last executing test programs: 7m33.534846315s ago: executing program 4 (id=631): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000001200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000001300000020000000bc"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061114d00000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x800) (async, rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="181000007b17bad348b6f27a2c90572c2ea5cf8ed0e03e83d6f719933a3977848fbb9239c10d14c71b000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0xe0, &(0x7f00000004c0)=""/224}, 0x80) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="90da00ad", 0x4}], 0x1) 7m33.323256989s ago: executing program 2 (id=634): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(0x0, &(0x7f0000000c00)) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 7m33.140101829s ago: executing program 1 (id=636): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x141841, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0x7fff, 0x7fffffffffffffff, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008940) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000240)=0x4, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) 7m32.999326957s ago: executing program 4 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x8000) 7m32.589579024s ago: executing program 4 (id=640): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc) close(0x3) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001520010000001200000000000af00000", @ANYRES32=0x0, @ANYBLOB="14000200ff01010000ced7895c0000000000000108"], 0x34}}, 0x0) 7m32.40201846s ago: executing program 1 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) unshare(0x6020400) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x50, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@pci={{0x8}, {0x11}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x50}}, 0x0) 7m32.36634094s ago: executing program 3 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) 7m32.269623192s ago: executing program 2 (id=644): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000e111ffffffffffff080211000000505050505050000000000000000000006400014003010e020000000000000000000037"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r4, &(0x7f00000009c0), 0x100000000000037b) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3b9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 7m32.120594653s ago: executing program 4 (id=645): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4006000) 7m31.876358502s ago: executing program 3 (id=647): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x0) 7m31.831373215s ago: executing program 2 (id=648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x4e20, 0x0, 0x2}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_TABLE={0x8, 0xf, 0x7}]}, 0x24}}, 0x0) 7m31.737748539s ago: executing program 4 (id=649): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x400}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000000000040000000300000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="86f12ff49dc49a25389be5de1b51bf65a296405e7198d1fdcf0573794caa773b5b3449edd26c78e87359d3f2b4803a5d68e0c429ff65afebb667baf2d184dd13a1685a0c1365f633e5c49daa9810582b328cfc97835b4b27c2f97f7fadb87fcd7235605f64de1087a5050d4caddee60b69edeeee5b94a4ef18912cc046e6c04fcaacca33464417a0ff746f8b2e9330a00000000000000000259cde300a2fe115bbf107e16ce2b0485370dc8ba521df7cc71d6070599b5778a9f18ddbf7ec48887ff5c3b9d079cde90ac4b3405e241ba128ba3a81d1", @ANYRES16=r7, @ANYRES64=r1, @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$nci(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="400402010709ba"], 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newchain={0x54, 0x64, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffe0}, {0xfff3, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @TCA_RATE={0x6, 0x5, {0x3, 0xba}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x1ffffffffffffd59, &(0x7f0000000cc0)=ANY=[@ANYRES16=r1, @ANYRES16=r9, @ANYRES8, @ANYRESOCT=r5, @ANYRES16=r8, @ANYBLOB="6760f7380ddb4576dcb1b81cb98a94bc8b01b66a5c53ef8542e444ef5b", @ANYBLOB="4e6ae0f5df66171c144b187de239060d9372d84d20b085ea47bf39f10f5689280d2b52d0109d53159f4b0f20752356b346aee1cb7cd68fa676452a100449aba10db34e5a956738e8ec5679b4610cd82a3163b62d30185a29a7bd3735364728f8d8239761d25aff09b4ef15ece1ea71f7fb37ee12a6285bb222f8b94b45fa6df86bea9eb1160a6bfbc57327b442e3c2a7989d06a9dfb8183b5523c1f74ee23c80d5f51246a5015a47235f994d0f090cfdedeba617599135db6ce3afd71dbd93918c708d1b7b4ab7e16089c84affcaaf6ff904a2ac81f5092fee9c194898c494ba37c6a2f790d5ee11a9839518cf21fb", @ANYRES8=r2, @ANYRESDEC, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="2ee5000000008000040000000000000018110000", @ANYRES32=r11, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x59}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf9dc0adc317e6f48250900000008000200040001000c0001"], 0x28}}, 0x8040801) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x0) bind$tipc(r12, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x4}}, 0x10) 7m31.530517469s ago: executing program 2 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425"], 0x4c}}, 0x0) 7m31.501547218s ago: executing program 3 (id=652): r0 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) 7m31.313265327s ago: executing program 1 (id=653): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x141841, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0x7fff, 0x7fffffffffffffff, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008940) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000240)=0x4, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) 7m30.959768202s ago: executing program 2 (id=655): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) nanosleep(0x0, &(0x7f0000000c00)) socket$xdp(0x2c, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 7m30.925585542s ago: executing program 3 (id=656): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc) close(0x3) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001520010000001200000000000af00000", @ANYRES32=0x0, @ANYBLOB="14000200ff01010000ced7895c0000000000000108"], 0x34}}, 0x0) 7m30.834378051s ago: executing program 1 (id=657): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) (fail_nth: 3) 7m30.537791514s ago: executing program 3 (id=658): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000e111ffffffffffff080211000000505050505050000000000000000000006400014003010e020000000000000000000037"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r4, &(0x7f00000009c0), 0x100000000000037b) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3b9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 7m30.537468174s ago: executing program 1 (id=659): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @local}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sendmmsg(r0, 0x0, 0x0, 0x4006000) 7m30.3280639s ago: executing program 0 (id=660): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m30.121361534s ago: executing program 4 (id=661): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x40050) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000001400010000000000000000000400008048a63ccd77b7fb4abb05fb64c674300fe0688f4f688e2c8916005ff519084d2d1e5c9bd377722952992603d40b30884ab6bedb183d570dc350863ccb5788b127b8f7eb3acaacdc8531ab9ba90ee09fabc2eccf0f205c4183c666a79bb4bfb91edaec7e895918cf898ee7"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x1}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28) 7m30.120450924s ago: executing program 1 (id=662): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="d2d8d71e3d4d67f878156fcf8b971b1ef26be192457c6a20072e7c63f38374c2f62f59403e67d4649479dc9aada0f1069d84940c8396b29c39feb6266a5cb03b", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x2e, 0x24, &(0x7f0000000080)="440b34548b29aa9b3a63e132bf99ee81ec8b6cd7bb228a6459cff438ee78750dc44326688bcb3b56276d83ca37bf", &(0x7f00000001c0)=""/36, 0x400, 0x0, 0xe7, 0x6b, &(0x7f0000000200)="eb0bfb8bef2cd675dcd77342e5cc64c12d571498a96d62027fd0a1017a692a8aade4bf7d76d6a0794c1c7725c4538317f78ba14921c91141c38e5553e9ea593168fc65e55ae417ef0b9476b262b03f936e4ba3770083c718a2743be9daa88edd871e47b0d529cd0a1bb1f074edaddce73a2bc3303e8e6b48fefe79fc28a9fb8a237ce11861f399f4848867dc7e488273e62e6790fa8b99a103ee7e522ec230467037392faa7ed22b6f3a617f6c1061e21d0fdd1b8b0a6bd2095f367006f7fe4f79a68ec7e620ecc66770a7a3d0e14affcea4d8581800c82f0f1c1da55aff8f73efd20690b8c90b", &(0x7f0000000300)="528176c46346e91ef7e95f892c0d2fe06f19d392bbfb1d540fbd4fd7e570f52259e80c80cb3b4057bb5beb3c3999fff671678e92ba6747f77af2f196fadea2f7dcb915ba5e9731e569f47017d3a0963c95f8a5cc90358300c66dd497d76adbd4a7c41a5458d68ad179136b", 0x5, 0x0, 0xfffffffb}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x26000400) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000280)=[{r2, 0x480}], 0x1, 0xfffff801) shutdown(r2, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) listen(r5, 0x100101) r6 = accept(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1728, 0xe9, 0x2, 0x2d5, 0x8}, &(0x7f0000000280)=0x14) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x80, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 7m29.982349582s ago: executing program 0 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000004080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c00"], 0xfc}}, 0x0) 7m29.958265502s ago: executing program 3 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000000)=0x3, 0x4) (async) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000af3901010000ff7f0000cc00b403eb31", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 7m29.831543768s ago: executing program 2 (id=665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000100000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 7m5.950324483s ago: executing program 32 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000004080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c00"], 0xfc}}, 0x0) 6m48.213645387s ago: executing program 33 (id=662): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="d2d8d71e3d4d67f878156fcf8b971b1ef26be192457c6a20072e7c63f38374c2f62f59403e67d4649479dc9aada0f1069d84940c8396b29c39feb6266a5cb03b", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x2e, 0x24, &(0x7f0000000080)="440b34548b29aa9b3a63e132bf99ee81ec8b6cd7bb228a6459cff438ee78750dc44326688bcb3b56276d83ca37bf", &(0x7f00000001c0)=""/36, 0x400, 0x0, 0xe7, 0x6b, &(0x7f0000000200)="eb0bfb8bef2cd675dcd77342e5cc64c12d571498a96d62027fd0a1017a692a8aade4bf7d76d6a0794c1c7725c4538317f78ba14921c91141c38e5553e9ea593168fc65e55ae417ef0b9476b262b03f936e4ba3770083c718a2743be9daa88edd871e47b0d529cd0a1bb1f074edaddce73a2bc3303e8e6b48fefe79fc28a9fb8a237ce11861f399f4848867dc7e488273e62e6790fa8b99a103ee7e522ec230467037392faa7ed22b6f3a617f6c1061e21d0fdd1b8b0a6bd2095f367006f7fe4f79a68ec7e620ecc66770a7a3d0e14affcea4d8581800c82f0f1c1da55aff8f73efd20690b8c90b", &(0x7f0000000300)="528176c46346e91ef7e95f892c0d2fe06f19d392bbfb1d540fbd4fd7e570f52259e80c80cb3b4057bb5beb3c3999fff671678e92ba6747f77af2f196fadea2f7dcb915ba5e9731e569f47017d3a0963c95f8a5cc90358300c66dd497d76adbd4a7c41a5458d68ad179136b", 0x5, 0x0, 0xfffffffb}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x26000400) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000280)=[{r2, 0x480}], 0x1, 0xfffff801) shutdown(r2, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f91e2e", 0x18, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x88}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "706a01", 0x0, "cc1978"}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) listen(r5, 0x100101) r6 = accept(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x1728, 0xe9, 0x2, 0x2d5, 0x8}, &(0x7f0000000280)=0x14) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x7, 0x80, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 6m48.021766833s ago: executing program 34 (id=665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000100000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 6m47.796377102s ago: executing program 35 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000000)=0x3, 0x4) (async) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000af3901010000ff7f0000cc00b403eb31", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 6m47.58951878s ago: executing program 36 (id=661): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x40050) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000001400010000000000000000000400008048a63ccd77b7fb4abb05fb64c674300fe0688f4f688e2c8916005ff519084d2d1e5c9bd377722952992603d40b30884ab6bedb183d570dc350863ccb5788b127b8f7eb3acaacdc8531ab9ba90ee09fabc2eccf0f205c4183c666a79bb4bfb91edaec7e895918cf898ee7"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x1}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28) 29.983003392s ago: executing program 7 (id=4116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) shutdown(r0, 0x0) r1 = accept(r0, 0xfffffffffffffffd, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000017c0)={0x1d0, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xe0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3fc00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeab}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2894}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x77b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x432b8763}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7faa}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x87c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85c0}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x133}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf84}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000804) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="4cd39417fd88dab33f389d56159dd2ba0c3121fc76d126adb79cb5d48ac2b8ba46342a9cb6c73090f4198a6e47bcb95da97e980783892369896001917cd145f40642879a25a833fdf010de49638e89077f67f3e8daa41587b11f7dad846e3df25f85f8b7b441abf566cf3573223448c7e338f747494818815250f682330701dab144969e7f01f37b6c76040b7293abf700cd4273f5a67194394245d8855d48b104a8e79e7591c7510af76a59182c39a7c8ededce3ee8121afe4a110e6725f0acec8de26e557effc6d7e853d1d6dc115c9cc38be97879e7e0b046466ce56d6d7a4d980b0413ff128f35d5e489adbfa4cb4cd88377c7f2e68b4a7e0c", 0xfb}], 0x5, &(0x7f0000000600)=[{0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) 29.693357651s ago: executing program 7 (id=4122): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 29.49038515s ago: executing program 7 (id=4127): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xd, 0x6}, {0xd, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0x15}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYRES8=r2], 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001440)=""/100, 0x64}, {0x0}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000001780)=""/236, 0xec}, {&(0x7f00000015c0)=""/124, 0x7c}], 0x5}, 0xf000}], 0x1, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) 28.507967207s ago: executing program 7 (id=4136): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0xfff}, 0x1c) socket(0x21, 0x6, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='memory.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000ac0)=""/103, 0x67}], 0x2, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @loopback}], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) writev(r7, &(0x7f000000ac40)=[{&(0x7f0000000700)='J', 0xfdef}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="31032fbd74000000f0ff07000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x40, 0x22, 0xfe, r12}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r10, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000}, 0x4008880) 26.529093827s ago: executing program 7 (id=4160): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x4, 0x6, 0x5d0b6f1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0x7f, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x6, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x1, 0x9, 0x800, 0x3, 0x8, 0x0, 0x3ff, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x37, 0x1, 0x3, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x42db204e, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x207, 0x3, 0x10, 0x404, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x3, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x3fe, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x7ffe, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x2, 0x9}}]}]}}]}, 0x478}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.280235501s ago: executing program 7 (id=4164): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f00000022c0)=""/4096, &(0x7f0000000240)=0x1000) 10.93159805s ago: executing program 37 (id=4164): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unshare(0x24020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x0, 0x1}, 0xff, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f00000022c0)=""/4096, &(0x7f0000000240)=0x1000) 4.196742297s ago: executing program 6 (id=4428): socket$igmp6(0xa, 0x3, 0x2) socket(0x21, 0x3, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r1 = socket$inet6(0xa, 0x80000, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0008000007500500340012800b0001006272696467650000240002800500190002000000050017000000000008000400810000000500160001000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="040000000000000000000000008276cd540faa4c28012309f4568c1ccf2e3cf5f1b70a4ef8830b93bef902201846a6913075b579f6e6052a73d467cdc7116212c295bb9bc6afc214979abe6b0c5ec15531d0978aa7a96b13349a965a2da76a9a1cae2ab877f65c7700"/119, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000000000500070002000000"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.473340798s ago: executing program 8 (id=4440): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b4e000/0x1000)=nil, 0x1000, 0x0, 0x4d032, 0xffffffffffffffff, 0x13cda000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r1, 0x20000000) 2.281060541s ago: executing program 6 (id=4441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x4000) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x9, 0x1, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0xba, 0x29, 0x0, @loopback, @loopback}}}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xae0}, @NHA_OIF={0x8, 0x5, r7}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @multicast2}, 0x24a, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='vxcan1\x00', 0x5, 0x0, 0x2452}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r9}, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000001c40)={0x3, '\x00', {0x7f}, 0x1c7}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000301010400000000170000000a000000180001801400018008000100e0000001080001022bab2aedd0adf2af4dd1fb149ed93f419780a5a395a50e202e0a24688994c3f609deb4e1e26ed34f5c04f7c0486870f57d25fd5bd87d3e9c7c90b8365fbe7dbf79f4c5c9ae445981c777a82210018a5bc749"], 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.085303359s ago: executing program 5 (id=4443): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.881305278s ago: executing program 9 (id=4444): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x15, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x2000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3, [0xc1c, 0x5f6, 0xfc8, 0xe78]}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="24000000160000000c000a00000000010000b47e77326100"/36], 0x24}}, 0x0) accept(r3, &(0x7f0000000d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000dc0)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000e00)={r2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071106c00000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xe0}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=@ipv4_newroute={0xb8, 0x18, 0x10, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x30, 0xf, 0xfc, 0x4, 0xfe, 0x7, 0x200}, [@RTA_SRC={0x8, 0x2, @multicast1}, @RTA_METRICS={0x84, 0x8, 0x0, 0x1, "008d28daa0ed289e763e9e193b662bf37199ccc327a24cff616d531f7a1ad6bb9f1a88f21f8c0d91058d6ee8acb1ce2686e38f52b5c31bf4747ec395a0b9ff903fb660b04bd7fbf2c5782c62486787505bc229d1547b193336255b23cde1a3aae7026978110291f31370d7abd8723a993376ff2fe7fb80a9d2a4824601338a1f"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0xb8}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xffff12df, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xaec2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="8d9dd76055205d42163307ab01046d2fa069706d4e3256e45c09676176a2975cf3c58d5f14d35e61160e0c8194316ce0c25b3ae371e55bb8b59aea93a9ee89e5895d01cf0c15449045e7f69686e9019b09a2d6a88b039ea3c632eff7abc733a318124dfdb2cbe00cdc7cdd21e121106e63f16dc23aaa38fcc4546a83ad5b5f0d22b320fbac8da2b6893f62f7884b6df0fdd25c16e5df328b91f052fbb8c46575be5ac58efd7151f9ed3b69067ad5", 0xae}, {&(0x7f0000000480)}, {&(0x7f0000000500)="32e11d77d7c22cee9310fd1a75998109134a21f09261876917ecbeecd56dca9c3e40c5f1466d44234aa7a4f303589d46ce17170c31bc0b36b4da8546588d11da1513a97dcced06f472443774936254097a07b8741a828fef94c6b1377a70a748f5f2090e02e62b25e75c3ff7cd4356f19438499f880799f4a6b710689795c684a62c5bf587d1c95f8b66a8937b39502768df99c885f6d6b9c4eb32ad148fbbaef58ba54a4dd4a441789b3f0ff091fff3c919ec", 0xb3}], 0x3}}], 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="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", 0x160}, {&(0x7f0000000a40)="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", 0x2d5}], 0x2}, 0x0) 1.786833525s ago: executing program 8 (id=4445): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000e111ffffffffffff080211000000505050505050000000000000000000006400014003010e020000000000000000000037"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) readv(r4, &(0x7f00000009c0), 0x100000000000037b) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3b9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 1.769170878s ago: executing program 5 (id=4446): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x2, r5, 0x4021}, 0x10) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}], 0x3}, 0x80000000}], 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfffc, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000400)={0x80000005}) close(0x3) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.641278478s ago: executing program 6 (id=4447): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.640538736s ago: executing program 9 (id=4448): socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000e111ffffffffffff08021100000050505050505000000000000000000000640001400301"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3b9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 1.541298715s ago: executing program 6 (id=4449): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x10}, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000100)="520003000100b8", 0x7) 1.517419618s ago: executing program 8 (id=4450): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r0 = socket(0xa, 0x3, 0x87) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bind$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 1.508052649s ago: executing program 9 (id=4451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="dad0dd2d6709a2d9f349f2a8ce25a15143178bc10cf0299b673a05d16156a61abd03b046af4b646bd81376e0587afe4989a8834221fe6f2bf982fc28126e9e18c8ee9f0e97d6d3141b6971a4ff5c6aaea809f1f08019fad897c5ba993c5c2822eb9f36a942d4c89d612f57f532ed6d1ad14e1509e06c40511c1b1e1833bbf6328ded26659fc54dbbf2dbc4d888116a19a46339", 0x93}, {&(0x7f0000000c80)="f5f7db3df54ac72e8be39796ebf79cb67cefd15bb83a1fe2d54d70796fb0e176fd2a96bd20329f85bc15986d2a65e889f1cd0bea55bef722f2df34a57527a7d85a19beddd9843489b8b90f3102f1fe36926a4dec48fc6adb90f6f63a5af4617343aee4cc4e064458c24f05d6880631d0de4393a40d9f51bfcb5864b53538c72fb98fc033f08ae149ac979f17bc2c2523c548095048645446967f21cc743cc6a873db01017c8354365551b5fd376f9f941bbb6d", 0xb3}], 0x2, &(0x7f0000000d80)=[@hopopts_2292={{0xb8, 0x29, 0x36, {0x32, 0x13, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x1, 0x0, [0x100, 0x613a, 0x3, 0xfffffffffffff801, 0x2eb761c0, 0x8, 0xffffffff80000001, 0x4, 0x14]}}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf7, 0x47c, [0x5, 0xae5, 0x4, 0xed7a]}}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x0, 0x8, '\x00', [@generic={0x1, 0x3a, "6474d3651736c92deb3523a9b856250505c9d5d97fcbeb6e75224e3507b37acde862483d8ab4ebf4cb515a8fc25f126267ddafb6c8e9cf28c546"}, @pad1, @pad1]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x3c, 0x1b, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xa2, "8546635a8b7d9247514ac009e58bd3dab259c762e9a4271fb320e2cefb0c836913d4661de0e45bab206127d0421761531eef9a46bf95dac18d23b3092da3505e601a68765564541a101200de00aef196432180e5739e77a55daec8a33976bd02229d80fe4e8485dbb23b412ee986a9d7bf8aa13d187dba55ac9b4f8e953e7d1868c32a1a3328c195748ee0fb4c8b52b2e6f50409147a3f974a1c18a693475d86c4bd"}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0xfffc, [0x8, 0x7fffffffffffffff, 0x2]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3c, 0x12, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private1={0xfc, 0x1, '\x00', 0x2}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @dev={0xfe, 0x80, '\x00', 0x39}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x16, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x1, [0x2, 0x9]}}, @pad1, @jumbo={0xc2, 0x4, 0x6}]}}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x33, 0x14, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @generic={0x7f, 0x80, "a5acb86f57a880ffcd222e5ceb945be7751bfafa93041a5937ad2da2b6b93b6c00347888efa388b20e3e8fcf2c56ed25313bb7686485db533292a75744b154697cd77dee38d18a3c9c1f28cd60908f09d9807361a4cce6e15348fd979812177dc30e65157694e5af74006100886a101c5526e8fcd0863d307e8ef0df2cc42c63"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x3b8}}], 0x2, 0x4040005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000002060108000000000000000000000009000007800800070000001b64160005000a0000000900020073597a3100000d0010000300686173683a69702c6d616300"], 0x44}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r1, 0x1ad72f7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) accept4$netrom(r1, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.38804545s ago: executing program 6 (id=4452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="dad0dd2d6709a2d9f349f2a8ce25a15143178bc10cf0299b673a05d16156a61abd03b046af4b646bd81376e0587afe4989a8834221fe6f2bf982fc28126e9e18c8ee9f0e97d6d3141b6971a4ff5c6aaea809f1f08019fad897c5ba993c5c2822eb9f36a942d4c89d612f57f532ed6d1ad14e1509e06c40511c1b1e1833bbf6328ded26659fc54dbbf2dbc4d888116a19a46339", 0x93}, {&(0x7f0000000c80)="f5f7db3df54ac72e8be39796ebf79cb67cefd15bb83a1fe2d54d70796fb0e176fd2a96bd20329f85bc15986d2a65e889f1cd0bea55bef722f2df34a57527a7d85a19beddd9843489b8b90f3102f1fe36926a4dec48fc6adb90f6f63a5af4617343aee4cc4e064458c24f05d6880631d0de4393a40d9f51bfcb5864b53538c72fb98fc033f08ae149ac979f17bc2c2523c548095048645446967f21cc743cc6a873db01017c8354365551b5fd376f9f941b", 0xb1}], 0x2, &(0x7f0000000d80)=[@hopopts_2292={{0xb8, 0x29, 0x36, {0x32, 0x13, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x1, 0x0, [0x100, 0x613a, 0x3, 0xfffffffffffff801, 0x2eb761c0, 0x8, 0xffffffff80000001, 0x4, 0x14]}}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x28, {0x0, 0x8, 0xf7, 0x47c, [0x5, 0xae5, 0x4, 0xed7a]}}, @ra={0x5, 0x2, 0x100}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x2}]}}}, @hopopts={{0x60, 0x29, 0x36, {0x0, 0x8, '\x00', [@generic={0x1, 0x3a, "6474d3651736c92deb3523a9b856250505c9d5d97fcbeb6e75224e3507b37acde862483d8ab4ebf4cb515a8fc25f126267ddafb6c8e9cf28c546"}, @pad1, @pad1]}}}, @hopopts={{0x100, 0x29, 0x36, {0x3c, 0x1c, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xac, "8546635a8b7d9247514ac009e58bd3dab259c762e9a4271fb320e2cefb0c836913d4661de0e45bab206127d0421761531eef9a46bf95dac18d23b3092da3505e601a68765564541a101200de00aef196432180e5739e77a55daec8a33976bd02229d80fe4e8485dbb23b412ee986a9d7bf8aa13d187dba55ac9b4f8e953e7d1868c32a1a3328c195748ee0fb4c8b52b2e6f50409147a3f974a1c18a693475d86c4bd15f5106e997160744da4"}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0xfffc, [0x8, 0x7fffffffffffffff, 0x2]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3c, 0x12, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private1={0xfc, 0x1, '\x00', 0x2}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @dev={0xfe, 0x80, '\x00', 0x39}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x16, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x1, [0x2, 0x9]}}, @pad1, @jumbo={0xc2, 0x4, 0x6}]}}}, @hopopts_2292={{0xc0, 0x29, 0x36, {0x33, 0x14, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @generic={0x7f, 0x80, "a5acb86f57a880ffcd222e5ceb945be7751bfafa93041a5937ad2da2b6b93b6c00347888efa388b20e3e8fcf2c56ed25313bb7686485db533292a75744b154697cd77dee38d18a3c9c1f28cd60908f09d9807361a4cce6e15348fd979812177dc30e65157694e5af74006100886a101c5526e8fcd0863d307e8ef0df2cc42c63"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x3c0}}], 0x2, 0x4040005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000002060108000000000000000000000009000007800800070000001b64160005000a0000000900020073597a3100000d0010000300686173683a69702c6d616300"], 0x44}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r1, 0x1ad72f7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) accept4$netrom(r1, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.309315256s ago: executing program 8 (id=4453): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x1009, @remote, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="d3639f10977461c29a23b7a8c7b16caaa05657fa46fda5b776797956c7856968f7f88b7351b23451e94c841fbea78716731fe6dbe0babb6a540d7837cbdbb67b", 0x40}, {&(0x7f00000009c0)="a2f08e9156ae7f81a19a6d1d4f8eff8858378324957d5d7929d6f820731d8e5b9650940f45a527ff81c5cd4a6b353bd3e95daa945ff79277c1fd1560f83ded6bb5f3c2400eb0610078d2fa5834c206ad607cfea4efbb514ab7167d2d88e8d6fcc8fd1c6378135792", 0x68}], 0x2, &(0x7f0000000680)}}], 0x3, 0xc8040) 1.309028756s ago: executing program 0 (id=4340): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xce, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000040e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.285121238s ago: executing program 8 (id=4454): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) pipe(&(0x7f0000000280)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x3, 0x5, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0, 0x54}], 0x2}}], 0x1, 0x6404c880) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10003, 0xfffffffffffffffd, 0x0, 0x0, 0x7d, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) (async) pipe(&(0x7f0000000280)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x3, 0x5, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0, 0x54}], 0x2}}], 0x1, 0x6404c880) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10003, 0xfffffffffffffffd, 0x0, 0x0, 0x7d, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) 1.206191959s ago: executing program 0 (id=4455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}, 0x1, 0x0, 0x0, 0x1b000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c00"], 0xfc}}, 0x0) 907.589404ms ago: executing program 0 (id=4456): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) shutdown(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0x8e}, {&(0x7f0000002e40)="d4", 0x1}, {&(0x7f0000000100)="eba18ba3c5be2cfd4381e243f6c7a3ff0f981f9a3a4087da2e772ad6f02fcc6f883ecc7d5688297692d8448e2199ab5c2c45b76fc831c1202d4e1d7e2e5fc5209b9619c2d0", 0x45}], 0x4}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x70}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853", 0x5b}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63", 0xaa}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf", 0x7d}], 0x5}}], 0x4, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 643.110875ms ago: executing program 5 (id=4457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000002095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 573.218091ms ago: executing program 8 (id=4458): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6(0xa, 0x6, 0x20005) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="282813c125978dad342efb011500000011000101", @ANYRES32=r8, @ANYBLOB="000000002140000008002900c12a0000"], 0x28}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 449.219393ms ago: executing program 5 (id=4459): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="570033008000e111ffffffffffff080211000000505050505050000000000000000000006400014003010e020000000000000000000037"], 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x44000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) readv(r4, &(0x7f00000009c0), 0x100000000000037b) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3b9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 350.485921ms ago: executing program 9 (id=4460): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 340.100851ms ago: executing program 5 (id=4461): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x10}, &(0x7f0000000100)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000100)="520003000100b8", 0x7) 249.199947ms ago: executing program 9 (id=4462): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x1009, @remote, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="d3639f10977461c29a23b7a8c7b16caaa05657fa46fda5b776797956c7856968f7f88b7351b23451e94c841fbea78716731fe6dbe0babb6a540d7837cbdbb67b", 0x40}, {&(0x7f00000009c0)="a2f08e9156ae7f81a19a6d1d4f8eff8858378324957d5d7929d6f820731d8e5b9650940f45a527ff81c5cd4a6b353bd3e95daa945ff79277c1fd1560f83ded6bb5f3c2400eb0610078d2fa5834c206ad607cfea4efbb514ab7167d2d88e8d6fcc8fd1c6378135792", 0x68}], 0x2, &(0x7f0000000680)}}], 0x3, 0xc8040) 151.091447ms ago: executing program 9 (id=4463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0x10}, {0xfff3, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x4e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27}, 0x6e) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) unshare(0x22020600) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r12, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 150.151783ms ago: executing program 5 (id=4464): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044104}, 0x20000000) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x10}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x10}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x7, 0x2, 0x7}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}, {"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"}}}}, 0xfce) 9.678534ms ago: executing program 6 (id=4465): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x141841, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0x7fff, 0x7fffffffffffffff, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008940) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000240)=0x4, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x8bcd}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) 0s ago: executing program 0 (id=4466): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_FLAGS={0xfffffffffffffdc4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) kernel console output (not intermixed with test programs): 6230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3187'. [ 522.206373][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3187'. [ 522.228586][T16230] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 522.239342][T16230] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3187'. [ 522.308621][T16233] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.355939][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3190'. [ 522.604099][T16251] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3195'. [ 522.660033][T16252] lo speed is unknown, defaulting to 1000 [ 522.734526][T16255] FAULT_INJECTION: forcing a failure. [ 522.734526][T16255] name failslab, interval 1, probability 0, space 0, times 0 [ 522.780443][T16255] CPU: 0 UID: 0 PID: 16255 Comm: syz.5.3196 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 522.780473][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.780485][T16255] Call Trace: [ 522.780493][T16255] [ 522.780502][T16255] dump_stack_lvl+0x189/0x250 [ 522.780529][T16255] ? __pfx____ratelimit+0x10/0x10 [ 522.780556][T16255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.780574][T16255] ? __pfx__printk+0x10/0x10 [ 522.780600][T16255] ? __pfx___might_resched+0x10/0x10 [ 522.780624][T16255] ? fs_reclaim_acquire+0x7d/0x100 [ 522.780650][T16255] should_fail_ex+0x414/0x560 [ 522.780683][T16255] should_failslab+0xa8/0x100 [ 522.780702][T16255] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 522.780726][T16255] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 522.780749][T16255] ? __alloc_skb+0x112/0x2d0 [ 522.780780][T16255] __alloc_skb+0x112/0x2d0 [ 522.780809][T16255] l2cap_send_cmd+0xab/0xb30 [ 522.780844][T16255] l2cap_start_connection+0x20e/0x310 [ 522.780875][T16255] ? __pfx_l2cap_start_connection+0x10/0x10 [ 522.780895][T16255] ? l2cap_chan_check_security+0x303/0x570 [ 522.780918][T16255] ? l2cap_do_start+0x253/0x3a0 [ 522.780941][T16255] l2cap_chan_connect+0xa7f/0xe30 [ 522.780974][T16255] ? __pfx_l2cap_chan_connect+0x10/0x10 [ 522.780994][T16255] ? __local_bh_enable_ip+0x12d/0x1c0 [ 522.781020][T16255] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 522.781051][T16255] ? bacmp+0xe/0x30 [ 522.781070][T16255] l2cap_sock_connect+0x5c8/0x7a0 [ 522.781096][T16255] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 522.781123][T16255] ? bpf_lsm_socket_connect+0x9/0x20 [ 522.781147][T16255] __sys_connect+0x313/0x440 [ 522.781173][T16255] ? __fget_files+0x3a0/0x420 [ 522.781198][T16255] ? __pfx___sys_connect+0x10/0x10 [ 522.781238][T16255] ? __pfx_ksys_write+0x10/0x10 [ 522.781274][T16255] __x64_sys_connect+0x7a/0x90 [ 522.781301][T16255] do_syscall_64+0xfa/0x3b0 [ 522.781324][T16255] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.781348][T16255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.781366][T16255] ? clear_bhb_loop+0x60/0xb0 [ 522.781389][T16255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.781407][T16255] RIP: 0033:0x7f30b018ebe9 [ 522.781424][T16255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.781440][T16255] RSP: 002b:00007f30b1003038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 522.781462][T16255] RAX: ffffffffffffffda RBX: 00007f30b03b6090 RCX: 00007f30b018ebe9 [ 522.781476][T16255] RDX: 000000000000000e RSI: 0000200000000080 RDI: 0000000000000004 [ 522.781488][T16255] RBP: 00007f30b1003090 R08: 0000000000000000 R09: 0000000000000000 [ 522.781500][T16255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.781511][T16255] R13: 00007f30b03b6128 R14: 00007f30b03b6090 R15: 00007ffe043d3a18 [ 522.781544][T16255] [ 523.325910][T16262] lo speed is unknown, defaulting to 1000 [ 523.657809][T16277] tipc: Enabling of bearer rejected, failed to enable media [ 523.675019][T16277] syzkaller0: entered promiscuous mode [ 523.690834][T16277] syzkaller0: entered allmulticast mode [ 523.896336][T16275] lo speed is unknown, defaulting to 1000 [ 525.678366][T16326] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.726112][T16328] batadv_slave_1: entered promiscuous mode [ 525.818504][T16327] batadv_slave_1: left promiscuous mode [ 526.040226][T16335] __nla_validate_parse: 9 callbacks suppressed [ 526.040245][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3221'. [ 526.193410][T16335] netlink: 'syz.7.3221': attribute type 1 has an invalid length. [ 526.227388][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3221'. [ 526.277817][T16340] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3224'. [ 526.589890][T16349] tipc: Enabling of bearer rejected, failed to enable media [ 526.603206][T16349] syzkaller0: entered promiscuous mode [ 526.614654][T16349] syzkaller0: entered allmulticast mode [ 526.659976][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3231'. [ 526.677096][T16359] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3231'. [ 526.721038][T16359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3231'. [ 526.979330][T16371] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3235'. [ 526.999796][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.008940][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.019356][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.028587][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.038895][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.049076][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.059794][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.090127][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.122897][T16376] netlink: 'syz.9.3237': attribute type 32 has an invalid length. [ 527.151433][T16373] lo speed is unknown, defaulting to 1000 [ 527.263227][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3238'. [ 528.011470][T16399] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3247'. [ 528.055285][T16403] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.219886][T16414] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 528.778552][T16440] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 528.793136][T16432] lo speed is unknown, defaulting to 1000 [ 529.168186][T16460] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3262'. [ 529.488205][T16474] FAULT_INJECTION: forcing a failure. [ 529.488205][T16474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.513086][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz.6.3265 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 529.513115][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.513127][T16474] Call Trace: [ 529.513135][T16474] [ 529.513144][T16474] dump_stack_lvl+0x189/0x250 [ 529.513168][T16474] ? __pfx____ratelimit+0x10/0x10 [ 529.513192][T16474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.513211][T16474] ? __pfx__printk+0x10/0x10 [ 529.513233][T16474] ? __might_fault+0xb0/0x130 [ 529.513270][T16474] should_fail_ex+0x414/0x560 [ 529.513302][T16474] _copy_from_user+0x2d/0xb0 [ 529.513328][T16474] ___sys_sendmsg+0x158/0x2a0 [ 529.513350][T16474] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.513407][T16474] ? __fget_files+0x2a/0x420 [ 529.513423][T16474] ? __fget_files+0x3a0/0x420 [ 529.513458][T16474] __x64_sys_sendmsg+0x19b/0x260 [ 529.513480][T16474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.513509][T16474] ? __pfx_ksys_write+0x10/0x10 [ 529.513530][T16474] ? rcu_is_watching+0x15/0xb0 [ 529.513562][T16474] ? do_syscall_64+0xbe/0x3b0 [ 529.513590][T16474] do_syscall_64+0xfa/0x3b0 [ 529.513612][T16474] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.513634][T16474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.513652][T16474] ? clear_bhb_loop+0x60/0xb0 [ 529.513673][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.513691][T16474] RIP: 0033:0x7ff2e118ebe9 [ 529.513707][T16474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.513723][T16474] RSP: 002b:00007ff2e1f51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.513744][T16474] RAX: ffffffffffffffda RBX: 00007ff2e13b5fa0 RCX: 00007ff2e118ebe9 [ 529.513758][T16474] RDX: 0000000000040000 RSI: 0000200000000e80 RDI: 0000000000000003 [ 529.513771][T16474] RBP: 00007ff2e1f51090 R08: 0000000000000000 R09: 0000000000000000 [ 529.513782][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.513794][T16474] R13: 00007ff2e13b6038 R14: 00007ff2e13b5fa0 R15: 00007ffc36f8d2f8 [ 529.513824][T16474] [ 530.042327][T16495] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 531.376283][T16537] lo speed is unknown, defaulting to 1000 [ 531.732132][T16553] __nla_validate_parse: 10 callbacks suppressed [ 531.732151][T16553] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3292'. [ 532.083855][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3296'. [ 532.244009][T16566] bridge_slave_1: left allmulticast mode [ 532.249941][T16566] bridge_slave_1: left promiscuous mode [ 532.262406][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.282363][T16566] bridge_slave_0: left allmulticast mode [ 532.300060][T16566] bridge_slave_0: left promiscuous mode [ 532.308769][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.635675][T16582] IPVS: stopping backup sync thread 16583 ... [ 532.720018][T16585] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.849615][T16594] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3305'. [ 533.191861][T16610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3311'. [ 533.201476][T16610] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3311'. [ 533.210667][T16610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3311'. [ 533.321520][T16614] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3313'. [ 533.330733][T16614] block nbd0: not configured, cannot reconfigure [ 533.456731][T16617] pim6reg: entered allmulticast mode [ 533.465725][T16617] pim6reg: left allmulticast mode [ 533.558875][T16619] lo speed is unknown, defaulting to 1000 [ 533.639342][T16622] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3316'. [ 533.708020][T16624] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.148934][T16637] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3323'. [ 534.158253][T16637] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3323'. [ 534.467371][T16655] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.526992][T16650] wireguard0: entered promiscuous mode [ 534.540514][T16650] wireguard0: entered allmulticast mode [ 534.703575][T16661] syzkaller0: entered promiscuous mode [ 534.709124][T16661] syzkaller0: entered allmulticast mode [ 535.104714][T16675] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 535.118193][T16674] IPVS: stopping backup sync thread 16675 ... [ 535.201532][T16679] bridge2: entered allmulticast mode [ 535.408790][T16696] syzkaller0: entered promiscuous mode [ 535.416636][T16696] syzkaller0: entered allmulticast mode [ 536.338881][T16740] lo speed is unknown, defaulting to 1000 [ 536.356923][T16739] macsec2: entered promiscuous mode [ 536.362669][T16739] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 536.413112][T16739] macsec2: entered allmulticast mode [ 536.445464][T16744] IPVS: stopping backup sync thread 16748 ... [ 536.447841][T16748] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 536.957545][T16762] __nla_validate_parse: 4 callbacks suppressed [ 536.957564][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3362'. [ 537.043342][T16762] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3362'. [ 537.061631][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3362'. [ 537.254728][T16769] tipc: Enabled bearer , priority 0 [ 537.286531][T16769] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3365'. [ 537.343922][T16769] syzkaller0: entered promiscuous mode [ 537.344691][T16771] openvswitch: netlink: Message has 889 unknown bytes. [ 537.349583][T16769] syzkaller0: entered allmulticast mode [ 537.492127][T16769] tipc: Resetting bearer [ 537.547029][T16768] tipc: Resetting bearer [ 537.576015][T16780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.617691][T16768] tipc: Disabling bearer [ 537.689752][T16788] FAULT_INJECTION: forcing a failure. [ 537.689752][T16788] name failslab, interval 1, probability 0, space 0, times 0 [ 537.708156][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.9.3369 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 537.708184][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.708196][T16788] Call Trace: [ 537.708204][T16788] [ 537.708213][T16788] dump_stack_lvl+0x189/0x250 [ 537.708238][T16788] ? __pfx____ratelimit+0x10/0x10 [ 537.708263][T16788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.708286][T16788] ? __pfx__printk+0x10/0x10 [ 537.708315][T16788] ? __pfx___might_resched+0x10/0x10 [ 537.708339][T16788] ? fs_reclaim_acquire+0x7d/0x100 [ 537.708364][T16788] should_fail_ex+0x414/0x560 [ 537.708397][T16788] should_failslab+0xa8/0x100 [ 537.708417][T16788] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 537.708442][T16788] ? __alloc_skb+0x112/0x2d0 [ 537.708471][T16788] __alloc_skb+0x112/0x2d0 [ 537.708500][T16788] netlink_ack+0x146/0xa50 [ 537.708523][T16788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.708542][T16788] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 537.708561][T16788] ? __pfx_nl80211_post_doit+0x10/0x10 [ 537.708592][T16788] netlink_rcv_skb+0x28c/0x470 [ 537.708614][T16788] ? __lock_acquire+0xab9/0xd20 [ 537.708637][T16788] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.708658][T16788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.708702][T16788] ? down_read+0x1ad/0x2e0 [ 537.708724][T16788] genl_rcv+0x28/0x40 [ 537.708742][T16788] netlink_unicast+0x82c/0x9e0 [ 537.708775][T16788] ? __pfx_netlink_unicast+0x10/0x10 [ 537.708800][T16788] ? netlink_sendmsg+0x642/0xb30 [ 537.708833][T16788] ? skb_put+0x11b/0x210 [ 537.708855][T16788] netlink_sendmsg+0x805/0xb30 [ 537.708891][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.708919][T16788] ? aa_sock_msg_perm+0x94/0x160 [ 537.708943][T16788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.708962][T16788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.708987][T16788] __sock_sendmsg+0x219/0x270 [ 537.709014][T16788] ____sys_sendmsg+0x505/0x830 [ 537.709038][T16788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.709065][T16788] ? import_iovec+0x74/0xa0 [ 537.709093][T16788] ___sys_sendmsg+0x21f/0x2a0 [ 537.709116][T16788] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.709178][T16788] ? __fget_files+0x2a/0x420 [ 537.709195][T16788] ? __fget_files+0x3a0/0x420 [ 537.709224][T16788] __x64_sys_sendmsg+0x19b/0x260 [ 537.709247][T16788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.709277][T16788] ? __pfx_ksys_write+0x10/0x10 [ 537.709299][T16788] ? rcu_is_watching+0x15/0xb0 [ 537.709330][T16788] ? do_syscall_64+0xbe/0x3b0 [ 537.709358][T16788] do_syscall_64+0xfa/0x3b0 [ 537.709381][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.709404][T16788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.709422][T16788] ? clear_bhb_loop+0x60/0xb0 [ 537.709445][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.709462][T16788] RIP: 0033:0x7faf1e58ebe9 [ 537.709479][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.709495][T16788] RSP: 002b:00007faf1f3f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.709516][T16788] RAX: ffffffffffffffda RBX: 00007faf1e7b5fa0 RCX: 00007faf1e58ebe9 [ 537.709530][T16788] RDX: 0000000000040000 RSI: 0000200000000e80 RDI: 0000000000000003 [ 537.709542][T16788] RBP: 00007faf1f3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 537.709554][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.709565][T16788] R13: 00007faf1e7b6038 R14: 00007faf1e7b5fa0 R15: 00007fffafbc3118 [ 537.709597][T16788] [ 538.306099][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3375'. [ 538.319947][T16807] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3375'. [ 538.329392][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3375'. [ 538.409203][T16813] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3377'. [ 538.426335][T16809] macvlan1: entered promiscuous mode [ 538.443190][T16809] ipvlan0: entered promiscuous mode [ 538.450002][T16809] ipvlan0: left promiscuous mode [ 538.467018][T16816] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 538.476974][T16809] macvlan1: left promiscuous mode [ 538.523394][T16819] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 538.523592][T16818] IPVS: stopping backup sync thread 16819 ... [ 538.769790][T16837] FAULT_INJECTION: forcing a failure. [ 538.769790][T16837] name failslab, interval 1, probability 0, space 0, times 0 [ 538.803388][T16837] CPU: 1 UID: 0 PID: 16837 Comm: syz.8.3384 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 538.803421][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.803433][T16837] Call Trace: [ 538.803441][T16837] [ 538.803448][T16837] dump_stack_lvl+0x189/0x250 [ 538.803476][T16837] ? __pfx____ratelimit+0x10/0x10 [ 538.803502][T16837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.803520][T16837] ? __pfx__printk+0x10/0x10 [ 538.803549][T16837] ? __pfx___might_resched+0x10/0x10 [ 538.803573][T16837] ? fs_reclaim_acquire+0x7d/0x100 [ 538.803598][T16837] should_fail_ex+0x414/0x560 [ 538.803631][T16837] should_failslab+0xa8/0x100 [ 538.803648][T16837] __kmalloc_noprof+0xcb/0x4f0 [ 538.803672][T16837] ? nl80211_trigger_scan+0x52f/0x1ef0 [ 538.803703][T16837] nl80211_trigger_scan+0x52f/0x1ef0 [ 538.803743][T16837] genl_family_rcv_msg_doit+0x215/0x300 [ 538.803774][T16837] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 538.803809][T16837] ? bpf_lsm_capable+0x9/0x20 [ 538.803833][T16837] ? security_capable+0x7e/0x2e0 [ 538.803864][T16837] genl_rcv_msg+0x60e/0x790 [ 538.803899][T16837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.803918][T16837] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 538.803935][T16837] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 538.803955][T16837] ? __pfx_nl80211_post_doit+0x10/0x10 [ 538.803977][T16837] ? __asan_memcpy+0x40/0x70 [ 538.803999][T16837] ? __pfx_ref_tracker_free+0x10/0x10 [ 538.804027][T16837] netlink_rcv_skb+0x205/0x470 [ 538.804051][T16837] ? __lock_acquire+0xab9/0xd20 [ 538.804075][T16837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.804098][T16837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.804143][T16837] ? down_read+0x1ad/0x2e0 [ 538.804164][T16837] genl_rcv+0x28/0x40 [ 538.804182][T16837] netlink_unicast+0x82c/0x9e0 [ 538.804216][T16837] ? __pfx_netlink_unicast+0x10/0x10 [ 538.804240][T16837] ? netlink_sendmsg+0x642/0xb30 [ 538.804261][T16837] ? skb_put+0x11b/0x210 [ 538.804280][T16837] netlink_sendmsg+0x805/0xb30 [ 538.804312][T16837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.804338][T16837] ? aa_sock_msg_perm+0x94/0x160 [ 538.804364][T16837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.804384][T16837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.804411][T16837] __sock_sendmsg+0x219/0x270 [ 538.804437][T16837] ____sys_sendmsg+0x505/0x830 [ 538.804463][T16837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.804494][T16837] ? import_iovec+0x74/0xa0 [ 538.804523][T16837] ___sys_sendmsg+0x21f/0x2a0 [ 538.804543][T16837] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.804597][T16837] ? __fget_files+0x2a/0x420 [ 538.804613][T16837] ? __fget_files+0x3a0/0x420 [ 538.804640][T16837] __x64_sys_sendmsg+0x19b/0x260 [ 538.804659][T16837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.804684][T16837] ? __pfx_ksys_write+0x10/0x10 [ 538.804705][T16837] ? rcu_is_watching+0x15/0xb0 [ 538.804738][T16837] ? do_syscall_64+0xbe/0x3b0 [ 538.804763][T16837] do_syscall_64+0xfa/0x3b0 [ 538.804783][T16837] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.804804][T16837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.804820][T16837] ? clear_bhb_loop+0x60/0xb0 [ 538.804840][T16837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.804854][T16837] RIP: 0033:0x7f30d3b8ebe9 [ 538.804877][T16837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.804891][T16837] RSP: 002b:00007f30d1df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.804913][T16837] RAX: ffffffffffffffda RBX: 00007f30d3db5fa0 RCX: 00007f30d3b8ebe9 [ 538.804926][T16837] RDX: 0000000000040000 RSI: 0000200000000e80 RDI: 0000000000000003 [ 538.804936][T16837] RBP: 00007f30d1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.804946][T16837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.804955][T16837] R13: 00007f30d3db6038 R14: 00007f30d3db5fa0 R15: 00007ffeaa3006a8 [ 538.804982][T16837] [ 539.437178][ T7963] IPVS: starting estimator thread 0... [ 539.536787][T16861] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3393'. [ 539.553876][T16852] IPVS: using max 29 ests per chain, 69600 per kthread [ 539.618000][T16864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 539.644090][T16861] validate_nla: 58 callbacks suppressed [ 539.644118][T16861] netlink: 'syz.8.3393': attribute type 1 has an invalid length. [ 539.837501][T16882] netlink: 'syz.9.3397': attribute type 13 has an invalid length. [ 539.848856][T16882] netlink: 'syz.9.3397': attribute type 17 has an invalid length. [ 539.904935][T16882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.951794][T16882] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.998265][T16882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.081284][T16882] lo speed is unknown, defaulting to 1000 [ 540.268950][T16888] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.281514][T16888] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.455310][T16888] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.483801][T16888] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.511736][T16904] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 540.521631][T16903] IPVS: stopping backup sync thread 16904 ... [ 540.577972][T16888] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.598472][T16888] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.657521][T16907] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3405'. [ 540.695309][T16902] lo speed is unknown, defaulting to 1000 [ 540.707417][T16888] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.717818][T16888] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.924124][ T6368] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.937899][ T6368] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.966108][ T6368] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.993108][ T6368] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.111319][ T6368] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.140052][ T6368] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.174454][T11753] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.188835][T11753] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.235635][T16908] netlink: 'syz.7.3404': attribute type 13 has an invalid length. [ 541.350047][T16908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.373100][T16908] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.451362][T16908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.554465][T11745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.565124][T11745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.577332][T11745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.599366][T11745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.697175][T16975] tipc: Can't bind to reserved service type 2 [ 542.963931][T16988] netlink: 'syz.7.3431': attribute type 1 has an invalid length. [ 542.980534][T16988] __nla_validate_parse: 2 callbacks suppressed [ 542.980553][T16988] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3431'. [ 543.001944][T16988] netlink: 'syz.7.3431': attribute type 1 has an invalid length. [ 543.165233][T16964] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 543.474781][T17017] vlan2: entered promiscuous mode [ 543.491019][T17017] bond0: entered promiscuous mode [ 543.496213][T17017] vlan2: entered allmulticast mode [ 543.510153][T17021] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 543.510321][T17018] IPVS: stopping backup sync thread 17021 ... [ 543.759625][T17035] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3445'. [ 543.774417][T17035] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3445'. [ 543.785435][T17035] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3445'. [ 543.863714][T17037] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.950458][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3448'. [ 543.960083][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3448'. [ 543.973190][T17041] netlink: 'syz.8.3448': attribute type 1 has an invalid length. [ 543.983686][T17042] netlink: 'syz.8.3448': attribute type 1 has an invalid length. [ 544.031666][T17042] bond2: (slave bridge0): making interface the new active one [ 544.040692][T17042] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 544.375725][T17067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3458'. [ 544.406375][T17067] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3458'. [ 544.435992][T17067] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3458'. [ 544.474862][T17065] lo speed is unknown, defaulting to 1000 [ 544.948436][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3465'. [ 545.629723][T17107] siw: device registration error -23 [ 546.009313][T17101] infiniband syz1: set down [ 546.032070][T17101] infiniband syz1: added veth1_to_bond [ 546.048667][T17101] syz1: rxe_create_cq: returned err = -12 [ 546.067644][T17101] infiniband syz1: Couldn't create ib_mad CQ [ 546.089865][T17101] infiniband syz1: Couldn't open port 1 [ 546.147450][T17101] RDS/IB: syz1: added [ 546.231434][T17101] smc: adding ib device syz1 with port count 1 [ 546.246129][T17101] smc: ib device syz1 port 1 has pnetid [ 546.644404][T17129] netlink: 'syz.5.3478': attribute type 1 has an invalid length. [ 547.377324][T17159] IPVS: stopping backup sync thread 17161 ... [ 547.384700][T17161] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 547.588020][T17167] netlink: 'syz.7.3488': attribute type 10 has an invalid length. [ 547.640479][T17168] netlink: 'syz.7.3488': attribute type 10 has an invalid length. [ 548.004077][T17172] __nla_validate_parse: 7 callbacks suppressed [ 548.004095][T17172] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3490'. [ 549.778697][T17167] team0: Device dummy0 failed to register rx_handler [ 550.140480][T17196] syzkaller0: entered promiscuous mode [ 550.163010][T17196] syzkaller0: entered allmulticast mode [ 550.291639][T17205] IPVS: stopping backup sync thread 17208 ... [ 550.297933][T17208] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 550.509782][T17214] netlink: 'syz.8.3503': attribute type 3 has an invalid length. [ 550.561139][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3503'. [ 550.573806][T17214] netlink: 'syz.8.3503': attribute type 3 has an invalid length. [ 550.583499][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3503'. [ 550.619743][T17221] openvswitch: netlink: IP tunnel TTL not specified. [ 550.791148][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.825808][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.871633][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.881809][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.904294][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.922792][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.933297][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3507'. [ 550.976315][ T30] audit: type=1800 audit(1754575960.112:8): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3505" name="cgroup.controllers" dev="tmpfs" ino=2952 res=0 errno=0 [ 551.806182][T17249] ieee802154 phy0 wpan0: encryption failed: -22 [ 552.815195][T17276] IPVS: stopping backup sync thread 17277 ... [ 552.825206][T17277] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 553.068615][T17287] syzkaller0: entered promiscuous mode [ 553.074898][T17287] syzkaller0: entered allmulticast mode [ 553.087849][T17290] ieee802154 phy0 wpan0: encryption failed: -22 [ 553.544167][T17307] __nla_validate_parse: 69 callbacks suppressed [ 553.544188][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3534'. [ 553.618283][T17311] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3536'. [ 553.629682][T17309] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3535'. [ 553.637825][T17312] netlink: 'syz.6.3534': attribute type 1 has an invalid length. [ 553.657791][T17312] netlink: 236 bytes leftover after parsing attributes in process `syz.6.3534'. [ 553.825601][T17321] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3538'. [ 554.324477][T17328] ieee802154 phy0 wpan0: encryption failed: -22 [ 554.660676][T17332] raw_sendmsg: syz.8.3542 forgot to set AF_INET. Fix it! [ 554.865828][T17342] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3545'. [ 554.897928][T17347] syzkaller0: entered promiscuous mode [ 554.907771][T17347] syzkaller0: entered allmulticast mode [ 555.065731][T17354] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.383857][T17354] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.490796][T17354] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.758092][T17354] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.992773][T17372] netlink: 'syz.5.3554': attribute type 2 has an invalid length. [ 556.039975][T17374] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.048039][ T36] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.075242][ T6368] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.138947][ T6368] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.185926][ T6368] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.525852][T17398] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 556.536879][T17397] IPVS: stopping backup sync thread 17398 ... [ 556.615664][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3562'. [ 556.625465][T17397] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3562'. [ 556.670057][T17405] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3563'. [ 556.731197][T17401] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3563'. [ 557.141425][T17415] lo speed is unknown, defaulting to 1000 [ 557.267195][T17435] bond4: entered promiscuous mode [ 557.272769][T17435] bond4: entered allmulticast mode [ 557.278602][T17435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 558.031974][T17463] syzkaller0: entered promiscuous mode [ 558.060258][T17463] syzkaller0: entered allmulticast mode [ 558.477154][T17465] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 558.675484][T17470] __nla_validate_parse: 4 callbacks suppressed [ 558.675530][T17470] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.3586'. [ 559.022019][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.032146][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.045642][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.055618][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.077181][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.167929][T17474] lo speed is unknown, defaulting to 1000 [ 559.197659][T17467] syz.9.3586: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 559.222328][T17467] CPU: 0 UID: 0 PID: 17467 Comm: syz.9.3586 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 559.222364][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.222376][T17467] Call Trace: [ 559.222386][T17467] [ 559.222396][T17467] dump_stack_lvl+0x189/0x250 [ 559.222432][T17467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.222453][T17467] ? __pfx__printk+0x10/0x10 [ 559.222478][T17467] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 559.222501][T17467] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 559.222531][T17467] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 559.222558][T17467] warn_alloc+0x214/0x310 [ 559.222586][T17467] ? __pfx_warn_alloc+0x10/0x10 [ 559.222617][T17467] ? __get_vm_area_node+0x28f/0x300 [ 559.222645][T17467] ? hash_netnet_create+0x741/0x1440 [ 559.222677][T17467] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 559.222727][T17467] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 559.222751][T17467] ? rcu_is_watching+0x15/0xb0 [ 559.222779][T17467] ? hash_netnet_create+0x741/0x1440 [ 559.222801][T17467] ? hash_netnet_create+0x741/0x1440 [ 559.222822][T17467] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 559.222849][T17467] ? hash_netnet_create+0x741/0x1440 [ 559.222873][T17467] ? hash_netnet_create+0x6d5/0x1440 [ 559.222901][T17467] hash_netnet_create+0x741/0x1440 [ 559.222924][T17467] ? __lock_acquire+0xab9/0xd20 [ 559.222965][T17467] ? __pfx_hash_netnet_create+0x10/0x10 [ 559.222992][T17467] ? __nla_parse+0x40/0x60 [ 559.223014][T17467] ? __pfx_hash_netnet_create+0x10/0x10 [ 559.223039][T17467] ip_set_create+0xa97/0x1940 [ 559.223063][T17467] ? ip_set_create+0x4a2/0x1940 [ 559.223107][T17467] ? __pfx_ip_set_create+0x10/0x10 [ 559.223170][T17467] nfnetlink_rcv_msg+0xb4d/0x1130 [ 559.223198][T17467] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 559.223242][T17467] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 559.223264][T17467] ? kasan_save_free_info+0x46/0x50 [ 559.223344][T17467] netlink_rcv_skb+0x205/0x470 [ 559.223375][T17467] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 559.223402][T17467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.223441][T17467] ? bpf_lsm_capable+0x9/0x20 [ 559.223466][T17467] ? security_capable+0x7e/0x2e0 [ 559.223497][T17467] nfnetlink_rcv+0x26a/0x2520 [ 559.223525][T17467] ? __dev_queue_xmit+0x1d79/0x3b50 [ 559.223558][T17467] ? __dev_queue_xmit+0x27b/0x3b50 [ 559.223592][T17467] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 559.223624][T17467] ? __pfx___dev_queue_xmit+0x10/0x10 [ 559.223661][T17467] ? ref_tracker_free+0x63a/0x7d0 [ 559.223683][T17467] ? __asan_memcpy+0x40/0x70 [ 559.223708][T17467] ? __pfx_ref_tracker_free+0x10/0x10 [ 559.223746][T17467] ? skb_clone+0x246/0x3a0 [ 559.223772][T17467] ? __netlink_deliver_tap+0x807/0x850 [ 559.223798][T17467] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.223829][T17467] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.223861][T17467] netlink_unicast+0x82c/0x9e0 [ 559.223893][T17467] ? __pfx_netlink_unicast+0x10/0x10 [ 559.223917][T17467] ? netlink_sendmsg+0x642/0xb30 [ 559.223938][T17467] ? skb_put+0x11b/0x210 [ 559.223959][T17467] netlink_sendmsg+0x805/0xb30 [ 559.223992][T17467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.224020][T17467] ? aa_sock_msg_perm+0x94/0x160 [ 559.224043][T17467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.224062][T17467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.224094][T17467] __sock_sendmsg+0x219/0x270 [ 559.224122][T17467] ____sys_sendmsg+0x505/0x830 [ 559.224147][T17467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.224174][T17467] ? import_iovec+0x74/0xa0 [ 559.224201][T17467] ___sys_sendmsg+0x21f/0x2a0 [ 559.224222][T17467] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.224239][T17467] ? __bpf_ringbuf_reserve+0x898/0xae0 [ 559.224289][T17467] ? __fget_files+0x2a/0x420 [ 559.224316][T17467] ? __fget_files+0x3a0/0x420 [ 559.224346][T17467] __x64_sys_sendmsg+0x19b/0x260 [ 559.224371][T17467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.224405][T17467] ? rcu_is_watching+0x15/0xb0 [ 559.224428][T17467] ? trace_sys_enter+0x25/0x100 [ 559.224459][T17467] do_syscall_64+0xfa/0x3b0 [ 559.224484][T17467] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.224508][T17467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.224527][T17467] ? clear_bhb_loop+0x60/0xb0 [ 559.224549][T17467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.224567][T17467] RIP: 0033:0x7faf1e58ebe9 [ 559.224587][T17467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.224605][T17467] RSP: 002b:00007faf1f3f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.224629][T17467] RAX: ffffffffffffffda RBX: 00007faf1e7b5fa0 RCX: 00007faf1e58ebe9 [ 559.224644][T17467] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 559.224658][T17467] RBP: 00007faf1e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.224670][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.224690][T17467] R13: 00007faf1e7b6038 R14: 00007faf1e7b5fa0 R15: 00007fffafbc3118 [ 559.224722][T17467] [ 559.224742][T17467] Mem-Info: [ 559.294227][T17483] netlink: 'syz.7.3590': attribute type 46 has an invalid length. [ 559.301385][T17467] active_anon:3640 inactive_anon:0 isolated_anon:0 [ 559.301385][T17467] active_file:1840 inactive_file:40022 isolated_file:0 [ 559.301385][T17467] unevictable:768 dirty:176 writeback:0 [ 559.301385][T17467] slab_reclaimable:11873 slab_unreclaimable:145914 [ 559.301385][T17467] mapped:30422 shmem:1398 pagetables:939 [ 559.301385][T17467] sec_pagetables:0 bounce:0 [ 559.301385][T17467] kernel_misc_reclaimable:0 [ 559.301385][T17467] free:1274980 free_pcp:20399 free_cma:0 [ 559.788445][T17467] Node 0 active_anon:14548kB inactive_anon:0kB active_file:7360kB inactive_file:159880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121696kB dirty:728kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16980kB pagetables:3716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 559.882903][T17467] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 559.919500][T17467] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.031076][T17467] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 560.037025][T17467] Node 0 DMA32 free:1182756kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14404kB inactive_anon:0kB active_file:7360kB inactive_file:158048kB unevictable:1536kB writepending:728kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:62732kB local_pcp:31404kB free_cma:0kB [ 560.082638][T17467] lowmem_reserve[]: 0 0 1 1 1 [ 560.087549][T17467] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 560.157762][T17467] lowmem_reserve[]: 0 0 0 0 0 [ 560.162728][T17467] Node 1 Normal free:3904180kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16956kB local_pcp:8432kB free_cma:0kB [ 560.200213][T17489] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.212098][T17489] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.237824][T17467] lowmem_reserve[]: 0 0 0 0 0 [ 560.243496][T17467] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 560.256715][T17467] Node 0 DMA32: 221*4kB (UME) 120*8kB (UME) 210*16kB (UME) 225*32kB (UME) 1351*64kB (UME) 889*128kB (UME) 508*256kB (UM) 163*512kB (UME) 31*1024kB (UM) 8*2048kB (UME) 173*4096kB (UM) = 1182900kB [ 560.281567][T17467] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 560.310335][T17467] Node 1 Normal: 171*4kB (UE) 43*8kB (UME) 33*16kB (UME) 95*32kB (UME) 31*64kB (UME) 6*128kB (UME) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 950*4096kB (ME) = 3904180kB [ 560.356915][T17489] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.385144][T17467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.398535][T17467] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.409974][T17489] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.410166][T17467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.430827][T17467] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.440363][T17467] 43307 total pagecache pages [ 560.447199][T17467] 0 pages in swap cache [ 560.451596][T17467] Free swap = 124996kB [ 560.455893][T17467] Total swap = 124996kB [ 560.460377][T17467] 2097051 pages RAM [ 560.464742][T17467] 0 pages HighMem/MovableOnly [ 560.469888][T17467] 424872 pages reserved [ 560.474842][T17467] 0 pages cma reserved [ 560.563880][T17489] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.611555][T17489] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.728816][T17489] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.751276][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3598'. [ 560.760649][T17489] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.957702][ T6368] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.967298][ T6368] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.069677][T11753] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.107587][T11753] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.131100][ T5856] Bluetooth: hci0: command tx timeout [ 561.202223][T11753] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.221124][T11753] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.259841][T11753] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.280350][T11753] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.371288][T17513] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3600'. [ 561.380660][T17513] block nbd0: not configured, cannot reconfigure [ 562.297373][T17517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.996576][T17527] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.093006][ T7952] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.101554][ T7952] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.110051][ T7952] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.134074][ T7952] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.204186][T17474] chnl_net:caif_netlink_parms(): no params data found [ 563.217147][ T5856] Bluetooth: hci0: command tx timeout [ 563.271346][ T7952] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.297022][ T7952] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.341422][ T7952] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.349857][ T7952] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.459464][T17539] netlink: 'syz.8.3609': attribute type 9 has an invalid length. [ 563.541563][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.553738][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.674460][T17544] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3610'. [ 564.266110][T17457] Set syz1 is full, maxelem 65536 reached [ 564.381191][T11745] bond0 (unregistering): Released all slaves [ 564.397937][T11745] bond1 (unregistering): Released all slaves [ 564.412302][T11745] bond2 (unregistering): Released all slaves [ 564.498306][T17557] netlink: 'syz.5.3612': attribute type 21 has an invalid length. [ 564.630016][T11745] tipc: Disabling bearer [ 564.681549][T11745] tipc: Left network mode [ 564.760532][T17474] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.779661][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.789290][T17474] bridge_slave_0: entered allmulticast mode [ 564.797317][T17474] bridge_slave_0: entered promiscuous mode [ 564.832194][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3617'. [ 564.884509][T17474] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.892053][T17474] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.899419][T17474] bridge_slave_1: entered allmulticast mode [ 564.912440][T17474] bridge_slave_1: entered promiscuous mode [ 564.975681][T11745] mac80211_hwsim hwsim17 wlan0 (unregistering): left promiscuous mode [ 565.018873][T17579] tipc: Enabled bearer , priority 0 [ 565.027676][T17582] syzkaller0: entered promiscuous mode [ 565.033835][T17582] syzkaller0: entered allmulticast mode [ 565.048627][T17474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.085963][T17474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.097795][T17578] tipc: Resetting bearer [ 565.159802][T17578] tipc: Disabling bearer [ 565.291767][ T5856] Bluetooth: hci0: command tx timeout [ 565.327667][T17474] team0: Port device team_slave_0 added [ 565.578242][T17474] team0: Port device team_slave_1 added [ 565.639518][T17596] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3623'. [ 565.820240][T11745] hsr_slave_0: left promiscuous mode [ 565.838142][T11745] hsr_slave_1: left promiscuous mode [ 565.868190][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3625'. [ 565.885702][T17601] netlink: 'syz.9.3625': attribute type 15 has an invalid length. [ 566.938419][T17474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.945708][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.972963][T17474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.039097][T17474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.056088][T17474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.085199][T17474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.210214][T17474] hsr_slave_0: entered promiscuous mode [ 567.223213][T17474] hsr_slave_1: entered promiscuous mode [ 567.371564][ T5856] Bluetooth: hci0: command tx timeout [ 567.708551][T17638] IPVS: stopping backup sync thread 17639 ... [ 567.716659][T17639] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 567.801945][T11745] IPVS: stop unused estimator thread 0... [ 568.627979][T17474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.668531][T17474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.765428][T17474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.867381][T17474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.940704][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3639'. [ 569.298255][T17474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.339077][T17474] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.359019][T17676] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3641'. [ 569.378526][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.385867][T11753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.409888][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.417215][T11753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.730289][T17685] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 569.793549][T17685] IPVS: length: 148 != 24 [ 570.080059][T17703] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3644'. [ 570.160605][T17474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.533635][T17714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3647'. [ 570.682548][T17725] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3650'. [ 570.854479][T17734] netlink: 'syz.7.3653': attribute type 15 has an invalid length. [ 570.875485][T17734] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3653'. [ 570.903147][T17735] tipc: Enabled bearer , priority 0 [ 570.994302][T17474] veth0_vlan: entered promiscuous mode [ 571.025229][T17474] veth1_vlan: entered promiscuous mode [ 571.090011][T17474] veth0_macvtap: entered promiscuous mode [ 571.109384][T17474] veth1_macvtap: entered promiscuous mode [ 571.137995][T17474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.160338][T17474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.186104][T11756] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.203287][T11756] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.227063][T17744] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3655'. [ 571.239926][T11756] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.269560][T11756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.398869][T11754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.420004][T11754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.437783][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3659'. [ 571.456603][T17752] openvswitch: netlink: IP tunnel dst address not specified [ 571.491025][T11754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.499710][T11754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.514425][T17724] tipc: Resetting bearer [ 571.553208][T17724] tipc: Disabling bearer [ 571.569795][T17756] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 571.580779][T17756] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 571.598716][T17754] tipc: Enabled bearer , priority 0 [ 571.621464][T17754] syzkaller0: entered promiscuous mode [ 571.627138][T17754] syzkaller0: entered allmulticast mode [ 571.672740][T17754] tipc: Resetting bearer [ 571.728576][T17753] tipc: Resetting bearer [ 571.829221][T17761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3663'. [ 571.838860][T17763] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.856196][T17753] tipc: Disabling bearer [ 572.277802][T17776] netlink: 'syz.9.3667': attribute type 303 has an invalid length. [ 572.399738][T17781] syzkaller1: entered promiscuous mode [ 572.443475][T17781] syzkaller1: entered allmulticast mode [ 572.489113][T17781] netlink: 'syz.6.3669': attribute type 15 has an invalid length. [ 572.513446][T17788] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.548144][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3670'. [ 572.709313][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.730205][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.740291][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.755489][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.764065][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 572.899922][T17795] netlink: 'syz.8.3670': attribute type 11 has an invalid length. [ 572.911579][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3670'. [ 572.974765][T17795] netlink: 'syz.8.3670': attribute type 11 has an invalid length. [ 573.002566][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3670'. [ 573.214237][T11753] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.252579][T11753] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.346462][T17798] lo speed is unknown, defaulting to 1000 [ 573.468913][T11753] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.534898][T11753] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.590469][T17815] tipc: Enabled bearer , priority 0 [ 573.678564][T11753] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.705798][T11753] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.792198][T17821] tipc: Resetting bearer [ 573.857244][T17822] netlink: 'syz.8.3678': attribute type 2 has an invalid length. [ 573.885329][T11753] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.924684][T11753] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.031344][T17815] syzkaller0: entered promiscuous mode [ 574.037012][T17815] syzkaller0: entered allmulticast mode [ 574.192411][T17823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.224846][T17823] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.267418][T17823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.363766][T17822] k›*·]‘: entered promiscuous mode [ 574.396168][T17813] tipc: Resetting bearer [ 574.398727][T17830] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 574.441782][T17813] tipc: Disabling bearer [ 574.468027][T17825] veth0_to_team: entered promiscuous mode [ 574.500984][T17825] veth0_to_team: entered allmulticast mode [ 574.807035][T17846] netem: change failed [ 574.821870][ T5849] Bluetooth: hci1: command tx timeout [ 574.854771][T17845] netem: change failed [ 574.893356][T11753] bridge_slave_1: left allmulticast mode [ 574.917943][T11753] bridge_slave_1: left promiscuous mode [ 574.935284][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.013541][T11753] bridge_slave_0: left allmulticast mode [ 575.035950][T11753] bridge_slave_0: left promiscuous mode [ 575.062300][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.348591][T17854] netlink: 'syz.6.3683': attribute type 6 has an invalid length. [ 575.539625][T17872] __nla_validate_parse: 3 callbacks suppressed [ 575.539644][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3686'. [ 576.284278][T11753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.297836][T11753] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 576.309646][T11753] bond0 (unregistering): Released all slaves [ 576.324380][T11753] bond1 (unregistering): Released all slaves [ 576.449140][T11753] bond2 (unregistering): Released all slaves [ 576.629792][T11753] bond3 (unregistering): (slave veth3): Releasing active interface [ 576.639723][T11753] bond3 (unregistering): Released all slaves [ 576.827274][T11753] bond4 (unregistering): Released all slaves [ 576.848343][T17841] lo speed is unknown, defaulting to 1000 [ 576.901002][ T5849] Bluetooth: hci1: command tx timeout [ 577.017986][T17866] netlink: 'syz.9.3686': attribute type 11 has an invalid length. [ 577.041124][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3686'. [ 577.072488][T11753] tipc: Left network mode [ 577.078090][T17866] netlink: 'syz.9.3686': attribute type 11 has an invalid length. [ 577.101180][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3686'. [ 577.320650][T17880] IPVS: Error connecting to the multicast addr [ 577.397468][T17884] netlink: 'syz.8.3688': attribute type 16 has an invalid length. [ 577.409484][T17884] netlink: 'syz.8.3688': attribute type 17 has an invalid length. [ 577.931232][T17888] tipc: Enabled bearer , priority 0 [ 577.961272][T17889] syzkaller0: entered promiscuous mode [ 577.968060][T17889] syzkaller0: entered allmulticast mode [ 577.984825][T17882] lo speed is unknown, defaulting to 1000 [ 578.048895][T17798] chnl_net:caif_netlink_parms(): no params data found [ 578.072569][T17885] tipc: Resetting bearer [ 578.131770][T17885] tipc: Disabling bearer [ 578.384066][T17906] IPv6: Can't replace route, no match found [ 578.415351][T17798] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.425377][T17798] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.436095][T17798] bridge_slave_0: entered allmulticast mode [ 578.449190][T17798] bridge_slave_0: entered promiscuous mode [ 578.472342][T17798] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.480801][T17798] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.496962][T17798] bridge_slave_1: entered allmulticast mode [ 578.508009][T17798] bridge_slave_1: entered promiscuous mode [ 578.603603][T17798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.886417][T17902] lo speed is unknown, defaulting to 1000 [ 578.928765][T17798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.976790][ T5856] Bluetooth: hci1: command tx timeout [ 579.125324][T17901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.429099][T17913] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3694'. [ 579.520767][T17798] team0: Port device team_slave_0 added [ 579.566112][T17798] team0: Port device team_slave_1 added [ 579.839420][T11753] hsr_slave_0: left promiscuous mode [ 579.877511][T11753] hsr_slave_1: left promiscuous mode [ 580.280788][T11753] team0 (unregistering): Port device team_slave_1 removed [ 580.337547][T11753] team0 (unregistering): Port device team_slave_0 removed [ 580.768087][T17798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.777159][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.803787][T17798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.825167][ T9824] lo speed is unknown, defaulting to 1000 [ 580.831369][ T9824] syz0: Port: 1 Link DOWN [ 580.835933][ T9824] lo speed is unknown, defaulting to 1000 [ 580.853425][T17798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.860398][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.908084][T17798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.037076][T17798] hsr_slave_0: entered promiscuous mode [ 581.052197][ T5856] Bluetooth: hci1: command tx timeout [ 581.061388][T17798] hsr_slave_1: entered promiscuous mode [ 581.067838][T17798] debugfs: 'hsr0' already exists in 'hsr' [ 581.086386][T17798] Cannot create hsr debugfs directory [ 581.095214][T17925] team0: entered promiscuous mode [ 581.100273][T17925] team_slave_0: entered promiscuous mode [ 581.106850][T17925] team_slave_1: entered promiscuous mode [ 581.130095][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3698'. [ 581.229956][T11745] smc: removing ib device syz0 [ 581.488606][T17925] team0 (unregistering): left promiscuous mode [ 581.497156][T17925] team_slave_0: left promiscuous mode [ 581.515289][T17925] team_slave_1: left promiscuous mode [ 581.546263][T17925] team0 (unregistering): Port device team_slave_0 removed [ 581.574839][T17925] team0 (unregistering): Port device team_slave_1 removed [ 582.010571][T17930] netlink: 'syz.8.3700': attribute type 10 has an invalid length. [ 582.077497][T17933] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 582.559144][T17942] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 582.570376][T17939] IPVS: stopping backup sync thread 17942 ... [ 582.632210][T17939] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3704'. [ 582.649297][T17939] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3704'. [ 582.928252][T17950] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.310412][T17953] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3708'. [ 583.529761][T11753] IPVS: stop unused estimator thread 0... [ 583.536100][T17798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 583.574895][T17798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 583.616273][T17798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 583.629370][T17956] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3709'. [ 583.667380][T17798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 583.822590][T17967] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3711'. [ 583.983055][T17798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.123400][T17798] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.188112][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.195542][T11745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.436401][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.443678][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.837001][T17990] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.981269][T17992] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3718'. [ 585.342398][T18011] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 585.364804][T18012] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.526537][T18019] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3726'. [ 585.528103][T17798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.643935][T18024] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3727'. [ 585.886923][T18036] tipc: Started in network mode [ 585.895853][T18036] tipc: Node identity 8a67783745f9, cluster identity 4711 [ 585.916297][T18036] tipc: Enabled bearer , priority 0 [ 585.937617][T18036] syzkaller0: entered promiscuous mode [ 585.954370][T18036] syzkaller0: entered allmulticast mode [ 586.110472][T18033] tipc: Resetting bearer [ 586.184425][T18033] tipc: Disabling bearer [ 586.347538][T17798] veth0_vlan: entered promiscuous mode [ 586.404557][T17798] veth1_vlan: entered promiscuous mode [ 586.514177][T17798] veth0_macvtap: entered promiscuous mode [ 586.554944][T17798] veth1_macvtap: entered promiscuous mode [ 586.600338][T17798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.635615][T17798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.676525][T18046] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3731'. [ 586.690187][T11745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.718901][T11745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.791002][T11745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.806891][T11745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.038763][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3735'. [ 587.098416][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3735'. [ 587.112274][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.163247][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.206694][T18060] netlink: 'syz.7.3735': attribute type 11 has an invalid length. [ 587.258050][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3735'. [ 587.273475][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.296059][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.310101][T18060] netlink: 'syz.7.3735': attribute type 11 has an invalid length. [ 587.323015][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3735'. [ 587.733448][T18094] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 587.754105][T18094] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 588.051551][T18101] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.282678][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 588.297056][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 588.307547][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 588.316990][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 588.325154][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 588.369403][T18107] netlink: 'syz.6.3743': attribute type 29 has an invalid length. [ 588.379259][T18100] netlink: 'syz.6.3743': attribute type 29 has an invalid length. [ 588.390242][T18109] tipc: Started in network mode [ 588.427659][T18109] tipc: Node identity 92915cac2f9c, cluster identity 4711 [ 588.457709][T18109] tipc: Enabled bearer , priority 0 [ 588.485568][T18112] syzkaller0: entered promiscuous mode [ 588.521396][T18112] syzkaller0: entered allmulticast mode [ 588.540749][T18109] tipc: Resetting bearer [ 588.563750][T18104] tipc: Resetting bearer [ 588.608874][T18104] tipc: Disabling bearer [ 588.662926][ T36] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.829373][ T36] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.935741][ T36] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.089053][ T36] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.166599][T18130] tipc: Enabling of bearer rejected, failed to enable media [ 589.172872][T18132] netlink: 'syz.5.3753': attribute type 4 has an invalid length. [ 589.184286][T18132] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3753'. [ 589.416647][T18136] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.413359][ T5849] Bluetooth: hci2: command tx timeout [ 590.459436][ T36] bond0 (unregistering): Released all slaves [ 590.475522][ T36] bond1 (unregistering): Released all slaves [ 590.490473][ T36] bond2 (unregistering): Released all slaves [ 590.507496][ T36] bond3 (unregistering): Released all slaves [ 590.644197][ T36] : left promiscuous mode [ 590.727772][T18146] netlink: 'syz.5.3756': attribute type 4 has an invalid length. [ 590.781076][ T36] tipc: Left network mode [ 590.928294][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3757'. [ 591.021271][T18149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.056299][T18150] IPv6: Can't replace route, no match found [ 591.094014][T18149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.316655][T18158] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3760'. [ 591.622412][T18110] chnl_net:caif_netlink_parms(): no params data found [ 591.688824][T18169] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3763'. [ 592.100985][ T36] hsr_slave_0: left promiscuous mode [ 592.116878][ T36] hsr_slave_1: left promiscuous mode [ 592.491149][ T5849] Bluetooth: hci2: command tx timeout [ 593.690143][T18110] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.709671][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.732227][T18110] bridge_slave_0: entered allmulticast mode [ 593.740528][T18110] bridge_slave_0: entered promiscuous mode [ 593.750441][T18110] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.758109][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.767358][T18110] bridge_slave_1: entered allmulticast mode [ 593.776194][T18110] bridge_slave_1: entered promiscuous mode [ 593.890232][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.927374][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.937590][ T36] IPVS: stop unused estimator thread 0... [ 593.954883][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3771'. [ 594.054840][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.141213][T18204] netlink: 'syz.5.3773': attribute type 1 has an invalid length. [ 594.149050][T18204] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3773'. [ 594.237834][T18197] bridge_slave_1 (unregistering): left allmulticast mode [ 594.245178][T18197] bridge_slave_1 (unregistering): left promiscuous mode [ 594.254418][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.319122][T18110] team0: Port device team_slave_0 added [ 594.342083][T18110] team0: Port device team_slave_1 added [ 594.404758][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.412643][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.439496][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.458256][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.469645][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.497894][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.572670][ T5849] Bluetooth: hci2: command tx timeout [ 594.593098][T18110] hsr_slave_0: entered promiscuous mode [ 594.599764][T18110] hsr_slave_1: entered promiscuous mode [ 594.606915][T18110] debugfs: 'hsr0' already exists in 'hsr' [ 594.613644][T18110] Cannot create hsr debugfs directory [ 594.800722][T18220] netlink: 'syz.6.3779': attribute type 4 has an invalid length. [ 594.809206][T18220] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3779'. [ 594.990545][T18226] tipc: Enabled bearer , priority 0 [ 594.998863][T18226] syzkaller0: entered promiscuous mode [ 595.004894][T18226] syzkaller0: entered allmulticast mode [ 595.026253][T18226] tipc: Resetting bearer [ 595.045719][T18225] tipc: Resetting bearer [ 595.107112][T18225] tipc: Disabling bearer [ 595.357800][T18242] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 595.361423][T18239] IPVS: stopping backup sync thread 18242 ... [ 595.373083][T18110] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 595.403295][T18110] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 595.440368][T18110] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 595.483921][T18110] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 595.493018][T18246] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3789'. [ 595.576161][T18255] netlink: 'syz.8.3790': attribute type 4 has an invalid length. [ 595.603586][T18255] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3790'. [ 595.780524][T18110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.823710][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.858814][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.866183][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.895152][T18269] netlink: 'syz.8.3794': attribute type 21 has an invalid length. [ 595.913610][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.920848][ T7952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.942922][T18269] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3794'. [ 596.007818][T18269] tipc: Enabled bearer , priority 0 [ 596.036727][T18269] syzkaller0: entered promiscuous mode [ 596.054888][T18269] syzkaller0: entered allmulticast mode [ 596.090610][T18110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.150768][T18271] tipc: Resetting bearer [ 596.461298][T18268] tipc: Resetting bearer [ 596.585164][T18268] tipc: Disabling bearer [ 596.652164][ T5849] Bluetooth: hci2: command tx timeout [ 596.682448][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.808937][T18295] netlink: 'syz.6.3800': attribute type 4 has an invalid length. [ 596.826845][T18297] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3801'. [ 596.836873][T18295] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3800'. [ 597.422430][T18110] veth0_vlan: entered promiscuous mode [ 597.462406][T18110] veth1_vlan: entered promiscuous mode [ 597.614610][T18110] veth0_macvtap: entered promiscuous mode [ 597.646598][T18110] veth1_macvtap: entered promiscuous mode [ 597.755030][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.799067][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.850396][T11756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.891982][T11756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.931932][T11756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.968663][T11756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.205874][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.223201][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.342309][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.358834][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.389248][T18348] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 599.129685][T18394] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3831'. [ 599.156110][T18390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.254860][T18398] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3829'. [ 599.315235][T18398] gretap0: entered promiscuous mode [ 599.552052][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 599.799417][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.801375][T18416] netlink: 'syz.5.3834': attribute type 11 has an invalid length. [ 599.828550][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.838969][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.848763][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.859329][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.867956][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 600.009065][T18416] netlink: 'syz.5.3834': attribute type 11 has an invalid length. [ 600.034438][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.066347][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.081030][T18416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3834'. [ 600.100168][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.116324][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.304980][T18427] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3841'. [ 600.369549][T18430] tipc: Cannot configure node identity twice [ 600.383450][T18430] netlink: 'syz.5.3842': attribute type 2 has an invalid length. [ 600.418290][T18430] netlink: 'syz.5.3842': attribute type 2 has an invalid length. [ 601.119530][T18417] chnl_net:caif_netlink_parms(): no params data found [ 601.254832][T18469] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3849'. [ 601.263288][T18468] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3850'. [ 601.395269][T18417] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.413598][T18417] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.422430][T18417] bridge_slave_0: entered allmulticast mode [ 601.459502][T18417] bridge_slave_0: entered promiscuous mode [ 601.499126][T18417] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.523286][T18417] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.533746][T18417] bridge_slave_1: entered allmulticast mode [ 601.547995][T18417] bridge_slave_1: entered promiscuous mode [ 601.656806][T18482] netlink: 'syz.9.3854': attribute type 1 has an invalid length. [ 601.724785][T18482] netlink: 'syz.9.3854': attribute type 2 has an invalid length. [ 601.822694][T18488] netlink: 'syz.6.3856': attribute type 9 has an invalid length. [ 601.844768][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3856'. [ 601.870598][T18417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.931485][ T5856] Bluetooth: hci3: command tx timeout [ 601.977492][T18488] erspan0: entered promiscuous mode [ 601.987653][T18488] macvlan2: entered promiscuous mode [ 601.994320][T18488] macvlan2: entered allmulticast mode [ 601.999966][T18488] erspan0: entered allmulticast mode [ 602.025000][T18417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.206403][T18495] ieee802154 phy0 wpan0: encryption failed: -22 [ 602.225881][T18417] team0: Port device team_slave_0 added [ 602.254395][T18417] team0: Port device team_slave_1 added [ 602.348657][T18417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.365645][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.408659][T18417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.434553][T18417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.445185][T18509] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 602.446151][T18417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.489545][T18417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.597174][T18516] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3866'. [ 602.598878][T18505] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.613833][T18505] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.804401][T18505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.165474][T18511] vlan3: entered promiscuous mode [ 603.188795][T18511] vlan3: entered allmulticast mode [ 603.206574][T18511] hsr_slave_1: entered allmulticast mode [ 603.282480][T18514] !: renamed from dummy0 (while UP) [ 603.493094][T18540] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3870'. [ 603.509063][ T36] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.529952][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.556597][ T36] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.581556][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.630993][ T36] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.639906][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.683573][ T36] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.728189][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.941849][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3875'. [ 604.011233][ T5856] Bluetooth: hci3: command tx timeout [ 604.263521][T18417] hsr_slave_0: entered promiscuous mode [ 604.276948][T18417] hsr_slave_1: entered promiscuous mode [ 604.317300][T18417] debugfs: 'hsr0' already exists in 'hsr' [ 604.332513][T18417] Cannot create hsr debugfs directory [ 604.349824][T18583] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 604.349910][T18581] IPVS: stopping backup sync thread 18583 ... [ 604.377392][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3879'. [ 604.387177][T18574] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3879'. [ 604.475595][T18587] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3881'. [ 604.684931][T18596] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3883'. [ 604.699641][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3883'. [ 605.239117][T18614] tipc: Enabled bearer , priority 0 [ 605.250281][T18614] syzkaller0: entered promiscuous mode [ 605.255846][T18614] syzkaller0: entered allmulticast mode [ 605.306233][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3891'. [ 605.347690][T18614] tipc: Resetting bearer [ 605.366923][T18611] tipc: Resetting bearer [ 605.418365][T18611] tipc: Disabling bearer [ 605.659403][T18626] netlink: 'syz.7.3894': attribute type 16 has an invalid length. [ 605.669338][T18626] netlink: 'syz.7.3894': attribute type 17 has an invalid length. [ 605.752304][T18626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.865079][T18417] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 605.878289][T18417] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 605.897977][T18417] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 605.914823][T18417] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.053534][T18417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.077699][T18417] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.091319][ T5856] Bluetooth: hci3: command tx timeout [ 606.119660][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.126922][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.149028][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.156271][ T7952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.193850][T18648] Bluetooth: MGMT ver 1.23 [ 606.541717][T18665] netlink: 'syz.9.3909': attribute type 4 has an invalid length. [ 607.136628][T18417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.220371][T18682] __nla_validate_parse: 1 callbacks suppressed [ 607.220392][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3913'. [ 607.303236][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3913'. [ 607.719147][T18684] veth3: left promiscuous mode [ 607.732312][T18684] vlan2: left promiscuous mode [ 607.760812][T18684] bond0: left promiscuous mode [ 607.767484][T18684] vlan2: left allmulticast mode [ 607.781200][T18684] bond0: left allmulticast mode [ 607.959394][T18668] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3906'. [ 608.175269][ T5856] Bluetooth: hci3: command tx timeout [ 608.363038][T18716] netlink: 'syz.9.3920': attribute type 4 has an invalid length. [ 608.371391][T18716] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3920'. [ 608.446869][T18417] veth0_vlan: entered promiscuous mode [ 608.503179][T18417] veth1_vlan: entered promiscuous mode [ 608.551215][T18720] IPVS: stopping backup sync thread 18721 ... [ 608.565174][T18720] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3922'. [ 608.598123][T18720] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3922'. [ 608.622816][T18417] veth0_macvtap: entered promiscuous mode [ 608.772218][T18417] veth1_macvtap: entered promiscuous mode [ 608.833674][T18417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.894957][T18417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.965486][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.105100][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.137982][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.187260][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.297672][T11746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.332077][T11746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.392408][T11756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.400281][T11756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.584617][T18745] tipc: Enabling of bearer rejected, failed to enable media [ 609.973725][T18763] netlink: 'syz.8.3934': attribute type 4 has an invalid length. [ 610.004357][T18763] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3934'. [ 610.358120][T18780] netlink: 'syz.5.3938': attribute type 1 has an invalid length. [ 610.630408][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 610.641316][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 610.670988][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 610.691384][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 610.701318][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.744571][T18787] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3942'. [ 611.301525][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3946'. [ 611.378367][T18802] nbd: must specify a device to reconfigure [ 611.516895][T18805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3946'. [ 611.551825][T18805] vlan4: entered promiscuous mode [ 611.556923][T18805] batadv0: entered promiscuous mode [ 611.652096][T18811] sctp: [Deprecated]: syz.6.3949 (pid 18811) Use of int in maxseg socket option. [ 611.652096][T18811] Use struct sctp_assoc_value instead [ 612.072174][T18784] chnl_net:caif_netlink_parms(): no params data found [ 612.299773][T18784] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.314683][T18784] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.317881][T18843] netlink: 'syz.6.3959': attribute type 4 has an invalid length. [ 612.332346][T18843] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3959'. [ 612.342452][T18784] bridge_slave_0: entered allmulticast mode [ 612.350619][T18784] bridge_slave_0: entered promiscuous mode [ 612.361743][T18784] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.369176][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.376809][T18784] bridge_slave_1: entered allmulticast mode [ 612.385977][T18784] bridge_slave_1: entered promiscuous mode [ 612.407557][T18839] batman_adv: batadv0: Adding interface: ip6gretap1 [ 612.417935][T18839] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.468558][T18839] batman_adv: batadv0: Interface activated: ip6gretap1 [ 612.553460][T18849] netlink: 'syz.7.3961': attribute type 1 has an invalid length. [ 612.614677][T18849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.628514][T18784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.648104][T18784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.709478][T18854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.717347][T18854] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 612.720144][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3962'. [ 612.729802][T18854] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 612.811801][ T5849] Bluetooth: hci4: command tx timeout [ 612.924347][T18849] veth3: entered promiscuous mode [ 612.986074][T18855] syzkaller0: entered promiscuous mode [ 612.992322][T18855] syzkaller0: entered allmulticast mode [ 613.317388][T18877] openvswitch: netlink: Key type 251 is out of range max 32 [ 614.657282][T18892] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.892530][ T5849] Bluetooth: hci4: command tx timeout [ 615.281738][T18784] team0: Port device team_slave_0 added [ 615.299674][T18784] team0: Port device team_slave_1 added [ 615.442378][T18784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.465871][T18784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.514967][T18784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.539389][T18784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.554103][T18784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.591518][T18784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.668870][T18911] netlink: 'syz.5.3980': attribute type 12 has an invalid length. [ 615.696687][T18911] netlink: 'syz.5.3980': attribute type 29 has an invalid length. [ 615.721045][T18911] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3980'. [ 615.802655][T18916] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3983'. [ 615.871653][T18784] hsr_slave_0: entered promiscuous mode [ 615.898806][T18784] hsr_slave_1: entered promiscuous mode [ 615.923405][T18784] debugfs: 'hsr0' already exists in 'hsr' [ 615.936688][T18784] Cannot create hsr debugfs directory [ 616.312697][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.521152][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.583754][T18929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.899392][T18929] erspan0: left allmulticast mode [ 616.974633][ T5849] Bluetooth: hci4: command tx timeout [ 617.050790][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3982'. [ 617.062518][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3982'. [ 617.096151][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.112353][T11756] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.151103][T11756] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.185757][T11756] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.200700][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3995'. [ 617.215486][T18963] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3995'. [ 617.225357][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3995'. [ 617.320202][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3996'. [ 617.367999][T18961] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.376161][T18961] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.406335][T18972] __nla_validate_parse: 1 callbacks suppressed [ 617.406407][T18972] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3997'. [ 617.899448][T18961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.937893][T18961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.232630][T18961] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 618.317737][T11756] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.338713][T11756] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.424009][T11756] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.442887][T11756] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.629799][T18996] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4005'. [ 618.787551][T19004] netlink: 'syz.5.4007': attribute type 4 has an invalid length. [ 618.900020][T19009] netlink: 'syz.6.4010': attribute type 4 has an invalid length. [ 618.911086][T19009] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4010'. [ 619.025343][ T30] audit: type=1800 audit(1754576028.162:9): pid=19007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4007" name="cgroup.controllers" dev="tmpfs" ino=396 res=0 errno=0 [ 619.055852][ T5849] Bluetooth: hci4: command tx timeout [ 619.523177][T18784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 619.570051][T18784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 619.614115][T18784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 619.644241][T18784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 619.676173][T19032] netlink: 'syz.7.4020': attribute type 12 has an invalid length. [ 619.684767][T19032] netlink: 'syz.7.4020': attribute type 29 has an invalid length. [ 619.703704][T19032] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4020'. [ 619.779684][T19034] syzkaller1: entered promiscuous mode [ 619.801141][T19034] syzkaller1: entered allmulticast mode [ 619.904844][T19049] vxcan1: entered allmulticast mode [ 619.948288][T19051] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.018945][T19054] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.159161][T18784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.223097][T18784] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.246375][T11746] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.253836][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.278729][T19061] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4028'. [ 620.284236][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.295596][ T7952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.712550][T19077] netlink: 'syz.8.4034': attribute type 1 has an invalid length. [ 620.826967][T19077] bond1: entered promiscuous mode [ 620.833233][T19077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.857492][T19079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4035'. [ 621.000010][T18784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.162029][T19089] syzkaller1: entered promiscuous mode [ 621.167844][T19089] syzkaller1: entered allmulticast mode [ 621.282592][T19095] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4038'. [ 621.649546][T18784] veth0_vlan: entered promiscuous mode [ 621.698722][T18784] veth1_vlan: entered promiscuous mode [ 621.805801][T18784] veth0_macvtap: entered promiscuous mode [ 621.842229][T18784] veth1_macvtap: entered promiscuous mode [ 621.885627][T18784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.926857][T18784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.959219][T19114] wlan1: mtu less than device minimum [ 621.999383][T11756] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.035201][T11756] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.076159][T11756] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.105675][T11756] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.118615][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4045'. [ 622.358709][T11746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.361793][T19123] netlink: 'syz.5.4047': attribute type 1 has an invalid length. [ 622.379401][T11746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.469999][T11753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.478897][T11753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.621092][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3931'. [ 622.693240][T19135] netlink: 'syz.9.3931': attribute type 11 has an invalid length. [ 622.731180][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3931'. [ 622.798019][T19142] netlink: 'syz.5.4056': attribute type 1 has an invalid length. [ 622.807417][T19135] netlink: 'syz.9.3931': attribute type 11 has an invalid length. [ 622.811342][T11754] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.844168][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3931'. [ 622.850550][T11754] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.917555][T11754] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.957653][T11754] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.009093][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4059'. [ 623.018669][T19151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.123681][T19157] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 623.123797][T19156] IPVS: stopping backup sync thread 19157 ... [ 623.217476][T19161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4061'. [ 623.282713][T19161] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4061'. [ 623.708951][T19166] netlink: 'syz.9.4063': attribute type 4 has an invalid length. [ 623.737495][T19166] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4063'. [ 624.048271][T19172] Bluetooth: MGMT ver 1.23 [ 624.102718][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4066'. [ 624.295920][T19177] tipc: Enabling of bearer rejected, failed to enable media [ 624.388222][T19182] siw: device registration error -23 [ 624.415522][T19184] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4070'. [ 624.519859][T19177] syzkaller0: entered promiscuous mode [ 624.542726][T19177] syzkaller0: entered allmulticast mode [ 624.614903][T19189] ipvlan2: entered promiscuous mode [ 624.982843][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.019134][T19208] syz_tun: entered allmulticast mode [ 625.078926][T19204] dvmrp1: entered allmulticast mode [ 625.118343][T19203] syz_tun: left allmulticast mode [ 625.354897][T19206] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4076'. [ 625.836010][T19252] syzkaller1: entered promiscuous mode [ 625.844626][T19252] syzkaller1: entered allmulticast mode [ 626.025240][T19263] bridge0: port 3(macvlan2) entered blocking state [ 626.035042][T19263] bridge0: port 3(macvlan2) entered disabled state [ 626.044964][T19263] macvlan2: entered allmulticast mode [ 626.050622][T19263] bridge0: entered allmulticast mode [ 626.058020][T19263] macvlan2: left allmulticast mode [ 626.063231][T19263] bridge0: left allmulticast mode [ 626.894949][T19307] tipc: Enabled bearer , priority 0 [ 626.912399][T19307] syzkaller0: entered promiscuous mode [ 626.917923][T19307] syzkaller0: entered allmulticast mode [ 627.004613][T19307] tipc: Resetting bearer [ 627.047387][T19306] tipc: Resetting bearer [ 627.115516][T19306] tipc: Disabling bearer [ 627.204131][T19319] syzkaller1: entered promiscuous mode [ 627.212350][T19319] syzkaller1: entered allmulticast mode [ 627.219383][T19329] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.783304][T19363] __nla_validate_parse: 7 callbacks suppressed [ 627.783327][T19363] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4123'. [ 627.795945][T19365] tipc: Started in network mode [ 627.806103][T19365] tipc: Node identity 2e7ca8a93207, cluster identity 4711 [ 627.813835][T19365] tipc: Enabled bearer , priority 0 [ 627.817030][T19366] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4124'. [ 627.824384][T19365] syzkaller0: entered promiscuous mode [ 627.835485][T19365] syzkaller0: entered allmulticast mode [ 628.033750][T19364] tipc: Resetting bearer [ 628.176265][T19364] tipc: Disabling bearer [ 628.657366][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4133'. [ 628.699684][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4133'. [ 628.796210][T19393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4137'. [ 628.832173][T19385] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 628.888248][T19388] tun0: tun_chr_ioctl cmd 21731 [ 629.268559][ T9824] IPVS: starting estimator thread 0... [ 629.279659][T19410] delete_channel: no stack [ 629.361419][T19415] IPVS: using max 27 ests per chain, 64800 per kthread [ 629.447202][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4147'. [ 629.458001][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4147'. [ 629.469811][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4147'. [ 629.479488][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4147'. [ 629.489012][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4147'. [ 629.540979][T19425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.893065][T19438] netlink: 'syz.8.4153': attribute type 1 has an invalid length. [ 630.524257][T19456] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 630.775733][T19464] netlink: 'syz.5.4162': attribute type 1 has an invalid length. [ 631.012465][T19467] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 631.342912][T19490] tipc: Enabled bearer , priority 0 [ 631.365618][T19490] syzkaller0: entered promiscuous mode [ 631.386670][T19490] syzkaller0: entered allmulticast mode [ 631.559714][T19490] tipc: Resetting bearer [ 631.614690][T19489] tipc: Resetting bearer [ 631.652992][T19489] tipc: Disabling bearer [ 631.778660][T19508] macsec0: entered allmulticast mode [ 631.786006][T19508] veth1_macvtap: entered allmulticast mode [ 631.793730][T19508] macsec0: left allmulticast mode [ 631.799066][T19508] veth1_macvtap: left allmulticast mode [ 631.822803][T19508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.879649][T19510] syzkaller1: entered promiscuous mode [ 631.889752][T19510] syzkaller1: entered allmulticast mode [ 632.529706][T19542] netlink: 'syz.9.4189': attribute type 4 has an invalid length. [ 632.598394][T19545] syzkaller1: entered promiscuous mode [ 632.616759][T19545] syzkaller1: entered allmulticast mode [ 632.741228][T19549] block nbd0: server does not support multiple connections per device. [ 632.771596][T19549] block nbd0: shutting down sockets [ 632.971080][ T5849] Bluetooth: hci4: command 0x0401 tx timeout [ 633.114149][T19568] netlink: 'syz.9.4201': attribute type 1 has an invalid length. [ 633.132499][T19568] __nla_validate_parse: 26 callbacks suppressed [ 633.132520][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4201'. [ 633.266260][T19579] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4204'. [ 633.310266][T19579] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4204'. [ 633.327078][T19579] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4204'. [ 633.434360][T19586] syzkaller1: entered promiscuous mode [ 633.456634][T19586] syzkaller1: entered allmulticast mode [ 633.873381][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4213'. [ 633.890795][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4213'. [ 634.147347][T19614] tipc: Trying to set illegal importance in message [ 634.260408][T19623] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 634.274874][T19622] IPVS: stopping backup sync thread 19623 ... [ 634.284223][T19624] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4220'. [ 634.298524][T19622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4221'. [ 634.314398][T19622] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4221'. [ 634.581948][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4225'. [ 635.924013][T19671] macsec1: entered promiscuous mode [ 635.929288][T19671] macvlan1: entered promiscuous mode [ 635.957713][T19671] macsec1: entered allmulticast mode [ 635.975829][T19671] macvlan1: entered allmulticast mode [ 635.981604][T19671] veth1_vlan: entered allmulticast mode [ 635.990316][T19671] macvlan1: left allmulticast mode [ 635.995604][T19671] veth1_vlan: left allmulticast mode [ 636.001761][T19671] macvlan1: left promiscuous mode [ 636.034805][T19667] IPVS: Error connecting to the multicast addr [ 636.633293][T19704] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.650856][T19704] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.079859][T19704] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.171246][T19704] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.587365][T19704] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.601061][T19704] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.676473][T19739] tipc: Enabled bearer , priority 0 [ 637.779834][T19737] netlink: 'syz.9.4251': attribute type 13 has an invalid length. [ 637.788294][T19737] netlink: 'syz.9.4251': attribute type 17 has an invalid length. [ 637.916224][T19738] team0 (unregistering): Port device team_slave_0 removed [ 637.927134][T19738] team0 (unregistering): Port device team_slave_1 removed [ 637.968602][T19732] syzkaller0: entered promiscuous mode [ 637.974695][T19732] syzkaller0: entered allmulticast mode [ 638.054075][T19704] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.072468][T19704] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.208584][T19752] __nla_validate_parse: 8 callbacks suppressed [ 638.208601][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4265'. [ 638.236517][T19737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.259067][T19744] tipc: Resetting bearer [ 638.333895][T19729] tipc: Resetting bearer [ 638.356755][T19729] tipc: Disabling bearer [ 638.585217][T11746] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.598745][T11746] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.646458][T11746] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.686305][T11746] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.705417][T11746] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.721592][T11746] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.847919][T11754] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.856675][T11754] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.039302][T19779] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4271'. [ 639.607346][T19793] syzkaller1: entered promiscuous mode [ 639.638439][T19793] syzkaller1: entered allmulticast mode [ 639.660224][T19793] syzkaller1: left promiscuous mode [ 639.665551][T19793] syzkaller1: left allmulticast mode [ 639.998733][T19809] geneve2: entered promiscuous mode [ 640.013746][T11745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.036139][T11745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.059068][T11745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.089284][T11745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.907742][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4291'. [ 640.930526][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4291'. [ 641.134655][T19842] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4293'. [ 641.162604][T19843] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4294'. [ 642.023964][T19855] netlink: 592 bytes leftover after parsing attributes in process `syz.8.4298'. [ 642.087714][T19857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.146627][T19862] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 642.146843][T19861] IPVS: stopping backup sync thread 19862 ... [ 642.186090][T19861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4301'. [ 642.195829][T19863] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4300'. [ 642.208384][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4301'. [ 643.618654][T19907] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4317'. [ 643.628112][T19907] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4317'. [ 643.637783][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4317'. [ 643.690804][T19913] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4316'. [ 643.791493][T19919] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 643.791678][T19917] IPVS: stopping backup sync thread 19919 ... [ 643.835501][T19917] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4318'. [ 643.845118][T19917] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4318'. [ 644.532358][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4322'. [ 644.543007][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4322'. [ 644.639914][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4324'. [ 644.649423][T19934] netlink: 'syz.6.4324': attribute type 5 has an invalid length. [ 644.668608][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4324'. [ 645.951609][T19975] pim6reg1: entered promiscuous mode [ 645.972984][T19975] pim6reg1: entered allmulticast mode [ 646.435683][T19984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.505581][T19984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.588883][T19984] batman_adv: batadv0: Removing interface: ip6gretap1 [ 646.942275][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.953030][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.961397][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.977171][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.986134][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 647.499268][ T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.519145][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.545276][T20015] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 647.579192][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.602963][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.627898][T20018] netlink: 'syz.5.4352': attribute type 2 has an invalid length. [ 647.664044][T20018] netlink: 'syz.5.4352': attribute type 2 has an invalid length. [ 648.588861][T19993] chnl_net:caif_netlink_parms(): no params data found [ 648.781444][T20062] block nbd0: server does not support multiple connections per device. [ 648.831427][T20062] block nbd0: shutting down sockets [ 648.894130][T19993] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.920710][T19993] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.944799][T19993] bridge_slave_0: entered allmulticast mode [ 648.969948][T19993] bridge_slave_0: entered promiscuous mode [ 648.980657][T20076] __nla_validate_parse: 19 callbacks suppressed [ 648.980683][T20076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4369'. [ 649.018652][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4372'. [ 649.029337][T20085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4372'. [ 649.040528][T20072] IPVS: Error connecting to the multicast addr [ 649.054105][ T5849] Bluetooth: hci5: command tx timeout [ 649.074126][T19993] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.084967][T19993] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.094770][T19993] bridge_slave_1: entered allmulticast mode [ 649.106381][T19993] bridge_slave_1: entered promiscuous mode [ 649.224629][T19993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.260676][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4373'. [ 649.267195][T19993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.311336][T20094] netlink: 'syz.6.4375': attribute type 32 has an invalid length. [ 649.327042][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4375'. [ 649.374239][T20094] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 649.440588][T19993] team0: Port device team_slave_0 added [ 649.463665][T19993] team0: Port device team_slave_1 added [ 649.593240][T19993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.600297][T19993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.675824][T19993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.748339][T19993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.764370][T20116] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4382'. [ 649.774211][T19993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.825823][T19993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.999515][T19993] hsr_slave_0: entered promiscuous mode [ 650.025621][T19993] hsr_slave_1: entered promiscuous mode [ 650.040663][T19993] debugfs: 'hsr0' already exists in 'hsr' [ 650.056855][T19993] Cannot create hsr debugfs directory [ 650.068311][T20125] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4382'. [ 650.079035][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4385'. [ 650.113169][T20134] bridge_slave_0: left allmulticast mode [ 650.129626][T20134] bridge_slave_0: left promiscuous mode [ 650.135633][T20134] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.565396][T20158] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4396'. [ 650.680156][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4396'. [ 651.141039][ T5849] Bluetooth: hci5: command tx timeout [ 651.881757][T19993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 651.947133][T19993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 652.009898][T19993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 652.071448][T19993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 652.304284][T20236] tipc: Started in network mode [ 652.309214][T20236] tipc: Node identity 8a00743974d9, cluster identity 4711 [ 652.322447][T20236] tipc: Enabled bearer , priority 0 [ 652.403821][T20243] tipc: Resetting bearer [ 652.486097][T19993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.589246][T19993] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.669363][T20235] tipc: Disabling bearer [ 652.725366][T11746] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.732684][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.764230][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.771588][T11745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.026560][T20260] Bluetooth: MGMT ver 1.23 [ 653.061896][T20256] IPv6: Can't replace route, no match found [ 653.215030][ T5849] Bluetooth: hci5: command tx timeout [ 653.324317][T20262] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.351715][T20262] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.638820][T20262] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.681354][T20262] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.749768][T20252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.874214][T20262] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 653.913641][T20262] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.168289][T20262] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.184895][T20262] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.211712][T19993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.253312][T20296] tipc: Enabled bearer , priority 0 [ 654.278916][T20296] syzkaller0: entered promiscuous mode [ 654.292158][T20296] syzkaller0: entered allmulticast mode [ 654.316746][T20296] tipc: Resetting bearer [ 654.334600][T20296] tipc: Disabling bearer [ 654.459799][T20296] __nla_validate_parse: 3 callbacks suppressed [ 654.459818][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4436'. [ 654.465910][T11746] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.520711][T11746] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.656139][T11756] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.686875][T11756] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.755068][T11754] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.784607][T11754] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.847862][T11756] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.857729][T11756] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.929094][T19993] veth0_vlan: entered promiscuous mode [ 654.954630][T19993] veth1_vlan: entered promiscuous mode [ 655.042071][T19993] veth0_macvtap: entered promiscuous mode [ 655.109845][T19993] veth1_macvtap: entered promiscuous mode [ 655.176144][T19993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.291168][ T5849] Bluetooth: hci5: command tx timeout [ 655.379006][T19993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.435324][T20323] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.4444'. [ 655.436210][T11756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.481219][T11756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.495153][T20325] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4446'. [ 655.532348][T11756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.572837][T11745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.705867][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.726858][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.791371][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.807303][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.828287][T20339] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4451'. [ 655.967050][T20347] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4452'. [ 657.069133][T20379] tipc: Enabled bearer , priority 0 [ 657.091577][T20379] syzkaller0: entered promiscuous mode [ 657.097095][T20379] syzkaller0: entered allmulticast mode [ 657.199284][T20379] tipc: Resetting bearer [ 657.262111][T20379] tipc: Disabling bearer [ 657.332690][T20390] [ 657.335057][T20390] ====================================================== [ 657.342250][T20390] WARNING: possible circular locking dependency detected [ 657.349290][T20390] 6.16.0-syzkaller-06574-gd9104cec3e8f #0 Not tainted [ 657.356058][T20390] ------------------------------------------------------ [ 657.363075][T20390] syz.0.4466/20390 is trying to acquire lock: [ 657.369139][T20390] ffffffff8f65e158 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 657.378448][T20390] [ 657.378448][T20390] but task is already holding lock: [ 657.385802][T20390] ffff888027d9c470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 657.395220][T20390] [ 657.395220][T20390] which lock already depends on the new lock. [ 657.395220][T20390] [ 657.405626][T20390] [ 657.405626][T20390] the existing dependency chain (in reverse order) is: [ 657.414634][T20390] [ 657.414634][T20390] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 657.422651][T20390] lock_acquire+0x120/0x360 [ 657.427860][T20390] _raw_spin_lock_bh+0x36/0x50 [ 657.433142][T20390] nr_rt_device_down+0x12a/0x720 [ 657.438607][T20390] nr_device_event+0x137/0x150 [ 657.444086][T20390] notifier_call_chain+0x1b3/0x3e0 [ 657.449833][T20390] __dev_notify_flags+0x18d/0x2e0 [ 657.455378][T20390] netif_change_flags+0xe8/0x1a0 [ 657.461131][T20390] dev_change_flags+0x130/0x260 [ 657.466585][T20390] dev_ioctl+0x7b4/0x1150 [ 657.471682][T20390] sock_do_ioctl+0x22c/0x300 [ 657.476898][T20390] sock_ioctl+0x576/0x790 [ 657.481853][T20390] __se_sys_ioctl+0xf9/0x170 [ 657.487046][T20390] do_syscall_64+0xfa/0x3b0 [ 657.492065][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.498556][T20390] [ 657.498556][T20390] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 657.506387][T20390] lock_acquire+0x120/0x360 [ 657.511493][T20390] _raw_spin_lock_bh+0x36/0x50 [ 657.516852][T20390] nr_rt_device_down+0xa9/0x720 [ 657.522217][T20390] nr_device_event+0x137/0x150 [ 657.527763][T20390] notifier_call_chain+0x1b3/0x3e0 [ 657.533409][T20390] __dev_notify_flags+0x18d/0x2e0 [ 657.538965][T20390] netif_change_flags+0xe8/0x1a0 [ 657.544418][T20390] dev_change_flags+0x130/0x260 [ 657.549876][T20390] dev_ioctl+0x7b4/0x1150 [ 657.554761][T20390] sock_do_ioctl+0x22c/0x300 [ 657.559946][T20390] sock_ioctl+0x576/0x790 [ 657.564787][T20390] __se_sys_ioctl+0xf9/0x170 [ 657.569908][T20390] do_syscall_64+0xfa/0x3b0 [ 657.574946][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.581372][T20390] [ 657.581372][T20390] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 657.589359][T20390] validate_chain+0xb9b/0x2140 [ 657.594852][T20390] __lock_acquire+0xab9/0xd20 [ 657.600136][T20390] lock_acquire+0x120/0x360 [ 657.605150][T20390] _raw_spin_lock_bh+0x36/0x50 [ 657.610433][T20390] nr_remove_neigh+0x25/0xe0 [ 657.615536][T20390] nr_add_node+0x1d9f/0x2570 [ 657.620633][T20390] nr_rt_ioctl+0xc12/0xd50 [ 657.625575][T20390] sock_do_ioctl+0xd9/0x300 [ 657.630668][T20390] sock_ioctl+0x576/0x790 [ 657.635718][T20390] __se_sys_ioctl+0xf9/0x170 [ 657.640836][T20390] do_syscall_64+0xfa/0x3b0 [ 657.645970][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.652405][T20390] [ 657.652405][T20390] other info that might help us debug this: [ 657.652405][T20390] [ 657.662715][T20390] Chain exists of: [ 657.662715][T20390] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 657.662715][T20390] [ 657.676628][T20390] Possible unsafe locking scenario: [ 657.676628][T20390] [ 657.684066][T20390] CPU0 CPU1 [ 657.689414][T20390] ---- ---- [ 657.694765][T20390] lock(&nr_node->node_lock); [ 657.699611][T20390] lock(nr_node_list_lock); [ 657.706906][T20390] lock(&nr_node->node_lock); [ 657.714224][T20390] lock(nr_neigh_list_lock); [ 657.718887][T20390] [ 657.718887][T20390] *** DEADLOCK *** [ 657.718887][T20390] [ 657.727032][T20390] 1 lock held by syz.0.4466/20390: [ 657.732146][T20390] #0: ffff888027d9c470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 657.741924][T20390] [ 657.741924][T20390] stack backtrace: [ 657.747902][T20390] CPU: 1 UID: 0 PID: 20390 Comm: syz.0.4466 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 657.747925][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.747935][T20390] Call Trace: [ 657.747945][T20390] [ 657.747954][T20390] dump_stack_lvl+0x189/0x250 [ 657.747979][T20390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.747994][T20390] ? __pfx__printk+0x10/0x10 [ 657.748012][T20390] ? stack_trace_save+0x9c/0xe0 [ 657.748033][T20390] print_circular_bug+0x2ee/0x310 [ 657.748051][T20390] check_noncircular+0x134/0x160 [ 657.748073][T20390] validate_chain+0xb9b/0x2140 [ 657.748096][T20390] __lock_acquire+0xab9/0xd20 [ 657.748118][T20390] ? nr_remove_neigh+0x25/0xe0 [ 657.748136][T20390] lock_acquire+0x120/0x360 [ 657.748155][T20390] ? nr_remove_neigh+0x25/0xe0 [ 657.748175][T20390] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 657.748193][T20390] ? nr_remove_neigh+0x25/0xe0 [ 657.748211][T20390] _raw_spin_lock_bh+0x36/0x50 [ 657.748229][T20390] ? nr_remove_neigh+0x25/0xe0 [ 657.748247][T20390] nr_remove_neigh+0x25/0xe0 [ 657.748266][T20390] nr_add_node+0x1d9f/0x2570 [ 657.748286][T20390] ? __asan_memcpy+0x40/0x70 [ 657.748306][T20390] ? nr_call_to_digi+0x126/0x1b0 [ 657.748324][T20390] nr_rt_ioctl+0xc12/0xd50 [ 657.748345][T20390] ? kasan_quarantine_put+0xdd/0x220 [ 657.748364][T20390] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 657.748386][T20390] ? apparmor_capable+0x137/0x1b0 [ 657.748404][T20390] ? capable+0x89/0xe0 [ 657.748425][T20390] ? nr_ioctl+0x1b1/0x3b0 [ 657.748440][T20390] sock_do_ioctl+0xd9/0x300 [ 657.748460][T20390] ? __pfx_sock_do_ioctl+0x10/0x10 [ 657.748477][T20390] ? __lock_acquire+0xab9/0xd20 [ 657.748501][T20390] sock_ioctl+0x576/0x790 [ 657.748519][T20390] ? __pfx_sock_ioctl+0x10/0x10 [ 657.748536][T20390] ? __fget_files+0x2a/0x420 [ 657.748550][T20390] ? __fget_files+0x3a0/0x420 [ 657.748564][T20390] ? __fget_files+0x2a/0x420 [ 657.748578][T20390] ? bpf_lsm_file_ioctl+0x9/0x20 [ 657.748598][T20390] ? __pfx_sock_ioctl+0x10/0x10 [ 657.748614][T20390] __se_sys_ioctl+0xf9/0x170 [ 657.748634][T20390] do_syscall_64+0xfa/0x3b0 [ 657.748654][T20390] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.748674][T20390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.748689][T20390] ? clear_bhb_loop+0x60/0xb0 [ 657.748706][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.748720][T20390] RIP: 0033:0x7f02e538ebe9 [ 657.748736][T20390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.748750][T20390] RSP: 002b:00007f02e61f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.748768][T20390] RAX: ffffffffffffffda RBX: 00007f02e55b6090 RCX: 00007f02e538ebe9 [ 657.748780][T20390] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000007 [ 657.748791][T20390] RBP: 00007f02e5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 657.748801][T20390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.748811][T20390] R13: 00007f02e55b6128 R14: 00007f02e55b6090 R15: 00007ffd3676da48 [ 657.748830][T20390]