooth: hci0: command tx timeout [ 77.556296][ T5872] Bluetooth: hci3: command tx timeout [ 77.568798][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576212][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.584030][ T5869] bridge_slave_1: entered allmulticast mode [ 77.591044][ T5869] bridge_slave_1: entered promiscuous mode [ 77.623391][ T5872] Bluetooth: hci4: command tx timeout [ 77.697787][ T5858] hsr_slave_0: entered promiscuous mode [ 77.704661][ T5858] hsr_slave_1: entered promiscuous mode [ 77.711622][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.719880][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.746014][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.759696][ T5867] team0: Port device team_slave_0 added [ 77.768684][ T5867] team0: Port device team_slave_1 added [ 77.776931][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.805124][ T5861] hsr_slave_0: entered promiscuous mode [ 77.811446][ T5861] hsr_slave_1: entered promiscuous mode [ 77.818028][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 77.823917][ T5861] Cannot create hsr debugfs directory [ 77.830388][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.837532][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.864025][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.894822][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.982244][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.989351][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.015390][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.028423][ T5869] team0: Port device team_slave_0 added [ 78.077003][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.084431][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.111036][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.129464][ T5869] team0: Port device team_slave_1 added [ 78.153681][ T5875] hsr_slave_0: entered promiscuous mode [ 78.160255][ T5875] hsr_slave_1: entered promiscuous mode [ 78.166703][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 78.172522][ T5875] Cannot create hsr debugfs directory [ 78.270386][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.277457][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.303567][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.351467][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.358845][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.385029][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.468209][ T5867] hsr_slave_0: entered promiscuous mode [ 78.475216][ T5867] hsr_slave_1: entered promiscuous mode [ 78.481312][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 78.487274][ T5867] Cannot create hsr debugfs directory [ 78.618507][ T5869] hsr_slave_0: entered promiscuous mode [ 78.625796][ T5869] hsr_slave_1: entered promiscuous mode [ 78.631904][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 78.637806][ T5869] Cannot create hsr debugfs directory [ 78.894988][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.908890][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.947993][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.986813][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.065480][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.089233][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.114371][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.128166][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.182479][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.203570][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.217278][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.229984][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.329006][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.365334][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.379388][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.391025][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.516631][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.527572][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.539645][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.551044][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.554022][ T5872] Bluetooth: hci1: command tx timeout [ 79.571346][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.623264][ T5874] Bluetooth: hci2: command tx timeout [ 79.629076][ T5872] Bluetooth: hci3: command tx timeout [ 79.635350][ T5872] Bluetooth: hci0: command tx timeout [ 79.648376][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.696603][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.703959][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.711903][ T5874] Bluetooth: hci4: command tx timeout [ 79.730646][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.737868][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.775983][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.816449][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.830150][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.868760][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.875988][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.915958][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.923437][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.952722][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.972769][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.994229][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.047717][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.058863][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.066063][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.114282][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.121558][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.152408][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.159648][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.249082][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.256459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.299965][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.371380][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.401350][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.475102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.482707][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.553940][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.561145][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.812078][ T5861] veth0_vlan: entered promiscuous mode [ 80.862316][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.882125][ T5861] veth1_vlan: entered promiscuous mode [ 80.926838][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.998501][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.042669][ T5861] veth0_macvtap: entered promiscuous mode [ 81.110321][ T5861] veth1_macvtap: entered promiscuous mode [ 81.160896][ T5875] veth0_vlan: entered promiscuous mode [ 81.219928][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.232653][ T5875] veth1_vlan: entered promiscuous mode [ 81.265243][ T5867] veth0_vlan: entered promiscuous mode [ 81.281433][ T5867] veth1_vlan: entered promiscuous mode [ 81.298290][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.362672][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384674][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406293][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.429259][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.480424][ T5867] veth0_macvtap: entered promiscuous mode [ 81.511028][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.531281][ T5867] veth1_macvtap: entered promiscuous mode [ 81.541067][ T5875] veth0_macvtap: entered promiscuous mode [ 81.569752][ T5875] veth1_macvtap: entered promiscuous mode [ 81.625682][ T5874] Bluetooth: hci1: command tx timeout [ 81.644572][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.677648][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.691767][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.703812][ T5874] Bluetooth: hci0: command tx timeout [ 81.705666][ T5872] Bluetooth: hci3: command tx timeout [ 81.709689][ T5866] Bluetooth: hci2: command tx timeout [ 81.720432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.724076][ T5858] veth0_vlan: entered promiscuous mode [ 81.738696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.749474][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.794146][ T5866] Bluetooth: hci4: command tx timeout [ 81.819121][ T5858] veth1_vlan: entered promiscuous mode [ 81.827175][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.878750][ T5869] veth0_vlan: entered promiscuous mode [ 81.891319][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.910885][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.966820][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.968718][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.988521][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.043204][ T1151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.052226][ T1151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.093705][ T5869] veth1_vlan: entered promiscuous mode [ 82.159425][ T1151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.178457][ T5858] veth0_macvtap: entered promiscuous mode [ 82.199561][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.220471][ T5858] veth1_macvtap: entered promiscuous mode [ 82.264351][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.265837][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272373][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.398490][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.412906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.439765][ T5869] veth0_macvtap: entered promiscuous mode [ 82.447979][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.487865][ T5869] veth1_macvtap: entered promiscuous mode [ 82.512169][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.545328][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.568607][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.580179][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.601102][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.703558][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.715630][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.757048][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.760644][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.773429][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.784690][ T5981] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 82.817634][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.879411][ T1151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.979385][ T5983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.991929][ T5990] Zero length message leads to an empty skb [ 83.000964][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.043789][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.060931][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.130779][ T5983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.152504][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.201098][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.220255][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.261534][ T5990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.301940][ T5983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.358270][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.369757][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.402244][ T5990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.488799][ T5983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.549654][ T5990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.707047][ T5866] Bluetooth: hci1: command tx timeout [ 83.745922][ T5990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.783457][ T5866] Bluetooth: hci2: command tx timeout [ 83.789003][ T5866] Bluetooth: hci3: command tx timeout [ 83.794766][ T5866] Bluetooth: hci0: command tx timeout [ 83.864204][ T5866] Bluetooth: hci4: command tx timeout [ 83.954612][ T5997] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 84.002999][ T5997] team0: Port device dummy0 added [ 84.041608][ T5997] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 84.126074][ T5997] team0: Port device dummy0 removed [ 84.148692][ T5997] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.174743][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.185333][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.333418][ T1323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.387868][ T1323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.449276][ T1323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.449423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.463916][ T1323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.474473][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.516616][ T6001] macvlan2: entered allmulticast mode [ 84.522048][ T6001] veth1_vlan: entered allmulticast mode [ 84.553851][ T6001] veth1_vlan: left allmulticast mode [ 85.057579][ T6010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.085169][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.118699][ T6010] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.847731][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 86.341098][ T6067] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 86.370795][ T6068] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 86.480423][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 86.542129][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.550487][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.680159][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.695726][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.850007][ T6076] tipc: Started in network mode [ 86.856732][ T6076] tipc: Node identity 9a89a4018b2, cluster identity 4711 [ 86.867921][ T6076] tipc: Enabled bearer , priority 0 [ 86.883283][ T1321] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.894706][ T1321] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.920625][ T24] cfg80211: failed to load regulatory.db [ 86.978326][ T1321] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.991312][ T1321] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.021306][ T1321] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.067135][ T6076] tipc: Disabling bearer [ 87.086960][ T1037] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.127120][ T1037] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170707][ T1037] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.248611][ T6094] syzkaller0: entered promiscuous mode [ 87.270183][ T6094] syzkaller0: entered allmulticast mode [ 87.297906][ T6094] tipc: Started in network mode [ 87.319328][ T6106] netlink: 56 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.325739][ T6094] tipc: Node identity 5eed4f244382, cluster identity 4711 [ 87.342433][ T6094] tipc: Enabled bearer , priority 0 [ 87.369429][ T6094] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.436762][ T6094] tipc: Resetting bearer [ 87.456701][ T6097] : entered promiscuous mode [ 87.462899][ T6093] tipc: Resetting bearer [ 87.529004][ T6093] tipc: Disabling bearer [ 87.549958][ T6118] warning: `syz.4.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.935382][ T6142] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 87.977477][ T6144] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 87.992044][ T6144] netlink: 43 bytes leftover after parsing attributes in process `syz.3.49'. [ 88.001804][ T6144] netlink: 'syz.3.49': attribute type 6 has an invalid length. [ 88.014580][ T6144] netlink: 'syz.3.49': attribute type 5 has an invalid length. [ 88.022342][ T6144] netlink: 43 bytes leftover after parsing attributes in process `syz.3.49'. [ 88.172498][ T5985] IPVS: starting estimator thread 0... [ 88.188714][ T6146] v: renamed from veth1_vlan [ 88.273235][ T6157] IPVS: using max 27 ests per chain, 64800 per kthread [ 88.297131][ T6161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.51'. [ 88.353817][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 88.391608][ T6160] netlink: 'syz.1.54': attribute type 2 has an invalid length. [ 88.403088][ T6165] netlink: 'syz.1.54': attribute type 2 has an invalid length. [ 88.503667][ T6172] veth0: entered promiscuous mode [ 89.237273][ T6207] TCP: TCP_TX_DELAY enabled [ 89.741106][ T6234] syzkaller0: entered promiscuous mode [ 89.777930][ T6234] syzkaller0: entered allmulticast mode [ 91.340197][ T6238] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 91.349425][ T6238] macvtap1: entered allmulticast mode [ 91.355057][ T6238] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 91.373325][ T6238] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 91.382545][ T6238] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 91.411412][ T6281] openvswitch: netlink: Multiple metadata blocks provided [ 91.424564][ T6281] openvswitch: netlink: Multiple metadata blocks provided [ 91.448999][ T6268] tipc: Started in network mode [ 91.463899][ T6268] tipc: Node identity 1a3984c3d747, cluster identity 4711 [ 91.471219][ T6268] tipc: Enabled bearer , priority 0 [ 91.508934][ T6269] syzkaller0: entered promiscuous mode [ 91.514652][ T6269] syzkaller0: entered allmulticast mode [ 91.524330][ T6277] tipc: Resetting bearer [ 91.541397][ T6285] netlink: 'syz.3.87': attribute type 13 has an invalid length. [ 91.569018][ T6273] tipc: Resetting bearer [ 91.606752][ T6273] tipc: Disabling bearer [ 91.891632][ T6307] __nla_validate_parse: 3 callbacks suppressed [ 91.891652][ T6307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.94'. [ 92.266514][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 92.280221][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 92.290034][ T6318] netlink: 'syz.2.98': attribute type 20 has an invalid length. [ 92.339071][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 92.381868][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.390909][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.411943][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.445563][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.606130][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 92.655241][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 92.822119][ T6342] bridge_slave_0: left allmulticast mode [ 92.832911][ T6342] bridge_slave_0: left promiscuous mode [ 92.842092][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.888369][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 93.230207][ T6342] bridge_slave_1: left allmulticast mode [ 93.237725][ T6342] bridge_slave_1: left promiscuous mode [ 93.251269][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.330448][ T6342] bond0: (slave bond_slave_0): Releasing backup interface [ 93.352247][ T6342] bond0: (slave bond_slave_1): Releasing backup interface [ 93.378531][ T6342] team0: Port device team_slave_0 removed [ 93.392931][ T6342] team0: Port device team_slave_1 removed [ 93.399631][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.409413][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.419533][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.427400][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.541570][ T6355] team0: Mode changed to "activebackup" [ 93.718511][ T6370] netlink: 256 bytes leftover after parsing attributes in process `syz.0.112'. [ 93.800548][ T6376] netlink: 'syz.1.113': attribute type 3 has an invalid length. [ 93.887305][ T6383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.933914][ T6390] sctp: [Deprecated]: syz.3.116 (pid 6390) Use of int in max_burst socket option. [ 93.933914][ T6390] Use struct sctp_assoc_value instead [ 94.158149][ T6401] netlink: 'syz.2.118': attribute type 4 has an invalid length. [ 94.330819][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 94.371177][ T6421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 94.408501][ T6419] syzkaller1: entered promiscuous mode [ 94.416326][ T6419] syzkaller1: entered allmulticast mode [ 96.109737][ T6422] vlan1: entered allmulticast mode [ 96.115041][ T6422] bridge0: entered allmulticast mode [ 96.121207][ T6422] bridge1: port 1(vlan1) entered blocking state [ 96.130538][ T6422] bridge1: port 1(vlan1) entered disabled state [ 96.141978][ T6422] vlan1: entered promiscuous mode [ 96.147484][ T6422] bridge0: entered promiscuous mode [ 96.357350][ T6438] netlink: 'syz.0.128': attribute type 9 has an invalid length. [ 96.431435][ T6438] macvlan2: entered promiscuous mode [ 96.448204][ T6438] hsr0: entered promiscuous mode [ 96.461252][ T6438] macvlan2: entered allmulticast mode [ 96.470052][ T6438] hsr0: entered allmulticast mode [ 96.481226][ T6438] hsr_slave_0: entered allmulticast mode [ 96.489032][ T6438] hsr_slave_1: entered allmulticast mode [ 96.645175][ T6455] pimreg: tun_chr_ioctl cmd 2147767506 [ 96.684689][ T6445] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 96.989332][ T6473] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 97.068129][ T6473] bond1: entered promiscuous mode [ 97.082507][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.105616][ T6483] __nla_validate_parse: 2 callbacks suppressed [ 97.105635][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 97.209073][ T6483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 97.426695][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 97.429578][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.145'. [ 97.453658][ T6488] bridge0: entered allmulticast mode [ 97.472975][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 97.483333][ T6488] bridge_slave_1: left allmulticast mode [ 97.490772][ T6488] bridge_slave_1: left promiscuous mode [ 97.497096][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.514630][ T6488] bridge_slave_0: left allmulticast mode [ 97.535705][ T6488] bridge_slave_0: left promiscuous mode [ 97.546002][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.629028][ T6488] bridge0 (unregistering): left allmulticast mode [ 97.691370][ T6504] team0: No ports can be present during mode change [ 97.722157][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.146'. [ 97.837586][ T6509] openvswitch: netlink: IP tunnel dst address not specified [ 97.876537][ T6506] can: request_module (can-proto-0) failed. [ 98.144659][ T6519] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 98.328243][ T6526] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.352899][ T6526] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.427505][ T6526] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.441192][ T6526] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.502108][ T6526] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.544527][ T6526] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.661509][ T6526] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.677885][ T6526] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.742411][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.157'. [ 98.897682][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.915020][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.945991][ T6548] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 98.957505][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.971644][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.988654][ T6550] xt_policy: neither incoming nor outgoing policy selected [ 99.041971][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 99.077594][ T48] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.101155][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.151715][ T6552] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 99.178023][ T6555] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.206438][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.215885][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.232837][ T6527] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.243617][ T6527] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.271009][ T48] ================================================================== [ 99.279133][ T48] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 99.286677][ T48] Read of size 8 at addr ffff88807df46ab0 by task kworker/u8:3/48 [ 99.294487][ T48] [ 99.296862][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 99.296878][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.296886][ T48] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 99.296915][ T48] Call Trace: [ 99.296921][ T48] [ 99.296928][ T48] dump_stack_lvl+0x189/0x250 [ 99.296941][ T48] ? __kasan_check_byte+0x12/0x40 [ 99.296955][ T48] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.296966][ T48] ? lock_release+0x4b/0x3e0 [ 99.296981][ T48] ? __virt_addr_valid+0x4a5/0x5c0 [ 99.296996][ T48] print_report+0xca/0x240 [ 99.297006][ T48] ? __mutex_lock+0x147/0x1350 [ 99.297016][ T48] kasan_report+0x118/0x150 [ 99.297028][ T48] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 99.297043][ T48] ? __mutex_lock+0x147/0x1350 [ 99.297054][ T48] __mutex_lock+0x147/0x1350 [ 99.297064][ T48] ? __mutex_lock+0x5bb/0x1350 [ 99.297074][ T48] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 99.297089][ T48] ? __pfx___mutex_lock+0x10/0x10 [ 99.297101][ T48] ? __lock_acquire+0xab9/0xd20 [ 99.297117][ T48] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 99.297133][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 99.297142][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 99.297155][ T48] process_scheduled_works+0xae1/0x17b0 [ 99.297181][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.297201][ T48] worker_thread+0x8a0/0xda0 [ 99.297227][ T48] kthread+0x70e/0x8a0 [ 99.297243][ T48] ? __pfx_worker_thread+0x10/0x10 [ 99.297251][ T48] ? __pfx_kthread+0x10/0x10 [ 99.297262][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.297276][ T48] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.297284][ T48] ? __pfx_kthread+0x10/0x10 [ 99.297294][ T48] ret_from_fork+0x3f9/0x770 [ 99.297305][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 99.297315][ T48] ? __switch_to_asm+0x39/0x70 [ 99.297327][ T48] ? __switch_to_asm+0x33/0x70 [ 99.297338][ T48] ? __pfx_kthread+0x10/0x10 [ 99.297349][ T48] ret_from_fork_asm+0x1a/0x30 [ 99.297364][ T48] [ 99.297368][ T48] [ 99.501297][ T48] Allocated by task 6526: [ 99.505610][ T48] kasan_save_track+0x3e/0x80 [ 99.510365][ T48] __kasan_kmalloc+0x93/0xb0 [ 99.514941][ T48] __kmalloc_noprof+0x27a/0x4f0 [ 99.519791][ T48] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 99.525975][ T48] notifier_call_chain+0x1b6/0x3e0 [ 99.531079][ T48] register_netdevice+0x1608/0x1ae0 [ 99.536263][ T48] nsim_create+0xae8/0xf10 [ 99.540672][ T48] __nsim_dev_port_add+0x6b6/0xb10 [ 99.545779][ T48] nsim_dev_port_add_all+0x37/0xf0 [ 99.550984][ T48] nsim_dev_reload_up+0x451/0x780 [ 99.556099][ T48] devlink_reload+0x4ec/0x8d0 [ 99.560850][ T48] devlink_nl_reload_doit+0xb35/0xd50 [ 99.567384][ T48] genl_family_rcv_msg_doit+0x215/0x300 [ 99.573111][ T48] genl_rcv_msg+0x60e/0x790 [ 99.577829][ T48] netlink_rcv_skb+0x208/0x470 [ 99.582950][ T48] genl_rcv+0x28/0x40 [ 99.587028][ T48] netlink_unicast+0x82c/0x9e0 [ 99.592055][ T48] netlink_sendmsg+0x805/0xb30 [ 99.596808][ T48] __sock_sendmsg+0x21c/0x270 [ 99.601613][ T48] ____sys_sendmsg+0x505/0x830 [ 99.606378][ T48] ___sys_sendmsg+0x21f/0x2a0 [ 99.611045][ T48] __x64_sys_sendmsg+0x19b/0x260 [ 99.615970][ T48] do_syscall_64+0xfa/0x3b0 [ 99.620913][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.626794][ T48] [ 99.629105][ T48] Freed by task 6527: [ 99.633067][ T48] kasan_save_track+0x3e/0x80 [ 99.637737][ T48] kasan_save_free_info+0x46/0x50 [ 99.642748][ T48] __kasan_slab_free+0x5b/0x80 [ 99.647504][ T48] kfree+0x18e/0x440 [ 99.651403][ T48] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 99.657648][ T48] notifier_call_chain+0x1b6/0x3e0 [ 99.662751][ T48] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 99.669157][ T48] unregister_netdevice_queue+0x33c/0x380 [ 99.674901][ T48] nsim_destroy+0x1dd/0x670 [ 99.679408][ T48] __nsim_dev_port_del+0x14d/0x1b0 [ 99.684515][ T48] nsim_dev_reload_destroy+0x288/0x490 [ 99.690052][ T48] nsim_dev_reload_down+0x8a/0xc0 [ 99.695067][ T48] devlink_reload+0x1b6/0x8d0 [ 99.699759][ T48] devlink_nl_reload_doit+0xb35/0xd50 [ 99.705115][ T48] genl_family_rcv_msg_doit+0x215/0x300 [ 99.710736][ T48] genl_rcv_msg+0x60e/0x790 [ 99.715230][ T48] netlink_rcv_skb+0x208/0x470 [ 99.720028][ T48] genl_rcv+0x28/0x40 [ 99.724000][ T48] netlink_unicast+0x82c/0x9e0 [ 99.728754][ T48] netlink_sendmsg+0x805/0xb30 [ 99.733511][ T48] __sock_sendmsg+0x21c/0x270 [ 99.738180][ T48] ____sys_sendmsg+0x505/0x830 [ 99.742987][ T48] ___sys_sendmsg+0x21f/0x2a0 [ 99.747767][ T48] __x64_sys_sendmsg+0x19b/0x260 [ 99.752735][ T48] do_syscall_64+0xfa/0x3b0 [ 99.757239][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.763118][ T48] [ 99.765434][ T48] Last potentially related work creation: [ 99.771130][ T48] kasan_save_stack+0x3e/0x60 [ 99.775880][ T48] kasan_record_aux_stack+0xbd/0xd0 [ 99.781078][ T48] insert_work+0x3d/0x330 [ 99.785426][ T48] __queue_work+0xbaf/0xfb0 [ 99.790009][ T48] queue_work_on+0x181/0x270 [ 99.794680][ T48] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 99.800304][ T48] udp_tunnel_push_rx_port+0x180/0x200 [ 99.805792][ T48] geneve_offload_rx_ports+0xd7/0x160 [ 99.811158][ T48] geneve_netdevice_event+0x6a/0x80 [ 99.816342][ T48] notifier_call_chain+0x1b6/0x3e0 [ 99.821437][ T48] call_netdevice_notifiers+0x88/0xc0 [ 99.826806][ T48] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 99.833053][ T48] notifier_call_chain+0x1b6/0x3e0 [ 99.838161][ T48] register_netdevice+0x1608/0x1ae0 [ 99.843398][ T48] nsim_create+0xae8/0xf10 [ 99.847808][ T48] __nsim_dev_port_add+0x6b6/0xb10 [ 99.852996][ T48] nsim_dev_port_add_all+0x37/0xf0 [ 99.858098][ T48] nsim_dev_reload_up+0x451/0x780 [ 99.863135][ T48] devlink_reload+0x4ec/0x8d0 [ 99.867830][ T48] devlink_nl_reload_doit+0xb35/0xd50 [ 99.873207][ T48] genl_family_rcv_msg_doit+0x215/0x300 [ 99.878759][ T48] genl_rcv_msg+0x60e/0x790 [ 99.883261][ T48] netlink_rcv_skb+0x208/0x470 [ 99.888111][ T48] genl_rcv+0x28/0x40 [ 99.892091][ T48] netlink_unicast+0x82c/0x9e0 [ 99.896847][ T48] netlink_sendmsg+0x805/0xb30 [ 99.901604][ T48] __sock_sendmsg+0x21c/0x270 [ 99.906275][ T48] ____sys_sendmsg+0x505/0x830 [ 99.911197][ T48] ___sys_sendmsg+0x21f/0x2a0 [ 99.915858][ T48] __x64_sys_sendmsg+0x19b/0x260 [ 99.920783][ T48] do_syscall_64+0xfa/0x3b0 [ 99.925878][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.931763][ T48] [ 99.934083][ T48] Second to last potentially related work creation: [ 99.940844][ T48] kasan_save_stack+0x3e/0x60 [ 99.945533][ T48] kasan_record_aux_stack+0xbd/0xd0 [ 99.950746][ T48] insert_work+0x3d/0x330 [ 99.955173][ T48] __queue_work+0xcd2/0xfb0 [ 99.959715][ T48] queue_work_on+0x181/0x270 [ 99.964830][ T48] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 99.970548][ T48] udp_tunnel_push_rx_port+0x180/0x200 [ 99.976105][ T48] vxlan_offload_rx_ports+0x139/0x200 [ 99.981556][ T48] vxlan_netdevice_event+0x111/0x470 [ 99.986831][ T48] notifier_call_chain+0x1b6/0x3e0 [ 99.992028][ T48] call_netdevice_notifiers+0x88/0xc0 [ 99.997475][ T48] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 100.003751][ T48] notifier_call_chain+0x1b6/0x3e0 [ 100.008847][ T48] register_netdevice+0x1608/0x1ae0 [ 100.014048][ T48] nsim_create+0xae8/0xf10 [ 100.018451][ T48] __nsim_dev_port_add+0x6b6/0xb10 [ 100.023810][ T48] nsim_dev_port_add_all+0x37/0xf0 [ 100.028930][ T48] nsim_dev_reload_up+0x451/0x780 [ 100.033978][ T48] devlink_reload+0x4ec/0x8d0 [ 100.038655][ T48] devlink_nl_reload_doit+0xb35/0xd50 [ 100.044023][ T48] genl_family_rcv_msg_doit+0x215/0x300 [ 100.049745][ T48] genl_rcv_msg+0x60e/0x790 [ 100.054253][ T48] netlink_rcv_skb+0x208/0x470 [ 100.059022][ T48] genl_rcv+0x28/0x40 [ 100.062991][ T48] netlink_unicast+0x82c/0x9e0 [ 100.067746][ T48] netlink_sendmsg+0x805/0xb30 [ 100.072525][ T48] __sock_sendmsg+0x21c/0x270 [ 100.077228][ T48] ____sys_sendmsg+0x505/0x830 [ 100.082257][ T48] ___sys_sendmsg+0x21f/0x2a0 [ 100.087106][ T48] __x64_sys_sendmsg+0x19b/0x260 [ 100.092658][ T48] do_syscall_64+0xfa/0x3b0 [ 100.097202][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.103277][ T48] [ 100.105682][ T48] The buggy address belongs to the object at ffff88807df46a00 [ 100.105682][ T48] which belongs to the cache kmalloc-256 of size 256 [ 100.120073][ T48] The buggy address is located 176 bytes inside of [ 100.120073][ T48] freed 256-byte region [ffff88807df46a00, ffff88807df46b00) [ 100.134296][ T48] [ 100.136614][ T48] The buggy address belongs to the physical page: [ 100.143022][ T48] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7df46 [ 100.151778][ T48] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.160264][ T48] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.168079][ T48] page_type: f5(slab) [ 100.172059][ T48] raw: 00fff00000000040 ffff88801a441b40 ffffea0000cb5c00 dead000000000004 [ 100.180670][ T48] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 100.189266][ T48] head: 00fff00000000040 ffff88801a441b40 ffffea0000cb5c00 dead000000000004 [ 100.198031][ T48] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 100.206727][ T48] head: 00fff00000000001 ffffea0001f7d181 00000000ffffffff 00000000ffffffff [ 100.215404][ T48] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 100.224146][ T48] page dumped because: kasan: bad access detected [ 100.230678][ T48] page_owner tracks the page as allocated [ 100.236415][ T48] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6001, tgid 5999 (syz.3.7), ts 84513722697, free_ts 84282080668 [ 100.257419][ T48] post_alloc_hook+0x240/0x2a0 [ 100.262186][ T48] get_page_from_freelist+0x21e4/0x22c0 [ 100.267723][ T48] __alloc_frozen_pages_noprof+0x181/0x370 [ 100.273519][ T48] alloc_pages_mpol+0x232/0x4a0 [ 100.278366][ T48] allocate_slab+0x8a/0x370 [ 100.282857][ T48] ___slab_alloc+0xbeb/0x1410 [ 100.287617][ T48] __kmalloc_noprof+0x305/0x4f0 [ 100.292479][ T48] __register_sysctl_table+0xba1/0x1340 [ 100.298015][ T48] neigh_sysctl_register+0x9a2/0xa80 [ 100.303291][ T48] devinet_sysctl_register+0xad/0x200 [ 100.308652][ T48] inetdev_init+0x2b4/0x500 [ 100.313141][ T48] inetdev_event+0x301/0x15b0 [ 100.317804][ T48] notifier_call_chain+0x1b6/0x3e0 [ 100.323036][ T48] register_netdevice+0x1608/0x1ae0 [ 100.328245][ T48] macvlan_common_newlink+0x120a/0x1980 [ 100.333794][ T48] rtnl_newlink_create+0x310/0xb00 [ 100.338908][ T48] page last free pid 5999 tgid 5999 stack trace: [ 100.345218][ T48] __free_frozen_pages+0xbc4/0xd30 [ 100.350507][ T48] __slab_free+0x303/0x3c0 [ 100.354921][ T48] qlist_free_all+0x97/0x140 [ 100.359601][ T48] kasan_quarantine_reduce+0x148/0x160 [ 100.365054][ T48] __kasan_slab_alloc+0x22/0x80 [ 100.369938][ T48] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 100.375488][ T48] ptlock_alloc+0x20/0x70 [ 100.379812][ T48] pte_alloc_one+0x7d/0x170 [ 100.384304][ T48] __handle_mm_fault+0x2795/0x5440 [ 100.389429][ T48] handle_mm_fault+0x40a/0x8e0 [ 100.394197][ T48] do_user_addr_fault+0xa81/0x1390 [ 100.399304][ T48] exc_page_fault+0x76/0xf0 [ 100.403796][ T48] asm_exc_page_fault+0x26/0x30 [ 100.408637][ T48] [ 100.410946][ T48] Memory state around the buggy address: [ 100.416590][ T48] ffff88807df46980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.424636][ T48] ffff88807df46a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.432683][ T48] >ffff88807df46a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.440727][ T48] ^ [ 100.446342][ T48] ffff88807df46b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.454398][ T48] ffff88807df46b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.462452][ T48] ================================================================== [ 100.485781][ T48] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.493118][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 100.502414][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.512476][ T48] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 100.519782][ T48] Call Trace: [ 100.523137][ T48] [ 100.526173][ T48] dump_stack_lvl+0x99/0x250 [ 100.530756][ T48] ? __asan_memcpy+0x40/0x70 [ 100.535332][ T48] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.540521][ T48] ? __pfx__printk+0x10/0x10 [ 100.545122][ T48] vpanic+0x281/0x750 [ 100.549105][ T48] ? preempt_schedule+0xae/0xc0 [ 100.553950][ T48] ? __pfx_vpanic+0x10/0x10 [ 100.558469][ T48] ? preempt_schedule_common+0x83/0xd0 [ 100.563928][ T48] ? preempt_schedule+0xae/0xc0 [ 100.568775][ T48] ? __pfx_preempt_schedule+0x10/0x10 [ 100.574161][ T48] panic+0xb9/0xc0 [ 100.577876][ T48] ? __pfx_panic+0x10/0x10 [ 100.582277][ T48] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 100.588185][ T48] ? __mutex_lock+0x147/0x1350 [ 100.592939][ T48] check_panic_on_warn+0x89/0xb0 [ 100.597865][ T48] ? __mutex_lock+0x147/0x1350 [ 100.602630][ T48] end_report+0x78/0x160 [ 100.606889][ T48] kasan_report+0x129/0x150 [ 100.611384][ T48] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.617268][ T48] ? __mutex_lock+0x147/0x1350 [ 100.622020][ T48] __mutex_lock+0x147/0x1350 [ 100.626595][ T48] ? __mutex_lock+0x5bb/0x1350 [ 100.631346][ T48] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 100.637582][ T48] ? __pfx___mutex_lock+0x10/0x10 [ 100.642630][ T48] ? __lock_acquire+0xab9/0xd20 [ 100.647490][ T48] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 100.653577][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 100.659290][ T48] ? process_scheduled_works+0x9ef/0x17b0 [ 100.665123][ T48] process_scheduled_works+0xae1/0x17b0 [ 100.670706][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.676889][ T48] worker_thread+0x8a0/0xda0 [ 100.681504][ T48] kthread+0x70e/0x8a0 [ 100.685565][ T48] ? __pfx_worker_thread+0x10/0x10 [ 100.690751][ T48] ? __pfx_kthread+0x10/0x10 [ 100.695355][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.700563][ T48] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.705767][ T48] ? __pfx_kthread+0x10/0x10 [ 100.710357][ T48] ret_from_fork+0x3f9/0x770 [ 100.714937][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 100.720045][ T48] ? __switch_to_asm+0x39/0x70 [ 100.724796][ T48] ? __switch_to_asm+0x33/0x70 [ 100.729548][ T48] ? __pfx_kthread+0x10/0x10 [ 100.734129][ T48] ret_from_fork_asm+0x1a/0x30 [ 100.738894][ T48] [ 100.742172][ T48] Kernel Offset: disabled [ 100.746482][ T48] Rebooting in 86400 seconds..