last executing test programs: 2m39.692671436s ago: executing program 0 (id=435): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) unshare(0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000010000000100000f02000000040000000016000000fc00fff841010000000000000f020000001ba4006f"], &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r3, 0x0, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x400) (async) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) (async) unshare(0x400) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000010000000100000f02000000040000000016000000fc00fff841010000000000000f020000001ba4006f"], &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1}, 0x28) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r3, 0x0, r3}, 0x10) (async) 2m39.396119311s ago: executing program 0 (id=438): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x9}]}]}, 0xfc}}, 0x4810) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) 2m39.140083829s ago: executing program 0 (id=442): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000100), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r4, r3, 0x29}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) 2m39.06382165s ago: executing program 0 (id=443): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0x6, [@multicast2]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0x6, [@multicast2]}]}}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0x3) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xffffff4a}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xffffff4a}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'veth1\x00', 0x1000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000600)={{r2}, 0x0, 0x12, @unused=[0x9, 0x0, 0x2, 0x9], @subvolid=0x800}) syz_open_procfs$namespace(r4, 0x0) 2m37.882146729s ago: executing program 0 (id=455): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2m37.581612536s ago: executing program 0 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="2f3d000000000000000004000000000018110000"], 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00'}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m22.390645457s ago: executing program 32 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="2f3d000000000000000004000000000018110000"], 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00'}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m32.904256691s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m32.90415865s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m32.904068577s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m32.698921677s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m15.227579488s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m0.060078416s ago: executing program 3 (id=890): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000000c0)=""/140, &(0x7f0000000000)=0x8c) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000240)={0x2, &(0x7f0000001040)=[{}, {}]}) 59.702568091s ago: executing program 3 (id=893): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x86, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x9, 0x28, 0x2}, @srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}, @dstopts={0x3b}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket(0x2a, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140), &(0x7f0000000000)=@udp6=r2, 0x1}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000015000000000095000000000000002cbcb9d05f91ac932d9efee8cfe935b8ef9013f93c1d9c3f660823952584400457c0faace280a667be003d41dbab84a14d955984b93ee875df34f4413dcb65cd6f662d6187d3d1640156ba323ed09b9d4c28d6451840453230528fd11b8a16182ce600c4aaf14db5563e0282d88242da4f3e888cf36326e6e44614677c2d716bfea3ebb18700b4e883471c658dcde8a503306b50acc1fece71bb27d274e812b08afb2eafff52fb4aa31f2014879262efdaebfc5ec9a9fccd83baf5b6f0949001292c400e83c73c81"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000100)}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33, 0x0, 0x6}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2, {0xfffffffffffffffe}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x98, 0x5df5, 0x800}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x1ff, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5], 0xff}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8, 0x4, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="1802000001000f0000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x36, 0xc}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRESOCT=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @rand_addr=0x64010101, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESHEX=r1], 0x0, 0x2, 0x0, 0x0, 0xc0f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rose(r9, &(0x7f0000000840)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 59.227265525s ago: executing program 3 (id=896): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0xffffffffffffffff], 0x2c}, 0x1, 0x0, 0x0, 0x20040985}, 0x20000004) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000003bb37b4ee435eb7838c2001700008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002440)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000002480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000002400)='sched_switch\x00', r3}, 0x18) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000002300)={0x2, @broadcast, 0x4e21, 0x3, 'ovf\x00', 0x36, 0x7, 0x78}, 0x2c) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20040000) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2}, 0x94) (async) sendmsg$key(r6, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000440)="ac39b78ff81995de5f8946b05d8d679f78f47ba032c49560bd72", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="019d", 0x2}, {&(0x7f0000000500)="da21a5a524842e340bfce4c62d766d80e6c81ed9548c78fa616983e3c9ac41349ada351109894496c9f89685498d730c8f406e0a34ebc13bdc3ea2f7fae1f8e91092ac5aa814bee026070b5152a0e4ddaf71dbe11c9bda60100a534c46a4338ada824a46", 0x64}], 0x2, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x18}}], 0x2, 0x4000) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000880)={@loopback, @multicast2, r8}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x7, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="a21acff5f917e51d48814b8919f17532c47f767e242176d1f008d5608e8adecf63aa9549853843b222233f1935c61c41bda10824ee697fbafcf6b34149395c4a629a2835150ea0e20b3fc6e8063be3b636a80f639a27e25b09d607dc4cd6efa6119406ed6a8b87775d4be85c36250a7d8e7376d5defa31a54fad06eca0d0a376f1b7f248c0d7b57fbc846c3158c9a73fed9089e639b0b8432f0ab69b459f812f699eb7a27c750180011b89c7ea86279b8068de2540820bd5eadd1262c302", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) (async) r10 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="470d00000000000000000a00000004000280040001807af489214145488934a18293a967034c48c04020d012cbcb3235ff49c8d5453e61b989861645f1a936470aa943d49aa97e2b21ba6e6bec751f6c07b6c60de282341aa93915db4dfe4ad7f21ad1fac5596738535fa33abdee339d335733aac0ac8b6348eac9e502ffc200983375ec9107a8"], 0x1c}}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000", 0x4}, {&(0x7f0000000240)="0060fafea5537ca0b13b2621d68a6cac29d09a3d114dc398c2778342f67f36f737d214a5e5dab7946ebe15baa38e44dd45b5b4d039fe01e1f95f653ff3d536828736790e7c626b247764dd9ed6ade142d82343bfe656f44b9e69ce9a72efd0d8b678f7e89423e95275da2ba14e5018332213f64a07793af8e163a1997e8921d73ff2b66685c9501bcf59be3701e4acf4c4db09fd1e9fa5443f8d2e435bbd91ec02b89ff7e6407ab00469168c87fc6ff4af4fab098cde2acccc16a921b5107b6c6f3d7266b8005ae159e2d97f812d6de4c60df41e6ef07934ec2099a42ed8b6275a9ed88e534b1c6468b5e38cad67427da636dedbe118c6", 0xf7}, {&(0x7f0000000c00)="47b53ddb91d62c9990ab288f2ec75f42a3f25dc8e21b24b46f6fd4320c07a2c1116e309b0dbedb21bc90a9132c3a34d09021ce6e0aacbebb185cd351c7ac9b5e89330fb05deea0d8818a7f6b433d1675a146c7c5f3824381257da410d4a0ed5fe6df98ed8403c1f79df150ab5fa4e750956b8a981eedbc5cd3f0a15306c6c6fa74d102806e6561269cda82878f26283e9843a889cb5d6940e8af21332a624877474fe5d05fc5ff99ef84e016200149686d364f9e578274eaaa1571135bebed6d2a5c1e2019fe1add4c1e43c443bb7722f2def5c426ab8517cbe5a742fe8a34f8e5a9fe9ea80ea30886a9003266dcb49e63f58326cdb8bd7331d32cc143410d852aee01049757dcc62bb8393411bff4765bb27a6f00bb5721c027734357b0645d919583f16fb3dd91fa6fcd57a8f656cc0ad21c8549d7eeb09716280d91c412ff235c2c18a3c27a1b81fd54006e830ad813a3d866e800a0f44f5a99bb37df403e5f9b19d6bdf4e33e7fcad120b085dc1480bd6a0599aed35b34af3f1444211b6a938beac19055c0d101b9ca58e87485dbb41760465db31a15f6d5d8846989868e7e8c19de0b5393e34f64128d58a1c726151dfdc71337e94358d5dad461bf6b1803df251f770dfb6bd23e395b66d0c5180e78ac37543b12112754987dbc241e19bc7168179b659d3b7e50aef85dcde4f32fe78eab926ce9ad06a449a676a569e3e1beb31512d0715c6a1713a67248aa2311b1ea70f946a788cfb7966400ddd69e9711c2f5dc6ff9c9887827cd25b1923edd12c2f0d535c1d2af6860478c9517ef7038abd2ada375c73eeb624472fa7af58cd1c36e964af958f763151aa13092518d517e6a3c1499319f77eac7829721e431bd64fbf1e2a852ad53fcde285346ed82b15978c374cf90ecdec36c4f78f2ac8c61faf56d4e11d92dd40a920584d20e0ec3c8be35fd8c9ba076401cc27fff28d445510c614fd4b960f374e62e4601ae05ae0a81cbd52e8735a8813a78481001838e78430d346ace5b74923f222cca39ea11f81b9cb562aeeba9db28a4e562b75c64fa347405a686eb9f84d95aa6452b4215b8ed719205d831e6ba6aa7bf0ed719315d0b9887ba1b72dc2b6e925fb5d47f30d2046f1323f3a7127bd91f7800c97c8dd5e8a16187c4ae2fbb26585aa978e7dbb06bfe793e477caf9ac62340337ae5f45e798b6a17a69a6baca5857f7fa4e38dd55ac573102410319727da95a7ed0307c07f2594365a5812bb4277e7f4b379b5aed3afce73a3c27aaba5d47e2051c09e37a24fb22467a714eb543161781608b8799eb8e76a92d682d578160f5ce6b2e729b1bed6f1dbf6393178fb03be5fc4ed1c0f01458d54843214256c0a5a816b70b3a4309e30633775bdc55c94b3a38d6d4f0898cd056b8826cd7ab4a8077f514a5756ceb7cb5984c42e44b22b74e0447543068708e8f5eafd2ddd7b22cc5b493fdccb255ad65eae0cbb1c2913d711b63f51d51993f38d5aab38923f5778c44c2c68263f82254b47409038fd3e91bd3ae5a4714e3e9c05155d2719f43c4dd95f758743d7e82644ecc555116b8d24153999097149fcc782beae121eee30a29056cefecfa16cfbdfdba6959705b0333fffc6fd9cef1f5dbed280e0e0f30925d1c53ca5840970a1220c22c2373aeb6e90896b71e446c47a635209585d4fab5704e7cb2710e8b14062f6eb9d76a9a861e938315166c558079052e000b40f1de7f01c28e90df1a9973ba880103c78b3f8dd33c4e97618002f1d41fae10c3e4e403f058763bd57a9a6334092b8d2ff87b616431a088d535a526bcfc5e0f0c4b15348269682a5565cc148e85fe45b237cd0d20953c1a7a053e10b072f4634643a145b9f2e825e0a83624f01edeb5abe099162d5454805dca23110f52368341e60f6ed2235191876f4c488a59a3782bf396890ee1763f8d6ddc0572ba730fdd079643e4697a4a1f80418395eea1da47ea40422c128d26de2c560a3f25780b50f057ab0ccd5af9efe77e40ced8ea6393b9d810dad75a7a4fd48b71dd1a7e8e5786d655485e8e5fd4e5d6b14ceffafdedcce503a91bd26ec83f8d550938d12770c509664f1f8b077fafcb260a30e23789b03d060a5cbfc98dc644d5ab65326e4bb9904b87c6a6738293d67d6312c4f136db66548f87f251ba5c13c7cb6150bcfe25b6e69fe6dcbc663453548a4013ddcf38210173642a583eae4b0457bfd8450657efe3b43bcf7f246d1b61980c4f5a3c817dda2c8ef371b2c10eeea75cf689f02c689e3ad2d9b16bca7fbb5d523671a5f92413a62653ba1205eeaaf85d278b2a48c94b1cfcae38853ac3b6f64e6c35910a88b1a7d976cbe35ec9273e4977c5cfcf668514f294f12f00810a8e382907ef3a0c3b4967046fddd9a7df96a15a79a758876e18334b97f8d248da3e327b854729c839eed8f592ef916df2ac3e11e9d0e7f5fa6098f8cc7597fd8b1f7292518283f8f952bee95a09658ba85e084ee1781c0d4959d4a4f06097d86597c788a60d029298e24ed4eadfda3a0bae08a8a9ebec5ba4c14208f0ecde5233268538bb4774344a69a50d3911f6ad68829a5b54df9da722c401f50962d821f58c68b39fd045e5b31002c3310f275eff81362d033f20957e2292cac8ec5d3442f7c2ea16726b9ddccfdb5bbee710e13cb7ab6132bccb3db68d0e40b92fde2a7d20e6a2d9c2e745e9d05917184dc35b8429fab1a289325032b49fff67741973b9360cff13a668d593e96972e2bb4211906cb4bb7aedee98ee5eaaf89bcf2a2232294a19766d4de1864f9e62d8f5c4e7cb84a132489ced6dac93592315233124f3e14e0859c4113a120cedcfd6f8cba22ca0978de351da2f05c6ada8c93177a65a71387bd2ab403ce810b45ef4d4ec19b5800655e03ce367eaf7609ea9d0a69b86fba8f69676d0e004b0a3a0d1206a335b7c07bcb97040da8359e4ac7ce8dd1cb79964c1d5150c93b17f73db82cfb7adcd6abec70f5960816d79b67655d4d5a4c202463753ee9575250614f48524f014ffa4487fd84c29422dc39c87c1e34a757b8cdb89206aedccb11aa7668f676ad2722d093bb931a2db0a25afd83b855934e3907944ee34071c7cc1a801b23873082b162c96ff401ef71066c31adead3b0d6ee29336617412024f14b2650aa1adc51a9f50c543bf3688fe82fdc6f803c98bde09e0e6d353259f15761a250663fc58534d5913d8193aa64f04a1deeed779d62054d99f6d2d6e15786cdb0d8692e9474d0bdba2133b22ae551b6c4c57c72db647e7fb9b9d09f51d56b3ed038e4b3e9937b51d82d77e6ccb409db96026691df552de0e693f4d794a3d42334ea5e274756abfd85649f12255ed8624743c2aa82d4594f364d411ec0963ac5e9146200ee152cabaf013403a4a46670f05d15377334b84ed03c75c8073abc2c0d599b890a2f805d83058be121090c31fb0d95789606eead0990bff1765eb0ce8d0d752e448b629bd8c740ec9753f1f9c70fe0f6cc5fffe0043096addfbc6ebc27201ff9e67c51a53d5e32cb1c88f5d656b84e8cc1af601323a882b052059579a1604bb5f4db5c8bb936015a36843b57581a92fe7a59e604c6cba30fede9fb877848a30e90a32e510548d5bc64c64136566dca0b51b709715421f511cb8fde38e35321caee93af91a44287a77a1b0bfd6f236bf70328a85cd6756f8a88ed83e5d8068f21b3a95ea5bf1bb197c8f00dafb0c802d98def6a32bbaf18a2e0a76a1e5294918345dad5bead3a1c779c6f0d43b0871fccb85ecfbc14166e4203efaea17d0364b96d2bf53419684182703cd907f4dbe66d5484c6cd7bd456551c390049ea27080f556db2db1efe26c7084ef91834ea5bcf7a65b0c51116b1983ee8b54141195fe145c6a487de88f32ad0bbf537394655c6509e490937440d0e962e336b3e4c2ffcb4e37ff3ceb7c3b060f46092fc59b6de042de2f0d99c767222039ebc727ba2c2802cbcaf73bbcd9381f3562c35631c54e57fcc61b71c89f5e0551167870087a75dfbac15c690155ea1b3bebba7648fba88ce32befed974e199d17dad4ed662317c37fd399958091aef7837a0d4c57e2c83b9f7f89b91f192ee4fbebe8719f6964e5dac2554ee624388315e2ee3cf066ce8c35a8e787ed96e4c08aedd7c953b095f34afa8e98cfc3bf70dca45a4e494430e9a0cdbc70e40d52544600ef252032ec400824c321ae67bb4f59c488cacd18be3aebce8295f1de75e4314e32c96eb4ae5a7115fc7451a553ca559a69f5750d316fe1474c35351fa658ce70291d4cf5ff5d1fccd0ec3252f18a2602e79d3c4c502a29189848ea9390e11c3eda07287fb6a66c9bab81a890ec614fc66cb52716e22800cc1df0968ad50efb07d4d545c02d037240ac0eae7a67ed62c681fd58c4956bd0ecfbe49406764362d5f1bf2198495e459ecf4ff34aa65d429d6c8e0d5dd8a623cc4053d68f603ea00b0e978d40ed0b20afd40714d55592f85142b5225484d57cf01474a002dd2666a4182059af5009755fed00026548957061e00e78c3e310890861e591785287af3a34c340548ed6c40cbf679a508c633f310d6f52c901d2f323dfc4abdc7231e14eedd1e301766b86d6a2245d6ba576b87c46a4b62a4a9b464257536881e45eb47d7aa0310befe0b322edd04d6c1363f94dcde774224e3bc9f77a16419416818ec4a5682e31a32b47eaf88ab56b1870729f7d8fc4202601a2bdad169b3c8f67c553e802a34b735c707ea4ad23438684527e9c4a31aaca01a405c4ecdf97ed5b1416ab44fd1412dd6b1dd8681f9a15cc4c92ab9d2d11eb178d533896b7257ad04909b516aa356094711b07fd3d1e9ea5917361305ccba8e9d13c21aca662eab6b970d15b3fa8243fa6d95915ca8a1e1912111a512c022c3335553d845e1bf25070554f4621909762e422adf277306fe5f1bc769ca618901e565dc5ce70c935784f27b2acd8b7aedca54872c5e8e45f9814cf7bee48b18dac147e6e8fcb322c30549035aa554c2d8595c4eb27271802b1031ebbb3f471f580ae6fa3d1dd9fb06964d872ee2a606246508d19288e0cd37046179f7270dc7c8ef9da70fa692b4f49beb558ec44727aa7179f320ecbff06d4f22f496d1fd4ab64a3cca3e9bcc9ac55048b8be9302107e9ce74f2073fd112135dfbb3e7914d4e3bf5f356b2fbb07b21fb2699c40cd3c847b338d4e1279386baa6a5ceec3d9c5d61608f1bae78021d99bd7648b70089df1b2a7d3ad0271e404d7d3b7e2a2fd504052c92bded2c40cd80ef13d04bf9655071d1f4a530df047944fddcd35c940a36cb2f24767471e76f0ff10053f3ed8313b0ce2a54daa3d65c3dd991ece4f15d9d2bdcb9cd12c8c60ac63c3cffd59d98bb02fbf17e60e503d79c92349ebe6e485cb69df7ba7c9f799fb1eb37e1fc187348c99d5dc73e226a02ffaa7237c5b72c33557a3051c4f4f04eb4bf33e97273f747f3659c0ede560e9207b6056a1f168f0dc0e97ef29a80a04dcb526ccf8a78ffc55e87919ce145c03d95a2c273000b7e6cd1d1489b439b5652a0d7f353d21934788626ee7e0c1e1420fdb178a66df422e56b05505f702da70b4c0e8ea86227b0e8ddd0152c4ee20e86700849b08a61ca8b7320ff5a1a680469646428806b4e32b26f22f50add77320d0a139aa10d6de48cedc51a8b5c5649e4b25ea2f38d82049ea7d62721b393009d00735230b0cf867ce4fcffc70b4d8e9d05beaafd1c8d259d33f525cf979ce6ef2ce7469e1bd7b9cbf0683985dc8ce76457f1e", 0x1000}], 0x3, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000002240)={&(0x7f00000008c0)=@can, 0x80, &(0x7f0000002180)=[{&(0x7f0000000940)="a4c1612726171651d4b7134e42176e3d245a9f252874dcdfdda1433e5bafb788738f88b6790191f2b78d5bfb2f2fe78050a83b4c6f9a3c23b6998fb95d46a2aabfc09d4af3ee26e65d3b94d25b8b125f5e5dbbca20df3f78b1b0c3954d27f788955a78583e1e79088822a9901bf2257cdbeea637fede7c16fa9f2faa1c726943f805737542f9aef3a0c68c8cb49365be79ca770d47ec404748408eb35ba1409c9c8d3ced67d3f69aed995e9446181bf86bf36f7315b5a4ed0f6b7c732c8046fd8ca58c7a2b59decc1cdbc5b2f6ee8c", 0xcf}, {&(0x7f0000000ac0)="ff06705e20b30799fa24ac683d7a89da17a08dbe9e5dbc5e399979c4feabf459509cebd0cc026f35694270d7f733856d660af1494905ff4f1737c3592c60dca640f046df2d4556d73474b4e71f3916286c81d9aa1c96607eb628ed8ee8441e45537aee3e9f119c411583f4e0cd7a903b8b11111de47e9910577edb3bd5fc3d1cc58955dc46a9f29f19d2d8fb743da3cc2f6b34635bf01d30c030b95a243ee1fdac1461b1f7ba05df2608d644c67592c964bb85727d56e087468f01d3c7ecfee0bf59aa8539e1a452192085b2ed58a038692f9b6e02cb142c78ba2b38156c0ed1b8830b5a8983b8604519ff543d", 0xed}, {&(0x7f0000001c00)="e4fc99184c833359fbe053f2fea6a03028468ee46c9dad970c291111e1fd895044f9d6f82f59f7c562cdcfdd020977a9db722596a75d7f9e8a1a6e77c9e9d415d7dad6f45a182585", 0x48}, {&(0x7f0000001c80)="a29f60c6a3524cec4ec586ca5e072ed4e65bd20b8cf7d25e29e49c40a6a9b92a5a50c51f32b8149e9f02a9f0fb8c92199aba8df14469cc482cabae45670bbeb65d479a49502b7a95d1e4d461ea301f4efb0a7abe9e43eba06b2e1a6005ee5ce94638989743f157df11433992616f1bdf71e297ce6a", 0x75}, {&(0x7f0000000a40)="f2a3ae4761da5537bdc4161ecd15d356c19634ef6f", 0x15}, {&(0x7f0000001d00)="a47e87ac9b2bb347d06c971d382475ac97124cb65b028a0edbe6b47cd7c2c5e123c0abc78729f6a2856211a562f1600c25d118449480e2db152e462363031753bc35f6ac13a56a3f3cd80c643a24c0bd77cf5bc8005d8ce6164077998678bd6f0f799f96b39743461b3094f6de32d1338a6f35dd4389ed8f7be26a84a2f87bf9bc9f2c06531e7ea5cb1be1629011fe1d603b44c00a9267317eddeb363bca562167d5da9f36d346d23cfdbf07299505571845afe741e0549c152e1be4aeaa7b96ad90cc07af5a1cc4ded6e4247822f3787a5ce721ff8e", 0xd6}, {&(0x7f0000001e00)="b084f2947aa243097f4fc004c4cb02fca8a4b8488a5daac7b600dc22e5a365b5033ff05de4cf3504375452aadf26f13a402f4447ee1cdeaba0bba37224808f8e7a5e36370bfd7020d4b618e5c737ed6acb04e53c077c200561a2a9749c8ba89a3f68f0cc6ac7a5d29b63e1a8500555586b0fce69f205eb1aa934d66b6d4ff0781e7c5f7e5aa972aacf70933230f9fae9e154a41141a4f6857c88714f37a39dcf9fe9f53bf8322570df5d7dc1402206dbff15c380824c6ef762405c2e99ac631168c8796eba230fff5ec594040468", 0xce}, {&(0x7f0000001f00)="d5b09909993424714c837ba9f8dc799a7c5d9244037c20021ac4bf1cb749f62e54a033271f1e360e57705afb476b8965a1432ba6f6dad44d677418d1edb3af6bf12a9c4da4fd94ce9f827918636b05a5989f44dba3f76455a74546ee2ecf116349a7fb1c9b2c7d9f81a47d2574f8d60fa11a75673c18e9265f59e65dc5ebbda9da632593f544a9b96cf90a3da64831a45d655458e6ee029d300d5d9ab27d4b4986c9cb22a18569e9b931f77ca6c6eb8d5b7e0f0cc8a969a155cf011eb5205c103cb584f3074185f686cc95bc3fd4e09d5d2b66d722c7b731", 0xd8}, {&(0x7f0000002000)="46d92800e1444be69c0457f68923f2fda41b3835222279c798d509a3ee0e540299d9e93b1ecc029d2e779adf5a26c6f291eb7fa0d7725c295778a9aec308001bbeef140d0d905a9063778dec55df5e4eacab332b61b2f699af20dbbe6214ab8ed8a112866bc7315429c35615190d720780036b919ba12cf5f26f0cd36e6ed555bfeba068c4adc1344932bb3c143ce9269b8a43fd2c48f85177b249", 0x9b}, {&(0x7f00000020c0)="30ff9ae953ceba331a3d68e0b774d0475ee87029949b429b6fdec8d7fec4f87a71bdd640a3f0d55ca6efb202aea4037a52f2000067818b39e3ae9b58a6bdbd3b64111e6ee1071bd2a26c2beb744a2445c8f482ae439abb4773c1816428163b0f6b93ccaaa9a0e4829a33e3f728295adab8ac26ee736769d111b5ae41d7f25a6bcc4302fa74a444f18c6bcc83efb2d8c57ac1518a5207b87d4a5d46a1226a4fed59f6ec8bd461", 0xa6}], 0xa}, 0x20040000) 59.052016355s ago: executing program 3 (id=897): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x20, 0x4}, {0x6, 0x7, 0xd9, 0x1}]}) (async) write$ppp(r0, &(0x7f0000000200)="7489", 0x2) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40090) 58.833546023s ago: executing program 3 (id=899): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) (async) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0xfffa, 0x8, 0x6, 0x4}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) (async) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda0", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) (async) sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="30d441ae1ab325716443b897bd2c94bb548d0c9f4b5122f0f091221febb4c43561abd474cfe93331857bb3679293f2e511fcbbd9d87c083d21f101bcc959f5e6b95e9c0b8fadae847f32d5e184d3304ea3688381b80373c2c5a59ee698507d1a23ddc89775d223d127beb89f7fec8c1d6a22ac94c4f7b6c75d7e75df6122ce95d5165c15479bc4e1684de23fd5b4d216ff577f887b8aeb0c596ed7950cb0693f236875008d74407b57f73e67999cfbc3f47edc1dba041d6fd53ea56359bb579e6ee53e2ca523c6bb4c6e24777f8c63fa0518d1652e9a095bb97e00d3781bb0bfdff0edc01ea8f660d8", 0xe9}, {&(0x7f0000000540)="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", 0xfb}, {&(0x7f0000000280)="fc46c6992193", 0x6}, {&(0x7f0000000640)="f5bde119396d275806d8bde4069d080a00ee3c3263d93b049743816beeb8570d3c877d79cf142fd01b4b7589ec80774c9cd907cd92aa9cc4365996fc534bca57e61fc6f414746f4b67e181a3bb80bca8d882f67a1179109364b4b52c01cf74847529bc177ce1a2a9f2423aefa952e7", 0x6f}], 0x4, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000000740)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c6043ac1414bb00000007ac1e000401000000796401010100000c5800000000e7eebdb167a0816205faa3ddf0296f691bdf2f5ec998efbaa2f6fbd133075d1393dda7ba3c4ef8a5ef2bee2550bca8afaf6c10c06fac1e286881a17487bc67eb88942eb9b1a6c4a09a71bfc44c9e8a73e9ce858c79cd25b795"], 0x30}}, {{&(0x7f0000000800)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000840)="f4a2e32f713d028992bf8cce345c1816b5e0b75485d9475173a6784f3717f5109c674d8ae4bedc22e3bdc2e7dda7a493d03333f11c58ca8e5e4fb39fbf52fe9c08f630d844fc00d8fc69fd5d7031ac8ef1a3d481d8857a26c4050cab08a17e9f5d529b20dad3f783b25f4d38c63e39a650a7af6f8f0451dc7b37e2638610ab6f3d510955db44398a758e1626cd2f816a14db4813f45df9f86c82648a06be74956b0e23d181353f9816d00ebc670de88c284ab2b770d100161631a4fe36ce71a37130440e9fef92446e10262d06642322cf3f6d155b", 0xd5}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7a6c}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)="64177f508bf67985ecd1111e1ce57f6e92cdd75a8108f731b0455a597500cfda6d3aee318982aa863e983a1eaa0a20e94595a19c67c9e078992ad554775ef792cca93f9c22fce82c8ce6d578c9e25fbf0cea6ef83adabae3a7f3abb90aa80eb7c9afaf4f021e448f123619ed41fa779cbde767a0b829be8c1c", 0x79}, {&(0x7f0000000a40)="e84ddfa52b38dcc31e526242a0e7701981b9d4a7fa1a39b8072bc4afba94e716a40e9ec68a8d0df136", 0x29}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8b}}], 0x18}}], 0x4, 0x4) 58.576440319s ago: executing program 3 (id=904): connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd6a6b1a19"}, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0xe78, 0x6}) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x972d, 0x3, 0x3fb, 0x6, 0x3]}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8001, 0x20, 0x81, 0x9cf9, {{0x22, 0x4, 0x3, 0x25, 0x88, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@lsrr={0x83, 0x7, 0xd5, [@rand_addr=0x64010101]}, @cipso={0x86, 0x3f, 0x3, [{0x5, 0xb, "569d56c894819272d3"}, {0x1, 0x8, "d8f7d022ce58"}, {0x2, 0xb, "f4da8c38f8b7b8a7bf"}, {0x6, 0xa, "6145044ebf4ae695"}, {0x0, 0x11, "e896c0f6d74229f08bd8276f5e3f24"}]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "de8f632b06a2a97c01"}]}, @cipso={0x86, 0x1b, 0x2, [{0x6, 0x10, "e3679453fa12a0a1ffe4204f5138"}, {0x7, 0x5, "abc885"}]}, @end]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 52.728619225s ago: executing program 5 (id=951): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r1}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f000000c080)={'veth0_to_hsr\x00', @random="56637d3ada0a"}) 52.495936001s ago: executing program 5 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) (async) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 43.456496255s ago: executing program 33 (id=904): connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd6a6b1a19"}, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0xe78, 0x6}) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x972d, 0x3, 0x3fb, 0x6, 0x3]}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8001, 0x20, 0x81, 0x9cf9, {{0x22, 0x4, 0x3, 0x25, 0x88, 0x67, 0x0, 0x0, 0x4, 0x0, @empty, @empty, {[@lsrr={0x83, 0x7, 0xd5, [@rand_addr=0x64010101]}, @cipso={0x86, 0x3f, 0x3, [{0x5, 0xb, "569d56c894819272d3"}, {0x1, 0x8, "d8f7d022ce58"}, {0x2, 0xb, "f4da8c38f8b7b8a7bf"}, {0x6, 0xa, "6145044ebf4ae695"}, {0x0, 0x11, "e896c0f6d74229f08bd8276f5e3f24"}]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "de8f632b06a2a97c01"}]}, @cipso={0x86, 0x1b, 0x2, [{0x6, 0x10, "e3679453fa12a0a1ffe4204f5138"}, {0x7, 0x5, "abc885"}]}, @end]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 41.491513316s ago: executing program 5 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) (async) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 31.687501847s ago: executing program 4 (id=1085): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x6025, 0xffffff78) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40010) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x5, 0xffff, 0x40, 0x0, {0xa, 0x4e22, 0x4, @private1, 0x5}}}, 0x32) unshare(0x20000400) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001340)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x5}, 0x28) 30.655199838s ago: executing program 4 (id=1094): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000070020006608000000000001180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 30.545965603s ago: executing program 4 (id=1095): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/204, 0xcc}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1ef9, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000e00), 0x12) bind$x25(r1, &(0x7f0000000080), 0x12) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0xf88f, 0x4, 0x80000001, {{0xb, 0x4, 0x1, 0x3a, 0x2c, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@noop, @ssrr={0x89, 0x17, 0x83, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}]}]}}}}}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 30.37966701s ago: executing program 5 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) (async) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 29.519845607s ago: executing program 4 (id=1100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000001b00)=0x6a0, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000001fe8000000000ffffffffff000000000000009b000000034e2000000a0000205e0000000000000087142c76545651f336970077d13ee6fd49df2459129ebc0b844bcb400efd6f4e7016a302043af3dcd1c6b99b13916f88c480deffe43aebb39ce1042e10778a6ab63cf786e6459473dc02bef80fb84435c344e5131cc72475912577ff638edaaaf0cd8f16b29e91479ed9f5dac30666a7c4825fc24621283cb84ec1c166"], 0x1fc}}, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x1c, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b000000850000008300000003a75b000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bd5c04000000000007080000f8ffffffbfa000000000000007000000f0ffffffb702000008000000182200004dabd12085b14ae4ea84bf098b60e271a8c36657850991f44073b5f8dd", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b7000000000000009500000000000000e70e4b267e2da6f04277a87c0f72ddeb65cc85854fdc6502ea0c00216e425753a40ed38b2fb909b0b5264af0aa5f23d487f4a388db220700000092560b39963165a79b97e143fc4e7cff46b8000d7c05b4d86c1e7ced3a428a72865c8e44075e704c7014643aa64798d2e32f8b0d553284496392db2c2444ef8e4153600dc4aef46d7a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.4509691s ago: executing program 4 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0023000f0bf2849b584f420cb8a6cf24aaf3fefe292f7ad00ece10c6d604f32482aa9cc9f37206739b6bceb60bcfc1b00e8d571e45841bb624f5e68898a11291898ee6bb0656ce0a7b65a69ddc035c3df1c6406dd1db4908cf7cedcf1297bd0e5bc48e9d28d966e895b1db41f931620aef9221c6b0618d1c6c51fe414e01e3c19b2f1d7223233cb907479c37ee6d37216fd22d1ca38d80e0b9af15efe39c59", @ANYRES32=0x0, @ANYBLOB="40180000000000001c0012800b00010062726964676500000c0002800500160003000000"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000580300001800e000100696d6d656469617465"], 0x88}}, 0x0) unshare(0x6a040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xba, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r5 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000002c0)) 26.070990289s ago: executing program 4 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 23.972236844s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 23.643443913s ago: executing program 34 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f1ad3140b0850e3}, 0x20040000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x8040480) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000472000/0x4000)=nil, 0x4000, 0xd, 0x10010, 0xffffffffffffffff, 0xf04f9000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) socket$alg(0x26, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 15.982257267s ago: executing program 7 (id=1117): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2000, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10010, r0, 0x100000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r7, 0x0, 0xfaf}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r9, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x20, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x0, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r12, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c00000002060102000034e4000000000000000034004e23000008000840000000830800134000000005060005404e240000050007005c00000005000400010000000500040000000000050005000a00000011000300686173683a6e65742c6e657400000000050005000a000000fa000000000000000000000000005868b307c4f04312fae37838669eefbb373cd56c9e90af52a5197a27719155f0d3a6450ab08006747eaa862b29223c9dc21b5b0916c443f706590b1d36edb5b94a49bcd68927fc1188693c4f93753e2a1d3500a9b2cff026a20460b381d901"], 0x7c}}, 0x10017) 15.910456847s ago: executing program 5 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) (async) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 10.998109668s ago: executing program 35 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.443568332s ago: executing program 5 (id=955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4(r0, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x0) (async) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 3.039531877s ago: executing program 6 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000340)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000380), 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00"/132], 0xa8}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000100000000", @ANYRES32, @ANYBLOB="fe5f1046c4ab8cdcd83a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) socket$kcm(0x2, 0x3, 0x2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000300)=0x108844, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r7, 0x1) listen(r7, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701feff7fff00000000017c0008040042800c00018006000600800a0000100002800c00148008001700"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0xc000) listen(r7, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 2.916276032s ago: executing program 2 (id=1248): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x28, 0x1e, 0xa01, 0x3, 0x0, {0x7}, [@nested={0x14, 0x7c, 0x0, 0x1, [@nested={0x10, 0x4e, 0x0, 0x1, [@nested={0xb, 0x4a, 0x0, 0x1, [@nested={0x4, 0x2e}, @generic="a24120"]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r8 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r8, 0x2) shutdown(r8, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xff}}], 0x18}}], 0x1, 0x4000880) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r9) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07062abd7000000000002d00000005002b0001000f0000002f00a969074605002e00070000000a0001007770616e31000000eeff04000000000000000000"], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000030000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x4080000}, 0x4000004) 2.695295239s ago: executing program 6 (id=1249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket(0x400000000010, 0x3, 0x0) connect$caif(r0, &(0x7f0000000340)=@dgm={0x25, 0x8001, 0x7}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x13, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000044c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="100028bd7000fbdbdf250b0000005c0001800c000700030000000c000000080005000100000008000b00736970000600010002000000060004004e2200000a0006006c626c637200000008000800fcffffff08000b0073697000060001000200000008000b007369700008000400cc00000038000380060007004e23000014000200776c616e3000000000000000000000000800030001000000050008000000000015ff07004e2100000c000380050008000e00000008000400f7ffff7f28000380080003000300000014000600fc000000000000000000000000000000050008000800000078000380140002006261746164763000000000000000000014000600fe80000000000000000000000000002a14000600fe8000000000000000000000000000bb06000400020000001400060000000000000000000000ffff0000000014000600fe8000000000000000000000000000aa0600040008000000040003800c0002800800090000000000"], 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040811) 1.474960211s ago: executing program 2 (id=1250): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)={0x50, r2, 0x1, 0x70bd27, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "3e8dcaabaa183341", "d0a616614468ce58898391aefaebf6e1", "b6ecc043", "da44faa131487499"}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) close(r4) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x100800) 1.412546155s ago: executing program 6 (id=1251): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, &(0x7f0000000100)=0x80000000, r2, &(0x7f0000000140)=0x5, 0x4, 0x7) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000680)="df", 0x1}], 0x3}}], 0x1, 0x4040880) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000019080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004900)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x5, 0x1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40808) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$vsock_stream(r9, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}], 0x1, 0x2000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da2e2e"], 0x48) (async) socket(0x3, 0x3, 0x0) 1.26846865s ago: executing program 2 (id=1252): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_type(r1, &(0x7f0000000200), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = getuid() ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000100)={0x3, @bcast, r7}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200000000001c0012800b0001006d61637365630000f400028005000d000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x5411, &(0x7f00000007c0)) socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r5, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20048000) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1.103207179s ago: executing program 6 (id=1253): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x48800) shutdown(r2, 0x1) listen(r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x9}]}]}, 0xfc}}, 0x4810) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) 1.012899317s ago: executing program 8 (id=1192): r0 = socket(0xffffffffffffffff, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x1, 0x4}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000001480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@llc={0x4, {@llc={0xdc, 0x0, "85"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000a00bc00"/20, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x401}, 0x0) socket(0xffffffffffffffff, 0x80000, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x1, 0x4}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f0000001480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@llc={0x4, {@llc={0xdc, 0x0, "85"}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000a00bc00"/20, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x401}, 0x0) (async) 790.863233ms ago: executing program 36 (id=1117): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2000, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x10010, r0, 0x100000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r7, 0x0, 0xfaf}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r9, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x20, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x0, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r12, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c00000002060102000034e4000000000000000034004e23000008000840000000830800134000000005060005404e240000050007005c00000005000400010000000500040000000000050005000a00000011000300686173683a6e65742c6e657400000000050005000a000000fa000000000000000000000000005868b307c4f04312fae37838669eefbb373cd56c9e90af52a5197a27719155f0d3a6450ab08006747eaa862b29223c9dc21b5b0916c443f706590b1d36edb5b94a49bcd68927fc1188693c4f93753e2a1d3500a9b2cff026a20460b381d901"], 0x7c}}, 0x10017) 780.842163ms ago: executing program 8 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}, 0x40002002) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$packet(r2, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @random="ba5de643b791"}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 780.101827ms ago: executing program 6 (id=1256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x14068800}, 0x24040040) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, [0x1000, 0x3, 0x6, 0x2, 0x1, 0x1, 0x1, 0x78f6f28c, 0x80000000, 0xffffffffffffffc3, 0x8, 0x8, 0x4538, 0x7]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={r4, 0x2a, "e40fc99dd8e517558a0b88c51307204cce2b368c4560a7f961974c3c8637f03bd29cf5f418d43c20eeb7"}, &(0x7f0000000180)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x14, 0x2, 0x4) setsockopt$inet_mreqsrc(r5, 0x0, 0x42050004, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) 675.863695ms ago: executing program 2 (id=1257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000000000000000000000611224000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0)=0x10001, 0x4) 558.899103ms ago: executing program 2 (id=1258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x15, 0xc, 0xfe, 0x9}]}) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x15, 0xc, 0xfe, 0x9}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x18, r3, 0xd, 0x0, 0x3, {0x1a}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100000201010400000000000000000200000838000e8006000340000300002c000180f3ff020000000000000000000000ffff6401010014000400fc0200000000000000000000000000000800048004000280080015400000000134000180060003400001000006000340000000000c00028005000100ab0000001400018008000100e000000208000200e00000010800034000000200060012400004"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 286.476493ms ago: executing program 8 (id=1259): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x1d, 0x2, 0x6) recvfrom$packet(r1, 0x0, 0x0, 0x10122, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x60, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="00200000ffffffffffffaaaaaaaaaabb08004500003e00000000202990df73b31f0378ac1e0001e000000100000000002a907802002a0000000000ebc7a1e0ff5befe1fdbc66e400d7e83306de422b"], 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1}) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000020000000222cac7f618f0f2161cd5db6c71824443f6c411de095ffcfd1ac6ebac9a40e3b78ee2147421b60628af9fbbf4a07c8f907996bc010ce37b5f32a6f4323fbaa90f7f12cb32d91f25b6570e85ed44ec8d2550059e1c7875d2261c1d625806f9054f5335312c072ea2485d34bc152e050a85671aec2396478074f11fc4e7b4625b8c4be63355df13ccf31061856e4b5f5973141d4acd54d052df4ec4e93c3d93e572312", @ANYRES64=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0], 0x80}}, 0x0) 48.081322ms ago: executing program 2 (id=1260): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010026bd7000ffffffff0a140000030000070000000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) unshare(0x2a020400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040), 0x8) 0s ago: executing program 6 (id=1261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000000000000000000000000850000006d000000850000007d0000009500000000000000b3c18ae03f75d805164dde77efd76d91de4d0279a74489d2409d3a5be9ee5a6599426ecfa53c0be1d135573c1ac06d4291ed1c080d4f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x80) r0 = socket$inet6(0xa, 0x80001, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@rose, @default, @rose, @remote, @rose, @default, @rose]}, &(0x7f0000000080)=0x48) listen(r2, 0x7) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 64) unshare(0x28000400) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 195.420729][ T6322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.486701][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.497118][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.534236][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.542650][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.965620][ T6301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.834016][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.843418][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.851352][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.861179][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.869183][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.048995][ T9057] chnl_net:caif_netlink_parms(): no params data found [ 198.134922][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.142326][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.150867][ T9057] bridge_slave_0: entered allmulticast mode [ 198.158820][ T9057] bridge_slave_0: entered promiscuous mode [ 198.168816][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.175960][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.184076][ T9057] bridge_slave_1: entered allmulticast mode [ 198.191469][ T9057] bridge_slave_1: entered promiscuous mode [ 198.227137][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.240583][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.276639][ T9057] team0: Port device team_slave_0 added [ 198.285429][ T9057] team0: Port device team_slave_1 added [ 198.316554][ T6301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.345997][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.353267][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.381643][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.395222][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.402290][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.428735][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.483296][ T9057] hsr_slave_0: entered promiscuous mode [ 198.490115][ T9057] hsr_slave_1: entered promiscuous mode [ 198.496249][ T9057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.503970][ T9057] Cannot create hsr debugfs directory [ 198.815404][ T6301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.905768][ T6301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.097894][ T6301] bridge_slave_1: left allmulticast mode [ 199.104041][ T6301] bridge_slave_1: left promiscuous mode [ 199.112227][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.125783][ T6301] bridge_slave_0: left allmulticast mode [ 199.132607][ T6301] bridge_slave_0: left promiscuous mode [ 199.139764][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.464731][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.475845][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.486875][ T6301] bond0 (unregistering): Released all slaves [ 199.813645][ T6301] hsr_slave_0: left promiscuous mode [ 199.823744][ T6301] hsr_slave_1: left promiscuous mode [ 199.830903][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.838925][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.847143][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.854888][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.885439][ T6301] veth1_macvtap: left promiscuous mode [ 199.891750][ T5833] Bluetooth: hci0: command tx timeout [ 199.907485][ T6301] veth0_macvtap: left promiscuous mode [ 199.913713][ T6301] veth1_vlan: left promiscuous mode [ 199.924262][ T6301] veth0_vlan: left promiscuous mode [ 200.417975][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 200.455214][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 200.917560][ T9057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.931687][ T9057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.949533][ T9057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.969469][ T9057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.140507][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.193115][ T9057] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.214624][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.221839][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.239689][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.246874][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.578394][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.633877][ T9057] veth0_vlan: entered promiscuous mode [ 201.649523][ T9057] veth1_vlan: entered promiscuous mode [ 201.679188][ T9057] veth0_macvtap: entered promiscuous mode [ 201.688989][ T9057] veth1_macvtap: entered promiscuous mode [ 201.709946][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.724657][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.741674][ T6322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.753913][ T6322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.767342][ T6322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.776683][ T6322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.849928][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.864244][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.895347][ T6301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.904039][ T6301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.350536][ T6303] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.350872][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.360243][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.373004][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.382368][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.390877][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.404941][ T6303] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.593253][ T9103] chnl_net:caif_netlink_parms(): no params data found [ 204.681558][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.689370][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.696575][ T9103] bridge_slave_0: entered allmulticast mode [ 204.706410][ T9103] bridge_slave_0: entered promiscuous mode [ 204.716157][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.728232][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.735452][ T9103] bridge_slave_1: entered allmulticast mode [ 204.743780][ T9103] bridge_slave_1: entered promiscuous mode [ 204.767866][ T6303] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.812598][ T9103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.826124][ T9103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.864404][ T6303] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.897841][ T9103] team0: Port device team_slave_0 added [ 204.906356][ T9103] team0: Port device team_slave_1 added [ 204.947635][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.955819][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.983653][ T9103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.002536][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.010178][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.037809][ T9103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.143864][ T9103] hsr_slave_0: entered promiscuous mode [ 205.150654][ T9103] hsr_slave_1: entered promiscuous mode [ 205.156791][ T9103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.164853][ T9103] Cannot create hsr debugfs directory [ 205.202921][ T6303] bridge_slave_1: left allmulticast mode [ 205.209668][ T6303] bridge_slave_1: left promiscuous mode [ 205.215416][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.228781][ T6303] bridge_slave_0: left allmulticast mode [ 205.234843][ T6303] bridge_slave_0: left promiscuous mode [ 205.241438][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.558180][ T6303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.571297][ T6303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.581982][ T6303] bond0 (unregistering): Released all slaves [ 205.961342][ T6303] hsr_slave_0: left promiscuous mode [ 205.967498][ T6303] hsr_slave_1: left promiscuous mode [ 205.978879][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.986321][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.995238][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.002781][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.026353][ T6303] veth1_macvtap: left promiscuous mode [ 206.032253][ T6303] veth0_macvtap: left promiscuous mode [ 206.037935][ T6303] veth1_vlan: left promiscuous mode [ 206.048848][ T6303] veth0_vlan: left promiscuous mode [ 206.451949][ T5833] Bluetooth: hci0: command tx timeout [ 206.595486][ T6303] team0 (unregistering): Port device team_slave_1 removed [ 206.633083][ T6303] team0 (unregistering): Port device team_slave_0 removed [ 207.332723][ T9103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.347683][ T9103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.365320][ T9103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.383624][ T9103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.533323][ T9103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.566615][ T9103] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.593058][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.600288][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.642685][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.649912][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.962778][ T9103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.024409][ T9103] veth0_vlan: entered promiscuous mode [ 208.044191][ T9103] veth1_vlan: entered promiscuous mode [ 208.095874][ T9103] veth0_macvtap: entered promiscuous mode [ 208.117293][ T9103] veth1_macvtap: entered promiscuous mode [ 208.153619][ T9103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.177009][ T9103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.202730][ T6322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.243105][ T6322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.276627][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.294321][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.349393][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.357252][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.402495][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.412505][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.778875][ T9165] netlink: 'syz.3.692': attribute type 3 has an invalid length. [ 209.794816][ T9165] netlink: 3 bytes leftover after parsing attributes in process `syz.3.692'. [ 210.112447][ T6322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.163575][ T9189] xt_hashlimit: max too large, truncated to 1048576 [ 211.194260][ T9189] Cannot find add_set index 3 as target [ 211.452077][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'. [ 211.596300][ T6322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.626277][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'. [ 211.653528][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 211.660208][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 211.663000][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.681112][ T9214] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 211.920578][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.929477][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.937352][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.945972][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.953800][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.966415][ T6322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.088932][ T6322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.460486][ T9246] netlink: 'syz.4.712': attribute type 6 has an invalid length. [ 212.548963][ T6322] bridge_slave_1: left allmulticast mode [ 212.556951][ T6322] bridge_slave_1: left promiscuous mode [ 212.594378][ T9247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 212.595037][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.626768][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 212.650006][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 212.651991][ T6322] bridge_slave_0: left allmulticast mode [ 212.719066][ T6322] bridge_slave_0: left promiscuous mode [ 212.728557][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.167562][ T6322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.184873][ T6322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.195480][ T6322] bond0 (unregistering): Released all slaves [ 213.864533][ T9225] chnl_net:caif_netlink_parms(): no params data found [ 213.876218][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 213.993171][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 214.052820][ T5844] Bluetooth: hci0: command tx timeout [ 214.059237][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 214.127061][ T9301] netlink: 'syz.4.730': attribute type 9 has an invalid length. [ 214.210656][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 214.402226][ T6322] hsr_slave_0: left promiscuous mode [ 214.423733][ T6322] hsr_slave_1: left promiscuous mode [ 214.443467][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.473164][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.505095][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.525636][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.667037][ T6322] veth1_macvtap: left promiscuous mode [ 214.678639][ T6322] veth0_macvtap: left promiscuous mode [ 214.684338][ T6322] veth1_vlan: left promiscuous mode [ 214.695287][ T6322] veth0_vlan: left promiscuous mode [ 215.182708][ T6322] team0 (unregistering): Port device team_slave_1 removed [ 215.221432][ T6322] team0 (unregistering): Port device team_slave_0 removed [ 215.654839][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.678632][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.690396][ T9225] bridge_slave_0: entered allmulticast mode [ 215.720065][ T9225] bridge_slave_0: entered promiscuous mode [ 215.755868][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.791860][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.813841][ T9225] bridge_slave_1: entered allmulticast mode [ 215.849429][ T9225] bridge_slave_1: entered promiscuous mode [ 215.949477][ T9333] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 215.986470][ T9333] netlink: zone id is out of range [ 216.128777][ T5844] Bluetooth: hci0: command tx timeout [ 216.140033][ T9348] __nla_validate_parse: 1 callbacks suppressed [ 216.140052][ T9348] netlink: 52 bytes leftover after parsing attributes in process `syz.3.741'. [ 216.156339][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.186602][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 216.187398][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.261468][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 216.416017][ T9225] team0: Port device team_slave_0 added [ 216.442306][ T9225] team0: Port device team_slave_1 added [ 216.783808][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.822210][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.911371][ T9225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.016340][ T9373] bridge1: entered promiscuous mode [ 217.064308][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.113900][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.241277][ T9225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.367966][ T9383] bridge_slave_0: left allmulticast mode [ 217.441124][ T9383] bridge_slave_0: left promiscuous mode [ 217.446978][ T9383] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.561575][ T9383] bridge_slave_1: left allmulticast mode [ 217.567512][ T9383] bridge_slave_1: left promiscuous mode [ 217.573790][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.611277][ T9383] team0: Port device team_slave_0 removed [ 217.620615][ T9392] warn_alloc: 2 callbacks suppressed [ 217.620638][ T9392] syz.5.749: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 217.630350][ T9383] team0: Port device team_slave_1 removed [ 217.649221][ T9392] ,cpuset=/,mems_allowed=0-1 [ 217.653919][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.5.749 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) [ 217.653969][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.653985][ T9392] Call Trace: [ 217.653994][ T9392] [ 217.654004][ T9392] dump_stack_lvl+0x189/0x250 [ 217.654070][ T9392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.654108][ T9392] ? __pfx__printk+0x10/0x10 [ 217.654135][ T9392] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.654161][ T9392] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 217.654190][ T9392] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 217.654219][ T9392] warn_alloc+0x214/0x310 [ 217.654246][ T9392] ? stack_depot_save_flags+0x40/0x900 [ 217.654281][ T9392] ? __pfx_warn_alloc+0x10/0x10 [ 217.654310][ T9392] ? kasan_save_track+0x4f/0x80 [ 217.654345][ T9392] ? xskq_create+0x56/0x170 [ 217.654369][ T9392] ? xsk_init_queue+0xb0/0x110 [ 217.654391][ T9392] ? xsk_setsockopt+0x43f/0x710 [ 217.654412][ T9392] ? do_sock_setsockopt+0x25a/0x3e0 [ 217.654454][ T9392] ? __x64_sys_setsockopt+0x18b/0x220 [ 217.654482][ T9392] ? do_syscall_64+0xfa/0x3b0 [ 217.654507][ T9392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.654538][ T9392] __vmalloc_node_range_noprof+0x125/0x12f0 [ 217.654595][ T9392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.654621][ T9392] ? __kmalloc_cache_noprof+0x88/0x3d0 [ 217.654645][ T9392] ? __kasan_kmalloc+0x93/0xb0 [ 217.654669][ T9392] vmalloc_user_noprof+0xad/0xf0 [ 217.654693][ T9392] ? xskq_create+0xbf/0x170 [ 217.654719][ T9392] xskq_create+0xbf/0x170 [ 217.654747][ T9392] xsk_init_queue+0xb0/0x110 [ 217.654772][ T9392] xsk_setsockopt+0x43f/0x710 [ 217.654798][ T9392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.654818][ T9392] ? __lock_acquire+0xab9/0xd20 [ 217.654859][ T9392] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 217.654887][ T9392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.654911][ T9392] do_sock_setsockopt+0x25a/0x3e0 [ 217.654945][ T9392] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.654980][ T9392] ? __fget_files+0x2a/0x420 [ 217.655013][ T9392] __x64_sys_setsockopt+0x18b/0x220 [ 217.655060][ T9392] do_syscall_64+0xfa/0x3b0 [ 217.655089][ T9392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.655109][ T9392] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.655130][ T9392] ? clear_bhb_loop+0x60/0xb0 [ 217.655156][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.655188][ T9392] RIP: 0033:0x7fccd4b8e929 [ 217.655231][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.655252][ T9392] RSP: 002b:00007fccd5a82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.655274][ T9392] RAX: ffffffffffffffda RBX: 00007fccd4db6160 RCX: 00007fccd4b8e929 [ 217.655291][ T9392] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 217.655305][ T9392] RBP: 00007fccd4c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 217.655320][ T9392] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.655335][ T9392] R13: 0000000000000000 R14: 00007fccd4db6160 R15: 00007ffc573426a8 [ 217.655367][ T9392] [ 217.655376][ T9392] Mem-Info: [ 217.662649][ T9383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.671230][ T9392] active_anon:5682 inactive_anon:0 isolated_anon:0 [ 217.671230][ T9392] active_file:1511 inactive_file:39896 isolated_file:0 [ 217.671230][ T9392] unevictable:768 dirty:188 writeback:0 [ 217.671230][ T9392] slab_reclaimable:11424 slab_unreclaimable:117528 [ 217.671230][ T9392] mapped:38756 shmem:1381 pagetables:1220 [ 217.671230][ T9392] sec_pagetables:0 bounce:0 [ 217.671230][ T9392] kernel_misc_reclaimable:0 [ 217.671230][ T9392] free:1297374 free_pcp:15136 free_cma:0 [ 217.785518][ T9383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.825603][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 217.898837][ T9392] Node 0 active_anon:22452kB inactive_anon:0kB active_file:6232kB inactive_file:159380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155020kB dirty:796kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12948kB pagetables:4768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.084881][ T9392] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 218.090258][ T9383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.116879][ T9392] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.135979][ T9383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.182169][ T9394] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 218.182994][ T9392] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 218.194283][ T9392] Node 0 DMA32 free:1269336kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22408kB inactive_anon:0kB active_file:6232kB inactive_file:157568kB unevictable:1536kB writepending:892kB present:3129332kB managed:2560924kB mlocked:0kB bounce:0kB free_pcp:42700kB local_pcp:11448kB free_cma:0kB [ 218.227153][ T9392] lowmem_reserve[]: 0 0 1 1 1 [ 218.236649][ T9392] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 218.267638][ T9392] lowmem_reserve[]: 0 0 0 0 0 [ 218.272599][ T9392] Node 1 Normal free:3909616kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13664kB local_pcp:9088kB free_cma:0kB [ 218.275508][ T9383] team0: Port device geneve0 removed [ 218.303828][ T9392] lowmem_reserve[]: 0 0 0 0 0 [ 218.303887][ T9392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.304050][ T9392] Node 0 DMA32: 584*4kB (UME) 366*8kB (UM) 236*16kB (UME) 101*32kB (UME) 282*64kB (UM) 158*128kB (UME) 48*256kB (UME) 35*512kB (UME) 19*1024kB (UM) 7*2048kB (UM) 282*4096kB (M) = 1269616kB [ 218.304272][ T9392] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 218.304427][ T9392] Node 1 Normal: 144*4kB (UME) 52*8kB (UME) 39*16kB (UME) 135*32kB (UME) 45*64kB (UME) 5*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3909616kB [ 218.304644][ T9392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.304665][ T9392] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.304684][ T9392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.304704][ T9392] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.304724][ T9392] 42849 total pagecache pages [ 218.304734][ T9392] 0 pages in swap cache [ 218.304744][ T9392] Free swap = 124996kB [ 218.304754][ T9392] Total swap = 124996kB [ 218.304764][ T9392] 2097051 pages RAM [ 218.304774][ T9392] 0 pages HighMem/MovableOnly [ 218.304783][ T9392] 424714 pages reserved [ 218.304793][ T9392] 0 pages cma reserved [ 218.461580][ T9383] batman_adv: batadv0: Interface deactivated: macvlan2 [ 218.468784][ T9383] batman_adv: batadv0: Removing interface: macvlan2 [ 218.608757][ T9402] netlink: 316 bytes leftover after parsing attributes in process `syz.3.751'. [ 218.630135][ T9402] netlink: 52 bytes leftover after parsing attributes in process `syz.3.751'. [ 218.663247][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 218.835548][ T9225] hsr_slave_0: entered promiscuous mode [ 218.889685][ T9225] hsr_slave_1: entered promiscuous mode [ 218.921837][ T9225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.953667][ T9225] Cannot create hsr debugfs directory [ 219.097940][ T9422] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 219.330936][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.753'. [ 219.343296][ T9422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.428040][ T9425] bond1: (slave veth3): Enslaving as an active interface with a down link [ 219.461256][ T9406] veth0_to_bond: left allmulticast mode [ 219.493376][ T9406] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 219.596651][ T9431] vlan3: entered allmulticast mode [ 219.610081][ T9431] bond1: (slave vlan3): Opening slave failed [ 220.384342][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.765'. [ 220.409211][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.765'. [ 220.455483][ T9475] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 220.463987][ T9451] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 220.522396][ T5844] block nbd0: Receive control failed (result -107) [ 220.695993][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.706314][ T9482] tipc: Enabling of bearer rejected, failed to enable media [ 220.726523][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.202474][ T9503] veth0: entered promiscuous mode [ 221.219112][ T9501] __nla_validate_parse: 5 callbacks suppressed [ 221.219134][ T9501] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'. [ 221.235646][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 221.324831][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.379568][ T9506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.392465][ T9225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.411509][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.419830][ T9225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.473970][ T9512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.487277][ T9225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.509567][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.531931][ T9503] ipvlan2: entered promiscuous mode [ 221.542205][ T9503] bridge0: port 1(ipvlan2) entered blocking state [ 221.549116][ T9503] bridge0: port 1(ipvlan2) entered disabled state [ 221.555910][ T9503] ipvlan2: entered allmulticast mode [ 221.564003][ T9503] bridge0: entered allmulticast mode [ 221.573183][ T9503] ipvlan2: left allmulticast mode [ 221.578544][ T9503] bridge0: left allmulticast mode [ 221.586870][ T9501] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 221.635092][ T9501] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 221.655265][ T9225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.787289][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.829511][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.880545][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.908826][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 221.946362][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 222.023306][ T9225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.049148][ T9501] dummy0 speed is unknown, defaulting to 1000 [ 222.125185][ T9225] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.154546][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.161761][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.234265][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 222.258372][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.265570][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.282961][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 222.320186][ T9545] netlink: 'syz.3.783': attribute type 12 has an invalid length. [ 222.386944][ T9225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.576400][ T9556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.785'. [ 222.647233][ T9556] macsec0: entered allmulticast mode [ 222.654816][ T9556] macsec0: left allmulticast mode [ 222.913251][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 222.923238][ T9565] batadv0: left promiscuous mode [ 222.929458][ T9565] bridge0: port 3(batadv0) entered disabled state [ 222.956640][ T9565] bridge_slave_1: left promiscuous mode [ 222.991827][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.031533][ T9565] bridge_slave_0: left promiscuous mode [ 223.037362][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.333247][ T9574] dummy0 speed is unknown, defaulting to 1000 [ 223.345840][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.771870][ T9225] veth0_vlan: entered promiscuous mode [ 223.850287][ T9595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.791'. [ 224.197813][ T9225] veth1_vlan: entered promiscuous mode [ 224.460418][ T9599] dummy0 speed is unknown, defaulting to 1000 [ 224.564749][ T9610] dummy0 speed is unknown, defaulting to 1000 [ 224.653642][ T9225] veth0_macvtap: entered promiscuous mode [ 224.849677][ T9225] veth1_macvtap: entered promiscuous mode [ 225.395819][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.446727][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.524935][ T6327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.526576][ T9599] xt_CT: No such helper "snmp" [ 225.566948][ T6327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.594485][ T6327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.647346][ T6327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.264049][ T6314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.326283][ T6314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.472294][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.488442][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.944143][ T9688] dummy0 speed is unknown, defaulting to 1000 [ 226.995096][ T9695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.015941][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 227.462415][ T9703] lo speed is unknown, defaulting to 1000 [ 227.509714][ T9703] lo speed is unknown, defaulting to 1000 [ 227.636177][ T9703] lo speed is unknown, defaulting to 1000 [ 227.707233][ T6311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.910665][ T6311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.003818][ T9697] netlink: 'syz.2.810': attribute type 4 has an invalid length. [ 228.229612][ T9703] infiniband syz0: set active [ 228.233283][ T6311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.239028][ T9703] infiniband syz0: added lo [ 228.295360][ T5914] lo speed is unknown, defaulting to 1000 [ 228.337836][ T9703] RDS/IB: syz0: added [ 228.354800][ T9703] smc: adding ib device syz0 with port count 1 [ 228.364849][ T9703] smc: ib device syz0 port 1 has pnetid [ 228.390427][ T6311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.434884][ T5914] lo speed is unknown, defaulting to 1000 [ 228.450284][ T9703] lo speed is unknown, defaulting to 1000 [ 228.625327][ T6311] bridge_slave_1: left allmulticast mode [ 228.637901][ T6311] bridge_slave_1: left promiscuous mode [ 228.656029][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.694150][ T6311] bridge_slave_0: left allmulticast mode [ 228.718590][ T6311] bridge_slave_0: left promiscuous mode [ 228.729246][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.591722][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.614900][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.635396][ T6311] bond0 (unregistering): Released all slaves [ 229.675268][ T9703] lo speed is unknown, defaulting to 1000 [ 229.869003][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.880447][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.899876][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.908145][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.918975][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.408994][ T9753] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 230.471050][ T9739] dummy0 speed is unknown, defaulting to 1000 [ 230.584203][ T9703] lo speed is unknown, defaulting to 1000 [ 231.433783][ T9739] lo speed is unknown, defaulting to 1000 [ 231.492679][ T9781] tipc: New replicast peer: 255.255.255.255 [ 231.533721][ T9781] tipc: Enabled bearer , priority 10 [ 231.628687][ T9785] netlink: 'syz.3.827': attribute type 10 has an invalid length. [ 231.676212][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.692104][ T9785] team0: Port device bond0 added [ 231.703134][ T9781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.826'. [ 231.988738][ T5844] Bluetooth: hci0: command tx timeout [ 232.027158][ T9703] lo speed is unknown, defaulting to 1000 [ 232.482577][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'. [ 232.826029][ T9739] chnl_net:caif_netlink_parms(): no params data found [ 233.054483][ T9822] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 233.080988][ T9703] lo speed is unknown, defaulting to 1000 [ 233.086331][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 233.127711][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 233.181954][ T9830] netlink: 56 bytes leftover after parsing attributes in process `syz.3.837'. [ 233.198884][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.837'. [ 233.217181][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.318872][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.326302][ T9822] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 233.359398][ T9822] bond0: (slave vti0): Error -95 calling set_mac_address [ 233.622851][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.631416][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.649424][ T9739] bridge_slave_0: entered allmulticast mode [ 233.671119][ T9739] bridge_slave_0: entered promiscuous mode [ 233.678475][ T9845] netlink: 'syz.2.840': attribute type 16 has an invalid length. [ 233.706709][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.733768][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.742786][ T9845] netlink: 'syz.2.840': attribute type 17 has an invalid length. [ 233.764806][ T9739] bridge_slave_1: entered allmulticast mode [ 233.813134][ T9739] bridge_slave_1: entered promiscuous mode [ 233.954895][ T9845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.964516][ T9845] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.990380][ T9845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.049005][ T5844] Bluetooth: hci0: command tx timeout [ 234.085060][ T9853] warn_alloc: 1 callbacks suppressed [ 234.085081][ T9853] syz.4.841: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 234.155854][ T9739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.158149][ T9853] ,cpuset= [ 234.207344][ T9703] lo speed is unknown, defaulting to 1000 [ 234.212737][ T9739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.293841][ T9853] /,mems_allowed=0-1 [ 234.297838][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.4.841 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) [ 234.297869][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.297883][ T9853] Call Trace: [ 234.297893][ T9853] [ 234.297904][ T9853] dump_stack_lvl+0x189/0x250 [ 234.297943][ T9853] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 234.297975][ T9853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.298010][ T9853] ? __pfx__printk+0x10/0x10 [ 234.298035][ T9853] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 234.298060][ T9853] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 234.298094][ T9853] warn_alloc+0x214/0x310 [ 234.298118][ T9853] ? stack_depot_save_flags+0x40/0x900 [ 234.298149][ T9853] ? __pfx_warn_alloc+0x10/0x10 [ 234.298184][ T9853] ? kasan_save_track+0x4f/0x80 [ 234.298218][ T9853] ? xskq_create+0x56/0x170 [ 234.298240][ T9853] ? xsk_init_queue+0xb0/0x110 [ 234.298259][ T9853] ? xsk_setsockopt+0x43f/0x710 [ 234.298279][ T9853] ? do_sock_setsockopt+0x25a/0x3e0 [ 234.298308][ T9853] ? __x64_sys_setsockopt+0x18b/0x220 [ 234.298336][ T9853] ? do_syscall_64+0xfa/0x3b0 [ 234.298360][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.298391][ T9853] __vmalloc_node_range_noprof+0x125/0x12f0 [ 234.298449][ T9853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.298480][ T9853] ? __kasan_kmalloc+0x93/0xb0 [ 234.298503][ T9853] vmalloc_user_noprof+0xad/0xf0 [ 234.298526][ T9853] ? xskq_create+0xbf/0x170 [ 234.298550][ T9853] xskq_create+0xbf/0x170 [ 234.298577][ T9853] xsk_init_queue+0xb0/0x110 [ 234.298602][ T9853] xsk_setsockopt+0x43f/0x710 [ 234.298627][ T9853] ? __pfx_xsk_setsockopt+0x10/0x10 [ 234.298646][ T9853] ? __lock_acquire+0xab9/0xd20 [ 234.298687][ T9853] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 234.298715][ T9853] ? __pfx_xsk_setsockopt+0x10/0x10 [ 234.298739][ T9853] do_sock_setsockopt+0x25a/0x3e0 [ 234.298773][ T9853] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 234.298810][ T9853] ? __fget_files+0x2a/0x420 [ 234.298844][ T9853] __x64_sys_setsockopt+0x18b/0x220 [ 234.298882][ T9853] do_syscall_64+0xfa/0x3b0 [ 234.298919][ T9853] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.298961][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.298982][ T9853] ? clear_bhb_loop+0x60/0xb0 [ 234.299009][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.299030][ T9853] RIP: 0033:0x7f1e2c38e929 [ 234.299050][ T9853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.299070][ T9853] RSP: 002b:00007f1e2d134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 234.299094][ T9853] RAX: ffffffffffffffda RBX: 00007f1e2c5b6240 RCX: 00007f1e2c38e929 [ 234.299110][ T9853] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 234.299123][ T9853] RBP: 00007f1e2c410b39 R08: 0000000000000004 R09: 0000000000000000 [ 234.299137][ T9853] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.299151][ T9853] R13: 0000000000000000 R14: 00007f1e2c5b6240 R15: 00007ffec8cc9508 [ 234.299194][ T9853] [ 234.648756][ T9853] Mem-Info: [ 234.651938][ T9853] active_anon:6854 inactive_anon:0 isolated_anon:0 [ 234.651938][ T9853] active_file:1655 inactive_file:39904 isolated_file:0 [ 234.651938][ T9853] unevictable:768 dirty:344 writeback:0 [ 234.651938][ T9853] slab_reclaimable:11387 slab_unreclaimable:121053 [ 234.651938][ T9853] mapped:36840 shmem:2537 pagetables:1278 [ 234.651938][ T9853] sec_pagetables:0 bounce:0 [ 234.651938][ T9853] kernel_misc_reclaimable:0 [ 234.651938][ T9853] free:1294268 free_pcp:11796 free_cma:0 [ 234.698329][ T9853] Node 0 active_anon:27416kB inactive_anon:0kB active_file:6620kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147360kB dirty:1372kB writeback:0kB shmem:8612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13228kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.732192][ T9853] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.765281][ T9853] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.794923][ T9853] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 234.805514][ T9853] Node 0 DMA32 free:1250720kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28152kB inactive_anon:0kB active_file:6620kB inactive_file:157604kB unevictable:1536kB writepending:1376kB present:3129332kB managed:2560924kB mlocked:0kB bounce:0kB free_pcp:34440kB local_pcp:17000kB free_cma:0kB [ 234.838389][ T9853] lowmem_reserve[]: 0 0 1 1 1 [ 234.843177][ T9853] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 234.873612][ T9853] lowmem_reserve[]: 0 0 0 0 0 [ 234.883883][ T9853] Node 1 Normal free:3910648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12672kB local_pcp:8576kB free_cma:0kB [ 234.915950][ T9853] lowmem_reserve[]: 0 0 0 0 0 [ 234.921137][ T9853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.941448][ T9853] Node 0 DMA32: 512*4kB (M) 372*8kB (ME) 126*16kB (M) 107*32kB (ME) 213*64kB (UM) 87*128kB (UME) 34*256kB (UME) 35*512kB (UME) 19*1024kB (UM) 7*2048kB (UM) 282*4096kB (M) = 1250720kB [ 235.015889][ T9853] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 235.062684][ T9853] Node 1 Normal: 146*4kB (UME) 52*8kB (UME) 39*16kB (UME) 147*32kB (UME) 53*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3910648kB [ 235.089221][ T9853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.143739][ T9859] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 235.196669][ T9853] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.235157][ T9853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.293150][ T9853] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.388471][ T9853] 44321 total pagecache pages [ 235.398226][ T9853] 0 pages in swap cache [ 235.402451][ T9853] Free swap = 124996kB [ 235.426456][ T9853] Total swap = 124996kB [ 235.446762][ T9853] 2097051 pages RAM [ 235.458137][ T9853] 0 pages HighMem/MovableOnly [ 235.468515][ T9853] 424714 pages reserved [ 235.483280][ T9853] 0 pages cma reserved [ 235.550518][ T9739] team0: Port device team_slave_0 added [ 235.582802][ T9739] team0: Port device team_slave_1 added [ 235.725750][ T9703] lo speed is unknown, defaulting to 1000 [ 235.835235][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.848121][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.905662][ T9881] Bluetooth: MGMT ver 1.23 [ 235.928872][ T9739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.968300][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.975379][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.052856][ T9739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.079511][ T9884] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 236.158260][ T9887] netlink: 64 bytes leftover after parsing attributes in process `syz.3.849'. [ 236.206413][ T9884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.229568][ T9881] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 236.298393][ T9881] ip6gretap0: entered promiscuous mode [ 236.333017][ T9881] ip6gretap0: left promiscuous mode [ 237.122942][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 237.204427][ T9739] hsr_slave_0: entered promiscuous mode [ 237.227845][ T9739] hsr_slave_1: entered promiscuous mode [ 237.264262][ T9739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.292455][ T9739] Cannot create hsr debugfs directory [ 237.386083][ T6311] hsr_slave_0: left promiscuous mode [ 237.406605][ T6311] hsr_slave_1: left promiscuous mode [ 237.435772][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.465956][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.483248][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.513831][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.587038][ T6311] veth1_macvtap: left promiscuous mode [ 237.597070][ T6311] veth0_macvtap: left promiscuous mode [ 237.606323][ T6311] veth1_vlan: left promiscuous mode [ 237.612405][ T6311] veth0_vlan: left promiscuous mode [ 238.337053][ T6311] team0 (unregistering): Port device team_slave_1 removed [ 238.381742][ T6311] team0 (unregistering): Port device team_slave_0 removed [ 238.775376][ T9914] dummy0 speed is unknown, defaulting to 1000 [ 238.775637][ T9949] veth0: entered promiscuous mode [ 238.801393][ T9949] veth0: left promiscuous mode [ 238.965364][ T9914] lo speed is unknown, defaulting to 1000 [ 239.018029][ T9957] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.194744][ T9957] bridge2: entered promiscuous mode [ 239.968540][ T9977] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 240.010767][ T9977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.092244][ T9984] netlink: 'syz.3.871': attribute type 11 has an invalid length. [ 240.367114][ T9992] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 240.566100][ T9991] dummy0 speed is unknown, defaulting to 1000 [ 240.615841][ T9991] lo speed is unknown, defaulting to 1000 [ 242.312419][T10046] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 242.599142][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.888'. [ 242.621674][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.630754][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.692078][T10059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 243.015247][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 243.135422][T10079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.893'. [ 243.162946][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 243.185229][T10073] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 243.198401][T10073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.893'. [ 243.226413][T10073] team0: Port device geneve0 added [ 243.481340][T10089] netlink: 'syz.2.895': attribute type 58 has an invalid length. [ 243.489913][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.895'. [ 244.047112][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'. [ 244.215961][T10135] IPv6: sit2: Disabled Multicast RS [ 244.284530][T10139] ip6gretap0: entered promiscuous mode [ 244.293775][T10139] ip6gretap0: left promiscuous mode [ 244.693349][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'. [ 245.092628][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'. [ 245.101561][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.5.912'. [ 245.769541][T10194] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 245.819432][T10188] netlink: 'syz.2.922': attribute type 13 has an invalid length. [ 245.837664][T10193] dummy0 speed is unknown, defaulting to 1000 [ 245.853821][T10188] netlink: 'syz.2.922': attribute type 17 has an invalid length. [ 245.879421][T10193] lo speed is unknown, defaulting to 1000 [ 245.894932][T10188] lo: left allmulticast mode [ 245.904750][T10197] syz0: rxe_newlink: already configured on lo [ 245.919549][T10188] tunl0: left allmulticast mode [ 245.926188][T10198] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.926473][T10188] gre0: left allmulticast mode [ 245.940034][T10188] gretap0: left allmulticast mode [ 245.975744][T10188] erspan0: left allmulticast mode [ 245.990519][T10188] ip_vti0: left allmulticast mode [ 245.996962][T10188] ip6_vti0: left allmulticast mode [ 246.009874][T10188] sit0: left allmulticast mode [ 246.015598][T10188] ip6tnl0: left allmulticast mode [ 246.029853][T10188] ip6gre0: left allmulticast mode [ 246.036094][T10188] syz_tun: left allmulticast mode [ 246.061997][T10188] ip6gretap0: left allmulticast mode [ 246.077045][T10188] vcan0: left allmulticast mode [ 246.084145][T10188] bond0: left allmulticast mode [ 246.091229][T10188] team0: left allmulticast mode [ 246.098820][T10188] dummy0: left allmulticast mode [ 246.104937][T10188] nlmon0: left allmulticast mode [ 246.114356][T10188] caif0: left allmulticast mode [ 246.119595][T10188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.150722][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.158907][T10197] bridge0: port 2(bridge_slave_1) entered listening state [ 246.166432][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.173675][T10197] bridge0: port 1(bridge_slave_0) entered listening state [ 246.192937][T10197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.223705][T10196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.244659][ T6029] lo speed is unknown, defaulting to 1000 [ 246.696733][T10216] dummy0 speed is unknown, defaulting to 1000 [ 246.723156][T10214] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 246.759949][T10216] lo speed is unknown, defaulting to 1000 [ 247.096011][T10228] x_tables: ip_tables: ah match: only valid for protocol 51 [ 247.631670][T10249] __nla_validate_parse: 6 callbacks suppressed [ 247.631690][T10249] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.933'. [ 247.811119][T10220] netlink: 'syz.4.928': attribute type 6 has an invalid length. [ 248.187157][ T30] audit: type=1800 audit(1751559062.564:6): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.937" name="memory.events" dev="tmpfs" ino=1215 res=0 errno=0 [ 248.317759][T10258] dummy0 speed is unknown, defaulting to 1000 [ 248.330055][T10258] lo speed is unknown, defaulting to 1000 [ 248.351244][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 248.704166][T10270] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 248.908336][T10272] bond1: (slave gretap1): making interface the new active one [ 248.925987][T10272] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 249.654294][T10297] can: request_module (can-proto-0) failed. [ 249.846737][T10306] bond0: option use_carrier: invalid value (49) [ 250.155431][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.281346][ T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.386135][T10319] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 250.422003][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.499244][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'. [ 250.545359][T10318] bond2: (slave geneve4): making interface the new active one [ 250.605675][T10318] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 250.656583][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.680719][ T6311] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 250.718965][ T6311] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 250.744924][ T6311] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 250.761278][ T6311] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 250.826892][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.844840][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.854146][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.862769][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.871398][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.900158][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 250.928032][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 251.086163][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.165489][ T78] bridge_slave_1: left allmulticast mode [ 251.176378][ T78] bridge_slave_1: left promiscuous mode [ 251.190368][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.200814][ T78] bridge_slave_0: left allmulticast mode [ 251.206506][ T78] bridge_slave_0: left promiscuous mode [ 251.213431][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.654782][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.666100][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.677113][ T78] bond0 (unregistering): Released all slaves [ 251.797749][ T78] bond1 (unregistering): Released all slaves [ 251.903326][ T78] bond2 (unregistering): Released all slaves [ 251.916728][T10332] dummy0 speed is unknown, defaulting to 1000 [ 251.933527][T10332] lo speed is unknown, defaulting to 1000 [ 252.302530][T10358] netlink: 224 bytes leftover after parsing attributes in process `syz.2.965'. [ 252.444827][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.967'. [ 252.454415][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 252.880742][ T78] hsr_slave_0: left promiscuous mode [ 252.900072][ T78] hsr_slave_1: left promiscuous mode [ 252.915516][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.926051][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.934104][ T5840] Bluetooth: hci5: command tx timeout [ 252.949664][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.957512][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.980246][ T78] veth1_macvtap: left promiscuous mode [ 252.985798][ T78] veth0_macvtap: left promiscuous mode [ 252.991927][ T78] veth1_vlan: left promiscuous mode [ 252.997169][ T78] veth0_vlan: left promiscuous mode [ 253.411234][ T78] team0 (unregistering): Port device team_slave_1 removed [ 253.463366][ T78] team0 (unregistering): Port device team_slave_0 removed [ 253.798871][ T49] smc: removing ib device syz0 [ 253.810906][ T5907] lo speed is unknown, defaulting to 1000 [ 253.816892][ T5907] syz0: Port: 1 Link DOWN [ 253.943792][T10332] chnl_net:caif_netlink_parms(): no params data found [ 254.031929][T10388] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 254.060616][T10388] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 254.067537][T10388] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 254.292079][T10392] netlink: 'syz.4.974': attribute type 12 has an invalid length. [ 254.532961][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 254.544077][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 254.558941][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.568481][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.575718][T10332] bridge_slave_0: entered allmulticast mode [ 254.596187][T10332] bridge_slave_0: entered promiscuous mode [ 254.607430][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.620326][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.627513][T10332] bridge_slave_1: entered allmulticast mode [ 254.631628][T10408] netlink: 128 bytes leftover after parsing attributes in process `syz.4.978'. [ 254.663203][T10332] bridge_slave_1: entered promiscuous mode [ 254.881131][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.926273][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.018220][ T5840] Bluetooth: hci5: command tx timeout [ 255.225257][T10332] team0: Port device team_slave_0 added [ 255.250819][T10427] netlink: 76 bytes leftover after parsing attributes in process `syz.2.985'. [ 255.272714][T10332] team0: Port device team_slave_1 added [ 255.654191][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682546][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.718524][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.816858][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.878738][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.883599][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.989'. [ 255.885724][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.902246][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 256.018264][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.320658][T10332] hsr_slave_0: entered promiscuous mode [ 256.327416][T10332] hsr_slave_1: entered promiscuous mode [ 257.089801][ T5840] Bluetooth: hci5: command tx timeout [ 257.332130][T10479] dummy0 speed is unknown, defaulting to 1000 [ 257.482418][T10484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 257.687042][T10332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.703885][T10332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.734510][T10332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.768791][T10332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.187072][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.245275][T10332] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.274543][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.281745][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.281863][T10522] netlink: 'syz.2.1003': attribute type 42 has an invalid length. [ 258.310796][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.317969][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.393032][T10332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.800513][T10332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.964592][T10552] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1008'. [ 259.168270][ T5840] Bluetooth: hci5: command tx timeout [ 259.329765][T10568] macsec0: entered allmulticast mode [ 259.562981][T10332] veth0_vlan: entered promiscuous mode [ 259.623660][T10332] veth1_vlan: entered promiscuous mode [ 259.717838][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 259.720161][T10332] veth0_macvtap: entered promiscuous mode [ 259.742936][T10582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1014'. [ 259.758041][T10332] veth1_macvtap: entered promiscuous mode [ 259.834005][T10332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.882327][T10332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.922927][ T6322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.950105][ T6322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.001654][ T6322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.036751][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.047779][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.056221][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.064659][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.072942][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.167419][ T6322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.314019][T10589] dummy0 speed is unknown, defaulting to 1000 [ 260.328203][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.352612][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.417028][T10602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1017'. [ 260.454824][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.481215][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.966635][T10589] chnl_net:caif_netlink_parms(): no params data found [ 261.312512][ T6314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.464678][ T6314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.549807][T10589] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.571672][T10589] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.588919][T10589] bridge_slave_0: entered allmulticast mode [ 261.606466][T10589] bridge_slave_0: entered promiscuous mode [ 261.650019][T10589] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.657348][T10589] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.668776][T10589] bridge_slave_1: entered allmulticast mode [ 261.676153][T10589] bridge_slave_1: entered promiscuous mode [ 261.868906][ T6314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.003586][T10589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.103773][ T6314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.120134][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.129408][ T5840] Bluetooth: hci6: command tx timeout [ 262.148849][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.161413][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.171171][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.215925][T10589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.233958][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.374528][T10589] team0: Port device team_slave_0 added [ 262.385625][T10661] openvswitch: netlink: Duplicate or invalid key (type 0). [ 262.401781][T10589] team0: Port device team_slave_1 added [ 262.446336][T10661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.540441][T10652] dummy0 speed is unknown, defaulting to 1000 [ 262.566471][T10589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.578494][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.620342][T10589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.642246][T10589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.649345][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.676223][T10589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.756063][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'. [ 262.765772][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 263.031997][T10589] hsr_slave_0: entered promiscuous mode [ 263.044370][T10589] hsr_slave_1: entered promiscuous mode [ 263.059931][T10589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.077768][T10589] Cannot create hsr debugfs directory [ 263.186026][ T6314] bridge_slave_1: left allmulticast mode [ 263.194540][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1034'. [ 263.207302][ T6314] bridge_slave_1: left promiscuous mode [ 263.217557][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.237643][ T6314] bridge_slave_0: left allmulticast mode [ 263.243890][ T6314] bridge_slave_0: left promiscuous mode [ 263.257711][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.785803][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.796821][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.807778][ T6314] bond0 (unregistering): Released all slaves [ 263.855374][T10688] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 263.877566][T10695] macvlan0: left allmulticast mode [ 264.209336][ T5836] Bluetooth: hci6: command tx timeout [ 264.294928][ T5836] Bluetooth: hci5: command tx timeout [ 264.310109][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 264.379687][T10716] netlink: 'syz.4.1038': attribute type 2 has an invalid length. [ 264.501888][ T6314] hsr_slave_0: left promiscuous mode [ 264.539048][ T6314] hsr_slave_1: left promiscuous mode [ 264.545190][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.563509][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.572803][ T6314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.580843][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.624342][ T6314] veth1_macvtap: left promiscuous mode [ 264.632335][ T6314] veth0_macvtap: left promiscuous mode [ 264.637998][ T6314] veth1_vlan: left promiscuous mode [ 264.643773][ T6314] veth0_vlan: left promiscuous mode [ 265.233158][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 265.277743][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 265.684625][T10733] netlink: 'syz.4.1042': attribute type 46 has an invalid length. [ 265.779537][T10652] chnl_net:caif_netlink_parms(): no params data found [ 265.919031][T10589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.960820][T10589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.983160][T10589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 266.066502][T10589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.097328][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.100883][T10758] netlink: 'syz.2.1046': attribute type 2 has an invalid length. [ 266.112810][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.115730][T10758] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 266.128909][T10652] bridge_slave_0: entered allmulticast mode [ 266.130882][T10652] bridge_slave_0: entered promiscuous mode [ 266.136519][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 266.159142][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.166480][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.173952][T10652] bridge_slave_1: entered allmulticast mode [ 266.189845][T10652] bridge_slave_1: entered promiscuous mode [ 266.227814][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 266.238301][T10757] tipc: Enabled bearer , priority 18 [ 266.267055][T10765] openvswitch: netlink: Missing valid actions attribute. [ 266.277410][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.288895][ T5836] Bluetooth: hci6: command tx timeout [ 266.324203][T10652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.362171][T10652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.381778][ T5836] Bluetooth: hci5: command tx timeout [ 266.463771][T10774] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1049'. [ 266.513930][T10652] team0: Port device team_slave_0 added [ 266.533716][T10652] team0: Port device team_slave_1 added [ 266.656834][T10652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.665525][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.693760][T10652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.726820][T10652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.743626][T10652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.775893][T10652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.823720][T10790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 266.907800][T10652] hsr_slave_0: entered promiscuous mode [ 266.925067][T10652] hsr_slave_1: entered promiscuous mode [ 267.135421][T10589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.263887][T10589] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.280392][T10805] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 267.288915][T10805] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1058'. [ 267.308787][T10803] dummy0 speed is unknown, defaulting to 1000 [ 267.374085][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.381334][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.413814][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.420954][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.433653][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 267.446124][T10810] ksmbd: Unknown IPC event: 3, ignore. [ 267.466428][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 267.616016][T10813] bond0: option min_links: invalid value (18446744073709551604) [ 267.624182][T10813] bond0: option min_links: allowed values 0 - 2147483647 [ 267.912319][T10822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'. [ 268.066093][T10823] tipc: Trying to set illegal importance in message [ 268.247688][T10652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.286932][T10652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.302231][T10652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.323836][T10589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.341538][T10652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.369321][ T5836] Bluetooth: hci6: command tx timeout [ 268.460870][ T5836] Bluetooth: hci5: command tx timeout [ 268.695327][T10850] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 268.744954][T10652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.802873][T10652] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.845134][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.852388][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.897021][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.904254][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.082359][T10589] veth0_vlan: entered promiscuous mode [ 269.132283][T10589] veth1_vlan: entered promiscuous mode [ 269.229498][T10589] veth0_macvtap: entered promiscuous mode [ 269.241642][T10589] veth1_macvtap: entered promiscuous mode [ 269.270086][T10589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.323185][T10589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.391418][ T6327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.417893][ T6327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.441395][ T6327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.498629][ T6327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.737026][T10652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.769637][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.777492][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.867447][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.877545][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.463358][T10916] syzkaller1: entered promiscuous mode [ 270.472558][T10916] syzkaller1: entered allmulticast mode [ 270.529125][ T5836] Bluetooth: hci5: command tx timeout [ 270.585226][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 270.621337][T10922] dummy0: entered promiscuous mode [ 270.627050][T10922] macvtap1: entered promiscuous mode [ 270.640522][T10922] macvtap1: entered allmulticast mode [ 270.645954][T10922] dummy0: entered allmulticast mode [ 270.677987][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 270.679301][T10652] veth0_vlan: entered promiscuous mode [ 270.714381][T10926] dummy0: left allmulticast mode [ 270.740018][T10926] dummy0: left promiscuous mode [ 270.788530][T10652] veth1_vlan: entered promiscuous mode [ 270.907992][T10652] veth0_macvtap: entered promiscuous mode [ 270.923170][T10652] veth1_macvtap: entered promiscuous mode [ 270.975808][T10652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.038304][T10652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.093739][ T6322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.114081][T10934] dummy0 speed is unknown, defaulting to 1000 [ 271.121054][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.140364][T10941] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1085'. [ 271.150343][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.185292][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.556664][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.574998][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.614373][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.649725][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.758862][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1091'. [ 271.790203][T10956] netlink: 'syz.6.1091': attribute type 2 has an invalid length. [ 271.828502][T10956] netlink: 'syz.6.1091': attribute type 1 has an invalid length. [ 271.836288][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1091'. [ 271.869289][T10961] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1091'. [ 271.962095][T10963] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 272.037646][T10961] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1091'. [ 272.072847][T10963] vlan3: entered promiscuous mode [ 272.088313][T10963] bridge0: entered promiscuous mode [ 272.093790][T10963] vlan3: entered allmulticast mode [ 272.107843][T10963] bridge0: entered allmulticast mode [ 272.339704][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.451147][ T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.573324][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.604283][T10975] bond0: entered promiscuous mode [ 272.611924][T10975] bond_slave_0: entered promiscuous mode [ 272.618005][T10975] bond_slave_1: entered promiscuous mode [ 272.624258][T10975] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 272.633947][T10975] macvlan1: entered promiscuous mode [ 272.644581][T10975] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 272.655467][T10975] hsr1: entered promiscuous mode [ 272.790723][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.895719][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.906375][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.915258][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.933138][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.942742][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.945250][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 273.030687][ T78] bridge_slave_1: left allmulticast mode [ 273.036409][ T78] bridge_slave_1: left promiscuous mode [ 273.064541][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.085246][ T78] bridge_slave_0: left allmulticast mode [ 273.098416][ T78] bridge_slave_0: left promiscuous mode [ 273.104705][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.195786][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 273.612558][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.623936][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.638685][ T78] bond0 (unregistering): Released all slaves [ 273.706861][T10981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.773170][T10983] bond2: (slave veth5): Enslaving as an active interface with an up link [ 273.825913][T10989] vlan3: entered allmulticast mode [ 273.849651][T10989] bond2: (slave vlan3): Opening slave failed [ 273.896745][T10978] dummy0 speed is unknown, defaulting to 1000 [ 274.076020][T10994] dummy0 speed is unknown, defaulting to 1000 [ 274.207215][T11002] xt_CT: No such helper "snmp" [ 274.403896][ T78] hsr_slave_0: left promiscuous mode [ 274.428517][ T78] hsr_slave_1: left promiscuous mode [ 274.445022][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.458361][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.477183][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.488266][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.536250][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1107'. [ 274.554130][ T78] veth1_macvtap: left promiscuous mode [ 274.578482][ T78] veth0_macvtap: left promiscuous mode [ 274.584408][ T78] veth1_vlan: left promiscuous mode [ 274.598483][ T78] veth0_vlan: left promiscuous mode [ 275.013271][ T5836] Bluetooth: hci5: command tx timeout [ 275.142946][ T78] team0 (unregistering): Port device team_slave_1 removed [ 275.183111][ T78] team0 (unregistering): Port device team_slave_0 removed [ 276.046401][T10978] chnl_net:caif_netlink_parms(): no params data found [ 276.116318][T11037] syz.6.1112: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.149750][T11037] CPU: 1 UID: 0 PID: 11037 Comm: syz.6.1112 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) [ 276.149781][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.149794][T11037] Call Trace: [ 276.149803][T11037] [ 276.149812][T11037] dump_stack_lvl+0x189/0x250 [ 276.149852][T11037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.149884][T11037] ? __pfx__printk+0x10/0x10 [ 276.149907][T11037] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.149929][T11037] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.149953][T11037] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 276.149979][T11037] warn_alloc+0x214/0x310 [ 276.150002][T11037] ? stack_depot_save_flags+0x40/0x900 [ 276.150031][T11037] ? __pfx_warn_alloc+0x10/0x10 [ 276.150056][T11037] ? kasan_save_track+0x4f/0x80 [ 276.150087][T11037] ? xskq_create+0x56/0x170 [ 276.150107][T11037] ? xsk_init_queue+0xb0/0x110 [ 276.150124][T11037] ? xsk_setsockopt+0x43f/0x710 [ 276.150148][T11037] ? do_sock_setsockopt+0x25a/0x3e0 [ 276.150174][T11037] ? __x64_sys_setsockopt+0x18b/0x220 [ 276.150199][T11037] ? do_syscall_64+0xfa/0x3b0 [ 276.150220][T11037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.150248][T11037] __vmalloc_node_range_noprof+0x125/0x12f0 [ 276.150302][T11037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.150325][T11037] ? xskq_create+0x56/0x170 [ 276.150349][T11037] ? __kasan_kmalloc+0x93/0xb0 [ 276.150370][T11037] vmalloc_user_noprof+0xad/0xf0 [ 276.150392][T11037] ? xskq_create+0xbf/0x170 [ 276.150414][T11037] xskq_create+0xbf/0x170 [ 276.150439][T11037] xsk_init_queue+0xb0/0x110 [ 276.150463][T11037] xsk_setsockopt+0x43f/0x710 [ 276.150486][T11037] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.150505][T11037] ? __lock_acquire+0xab9/0xd20 [ 276.150543][T11037] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 276.150567][T11037] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.150588][T11037] do_sock_setsockopt+0x25a/0x3e0 [ 276.150618][T11037] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 276.150651][T11037] ? __fget_files+0x2a/0x420 [ 276.150682][T11037] __x64_sys_setsockopt+0x18b/0x220 [ 276.150717][T11037] do_syscall_64+0xfa/0x3b0 [ 276.150758][T11037] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.150781][T11037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.150811][T11037] ? clear_bhb_loop+0x60/0xb0 [ 276.150837][T11037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.150858][T11037] RIP: 0033:0x7f5e9dd8e929 [ 276.150878][T11037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.150896][T11037] RSP: 002b:00007f5e9bbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.150919][T11037] RAX: ffffffffffffffda RBX: 00007f5e9dfb6080 RCX: 00007f5e9dd8e929 [ 276.150934][T11037] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 276.150948][T11037] RBP: 00007f5e9de10b39 R08: 0000000000000004 R09: 0000000000000000 [ 276.150964][T11037] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.150977][T11037] R13: 0000000000000000 R14: 00007f5e9dfb6080 R15: 00007ffcbeefc5a8 [ 276.151012][T11037] [ 276.151276][T11037] Mem-Info: [ 276.476290][T11037] active_anon:5668 inactive_anon:0 isolated_anon:0 [ 276.476290][T11037] active_file:1655 inactive_file:39928 isolated_file:0 [ 276.476290][T11037] unevictable:768 dirty:50 writeback:0 [ 276.476290][T11037] slab_reclaimable:11896 slab_unreclaimable:131448 [ 276.476290][T11037] mapped:40499 shmem:1752 pagetables:1214 [ 276.476290][T11037] sec_pagetables:0 bounce:0 [ 276.476290][T11037] kernel_misc_reclaimable:0 [ 276.476290][T11037] free:1269334 free_pcp:17676 free_cma:0 [ 276.537469][T11037] Node 0 active_anon:21272kB inactive_anon:0kB active_file:6620kB inactive_file:159508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:162096kB dirty:196kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13104kB pagetables:4724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.596835][T11036] syzkaller0: entered promiscuous mode [ 276.600506][T11037] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.603085][T11036] syzkaller0: entered allmulticast mode [ 276.635495][T11037] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.764890][T11037] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 276.777843][T11037] Node 0 DMA32 free:1148708kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21204kB inactive_anon:0kB active_file:6620kB inactive_file:157704kB unevictable:1536kB writepending:200kB present:3129332kB managed:2560924kB mlocked:0kB bounce:0kB free_pcp:54464kB local_pcp:37140kB free_cma:0kB [ 276.821202][T11037] lowmem_reserve[]: 0 0 1 1 1 [ 276.826166][T11037] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 276.856656][T11037] lowmem_reserve[]: 0 0 0 0 0 [ 276.861597][T11037] Node 1 Normal free:3911160kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12160kB local_pcp:8320kB free_cma:0kB [ 276.899106][T11037] lowmem_reserve[]: 0 0 0 0 0 [ 276.903980][T11037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.921923][T11037] Node 0 DMA32: 1*4kB (M) 2*8kB (UE) 1*16kB (M) 148*32kB (U) 4*64kB (UM) 55*128kB (UM) 22*256kB (UM) 11*512kB (UM) 23*1024kB (UM) 2*2048kB (U) 268*4096kB (M) = 1148708kB [ 276.941042][T11037] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 276.955070][T11037] Node 1 Normal: 146*4kB (UME) 52*8kB (UME) 39*16kB (UME) 159*32kB (UME) 55*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3911160kB [ 276.974105][T11037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.983824][T11037] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.993605][T11037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.003522][T11037] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.014097][T11037] 42963 total pagecache pages [ 277.018902][T11037] 0 pages in swap cache [ 277.023163][T11037] Free swap = 124996kB [ 277.027440][T11037] Total swap = 124996kB [ 277.032071][T11037] 2097051 pages RAM [ 277.036276][T11037] 0 pages HighMem/MovableOnly [ 277.041078][T11037] 424714 pages reserved [ 277.045318][T11037] 0 pages cma reserved [ 277.080042][T10978] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.087310][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.094485][ T5840] Bluetooth: hci5: command tx timeout [ 277.102042][T10978] bridge_slave_0: entered allmulticast mode [ 277.110618][T10978] bridge_slave_0: entered promiscuous mode [ 278.210786][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 278.487502][T11054] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 278.493590][T11054] syzkaller1: ignored: set checksum enabled [ 278.507145][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.514524][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.527194][T10978] bridge_slave_1: entered allmulticast mode [ 278.537410][T10978] bridge_slave_1: entered promiscuous mode [ 278.683662][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.719258][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.745059][ T6314] bridge_slave_1: left allmulticast mode [ 278.754732][ T6314] bridge_slave_1: left promiscuous mode [ 278.779645][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.796837][ T6314] bridge_slave_0: left allmulticast mode [ 278.803532][ T6314] bridge_slave_0: left promiscuous mode [ 278.816146][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.004317][ T6314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.032891][ T6314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.032953][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1119'. [ 279.056114][T11061] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1119'. [ 279.072703][ T6314] bond0 (unregistering): Released all slaves [ 279.129640][T11061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 279.172313][ T5836] Bluetooth: hci5: command tx timeout [ 279.189422][T11061] gretap1: entered promiscuous mode [ 279.195435][T11061] gretap1: entered allmulticast mode [ 279.327054][T10978] team0: Port device team_slave_0 added [ 279.383209][ T6314] hsr_slave_0: left promiscuous mode [ 279.395822][ T6314] hsr_slave_1: left promiscuous mode [ 279.412432][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.437612][ T6314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.456830][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.467664][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.484489][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.503917][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.513228][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.805877][ T6314] team0 (unregistering): Port device team_slave_1 removed [ 279.884289][ T6314] team0 (unregistering): Port device team_slave_0 removed [ 280.243777][T10978] team0: Port device team_slave_1 added [ 280.271636][T11078] syzkaller1: entered promiscuous mode [ 280.277158][T11078] syzkaller1: entered allmulticast mode [ 280.385767][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.393560][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.421227][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.434614][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.439260][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 280.448707][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.488969][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.689633][T10978] hsr_slave_0: entered promiscuous mode [ 280.705430][T10978] hsr_slave_1: entered promiscuous mode [ 280.721930][T11070] dummy0 speed is unknown, defaulting to 1000 [ 280.865291][T11097] xt_connbytes: Forcing CT accounting to be enabled [ 280.910895][T11097] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.932593][T11097] xt_bpf: check failed: parse error [ 280.952979][T11098] xt_hashlimit: size too large, truncated to 1048576 [ 281.260086][ T5836] Bluetooth: hci5: command tx timeout [ 281.568446][ T5836] Bluetooth: hci0: command tx timeout [ 281.651383][T11112] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 281.663056][T11106] ip6gre1: entered promiscuous mode [ 281.735121][T11112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.886257][T11070] chnl_net:caif_netlink_parms(): no params data found [ 282.028328][T11128] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1133'. [ 282.055202][T11128] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1133'. [ 282.184573][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.192213][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.200010][T11070] bridge_slave_0: entered allmulticast mode [ 282.207569][T11070] bridge_slave_0: entered promiscuous mode [ 282.216342][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.224051][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.231443][T11070] bridge_slave_1: entered allmulticast mode [ 282.240034][T11070] bridge_slave_1: entered promiscuous mode [ 282.403338][T11070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.421650][T11070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.547090][T10978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.573067][T11070] team0: Port device team_slave_0 added [ 282.584351][T10978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.598901][T11070] team0: Port device team_slave_1 added [ 282.625154][T10978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.653075][T11070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.660659][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.698521][T11070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.718333][T10978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.735082][T11070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.743446][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.773280][T11070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.822240][T11143] xt_hashlimit: size too large, truncated to 1048576 [ 282.884315][T11070] hsr_slave_0: entered promiscuous mode [ 282.898312][T11070] hsr_slave_1: entered promiscuous mode [ 282.922297][T11070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.946694][T11070] Cannot create hsr debugfs directory [ 283.162100][T11153] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 283.186237][T11153] tipc: Failed to remove unknown binding: 66,1,1/0:313316355/313316357 [ 283.494868][T10978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.502495][T11070] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 283.527345][T11169] netlink: 'syz.2.1143': attribute type 21 has an invalid length. [ 283.537076][T11070] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 283.562788][T11169] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1143'. [ 283.573844][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 283.615187][T11070] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 283.636062][T10978] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.645759][T11070] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 283.654659][ T5836] Bluetooth: hci0: command tx timeout [ 283.705497][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.712745][ T6314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.751179][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.758369][ T6314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.959888][T11190] : entered promiscuous mode [ 284.134494][T11070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.207616][T11070] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.235949][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 284.271036][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.278305][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.377991][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.385223][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.420718][T11206] syz_tun: tun_net_xmit 42 [ 284.610683][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.035791][T11233] syzkaller1: entered promiscuous mode [ 285.043189][T11233] syzkaller1: entered allmulticast mode [ 285.071801][T11070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.449956][T10978] veth0_vlan: entered promiscuous mode [ 285.481173][T10978] veth1_vlan: entered promiscuous mode [ 285.556800][T10978] veth0_macvtap: entered promiscuous mode [ 285.586967][T10978] veth1_macvtap: entered promiscuous mode [ 285.652587][T10978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.685955][T10978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.710628][ T6322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.724855][ T6322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.733960][ T5836] Bluetooth: hci0: command tx timeout [ 285.750602][ T6322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.760126][ T6322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.822681][T11070] veth0_vlan: entered promiscuous mode [ 285.843468][T11070] veth1_vlan: entered promiscuous mode [ 285.905929][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.925120][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.970811][T11070] veth0_macvtap: entered promiscuous mode [ 285.983402][T11070] veth1_macvtap: entered promiscuous mode [ 285.986097][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.998206][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.056339][T11070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.090137][T11070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.146664][ T6311] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.162091][ T6311] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.183012][ T6311] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.218873][ T6311] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.358785][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.366641][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.458577][ T6311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.466444][ T6311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.487760][T11266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1163'. [ 286.526850][T11266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1163'. [ 286.708885][T11273] xt_hashlimit: max too large, truncated to 1048576 [ 286.715739][T11273] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 286.782225][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1117'. [ 286.826873][ T6315] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.957018][ T6315] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.037059][ T6315] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.187217][ T6315] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.583603][T11285] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1168'. [ 287.593877][ T6315] bridge_slave_1: left allmulticast mode [ 287.603105][ T6315] bridge_slave_1: left promiscuous mode [ 287.626665][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.659681][ T6315] bridge_slave_0: left allmulticast mode [ 287.688834][ T6315] bridge_slave_0: left promiscuous mode [ 287.694891][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.746243][T11290] netlink: 'syz.6.1169': attribute type 1 has an invalid length. [ 287.762808][T11290] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1169'. [ 287.819099][ T5836] Bluetooth: hci0: command tx timeout [ 288.090068][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.103891][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.113800][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.122228][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.150867][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.361894][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.373803][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.385711][ T6315] bond0 (unregistering): Released all slaves [ 288.494564][T11296] dummy0 speed is unknown, defaulting to 1000 [ 288.885406][ T6315] hsr_slave_0: left promiscuous mode [ 288.909448][ T6315] hsr_slave_1: left promiscuous mode [ 288.917108][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.930417][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.949579][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.957038][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.986717][ T6315] veth1_macvtap: left promiscuous mode [ 288.992397][ T6315] veth0_macvtap: left promiscuous mode [ 288.998643][ T6315] veth1_vlan: left promiscuous mode [ 289.004048][ T6315] veth0_vlan: left promiscuous mode [ 289.686429][ T6315] team0 (unregistering): Port device team_slave_1 removed [ 289.736335][ T6315] team0 (unregistering): Port device team_slave_0 removed [ 290.145409][T11296] chnl_net:caif_netlink_parms(): no params data found [ 290.226544][ T5844] Bluetooth: hci5: command tx timeout [ 290.272634][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1179'. [ 290.327376][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1179'. [ 290.350014][T11330] tls_set_device_offload: netdev not found [ 290.625513][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.629118][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1182'. [ 290.642261][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.642514][T11296] bridge_slave_0: entered allmulticast mode [ 290.644650][T11296] bridge_slave_0: entered promiscuous mode [ 290.661946][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1182'. [ 290.711762][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.727538][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.761662][T11296] bridge_slave_1: entered allmulticast mode [ 290.779761][T11296] bridge_slave_1: entered promiscuous mode [ 290.825543][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1184'. [ 290.874060][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1184'. [ 290.900073][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.932817][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.023795][T11296] team0: Port device team_slave_0 added [ 291.035662][T11296] team0: Port device team_slave_1 added [ 291.146655][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.153920][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.184806][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.229869][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.262120][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.348545][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.481323][T11365] x_tables: duplicate underflow at hook 1 [ 291.492000][T11365] netlink: 270 bytes leftover after parsing attributes in process `syz.6.1190'. [ 291.507040][T11296] hsr_slave_0: entered promiscuous mode [ 291.529835][T11296] hsr_slave_1: entered promiscuous mode [ 291.773750][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1191'. [ 291.803283][T11369] geneve2: entered promiscuous mode [ 291.818140][T11369] geneve2: entered allmulticast mode [ 291.879540][ T78] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 47128 - 0 [ 291.922375][ T78] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 47128 - 0 [ 291.962394][ T78] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 47128 - 0 [ 291.986161][ T78] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 47128 - 0 [ 292.252390][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1195'. [ 292.285051][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.299199][ T5836] Bluetooth: hci5: command tx timeout [ 292.307052][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.315602][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.352941][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.361006][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.572590][T11384] dummy0 speed is unknown, defaulting to 1000 [ 292.654728][T11296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.669905][T11296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.691147][T11400] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 292.705171][T11296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.743394][T11296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 293.105975][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 293.189434][T11425] syzkaller1: entered promiscuous mode [ 293.217411][T11425] syzkaller1: entered allmulticast mode [ 293.274083][T11384] chnl_net:caif_netlink_parms(): no params data found [ 293.292741][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.423043][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.504609][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.511810][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.591408][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.610517][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.617875][T11384] bridge_slave_0: entered allmulticast mode [ 293.641852][T11384] bridge_slave_0: entered promiscuous mode [ 293.655134][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.662383][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.671631][T11384] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.690512][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.697992][T11384] bridge_slave_1: entered allmulticast mode [ 293.716459][T11384] bridge_slave_1: entered promiscuous mode [ 293.851195][T11384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.892203][T11384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.924787][T11449] netlink: 'syz.6.1216': attribute type 11 has an invalid length. [ 293.989370][T11384] team0: Port device team_slave_0 added [ 294.008482][T11384] team0: Port device team_slave_1 added [ 294.124177][T11384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.158257][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.192119][T11384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.198910][T11458] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 294.206835][T11384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.221017][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.249046][T11384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.368340][ T5840] Bluetooth: hci5: command tx timeout [ 294.457431][T11384] hsr_slave_0: entered promiscuous mode [ 294.467972][ T5840] Bluetooth: hci7: command tx timeout [ 294.492226][T11384] hsr_slave_1: entered promiscuous mode [ 294.514784][T11384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.534286][T11384] Cannot create hsr debugfs directory [ 294.716903][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.215857][ T9] IPVS: starting estimator thread 0... [ 295.270885][T11384] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 295.314925][T11492] netlink: 'syz.6.1226': attribute type 6 has an invalid length. [ 295.329533][T11489] IPVS: using max 25 ests per chain, 60000 per kthread [ 295.594931][T11384] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 295.626559][T11384] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 295.659435][T11384] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 295.688358][T11296] veth0_vlan: entered promiscuous mode [ 295.714900][T11502] __nla_validate_parse: 3 callbacks suppressed [ 295.714920][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 295.725185][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 295.740853][T11507] syz_tun: tun_net_xmit 63 [ 295.757804][T11296] veth1_vlan: entered promiscuous mode [ 295.871844][T11502] macvlan1 (unregistering): left promiscuous mode [ 295.982822][T11296] veth0_macvtap: entered promiscuous mode [ 296.014076][T11296] veth1_macvtap: entered promiscuous mode [ 296.080030][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.113836][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.143588][ T6314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.154263][ T6314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.173797][T11518] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 296.190363][T11518] team0: Port device batadv1 added [ 296.201078][ T6314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.220097][ T6314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.260330][T11384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.316029][T11384] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.371794][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.379030][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.457567][ T5840] Bluetooth: hci5: command tx timeout [ 296.494524][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.501762][ T6315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.528340][ T5840] Bluetooth: hci7: command tx timeout [ 296.598315][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.606656][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.709689][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.724300][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.292768][ T6315] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.410806][T11384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.497451][ T6315] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.599402][ T6315] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.747353][ T6315] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.827137][T11384] veth0_vlan: entered promiscuous mode [ 297.841482][T11384] veth1_vlan: entered promiscuous mode [ 297.877888][T11384] veth0_macvtap: entered promiscuous mode [ 297.897906][T11384] veth1_macvtap: entered promiscuous mode [ 297.925252][T11384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.944458][T11384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.989846][ T6322] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.015574][ T6322] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.024901][ T6322] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.046585][ T6322] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.058957][ T6315] bridge_slave_1: left allmulticast mode [ 298.064649][ T6315] bridge_slave_1: left promiscuous mode [ 298.071010][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.147570][ T6315] bridge_slave_0: left allmulticast mode [ 298.158109][ T6315] bridge_slave_0: left promiscuous mode [ 298.169787][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.224651][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1242'. [ 298.248360][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1242'. [ 298.581321][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.591045][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.599322][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.615698][ T5844] Bluetooth: hci7: command tx timeout [ 298.622450][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.631626][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.225834][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.259258][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.277297][ T6315] bond0 (unregistering): Released all slaves [ 299.293778][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'. [ 299.314058][T11569] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 299.328966][T11569] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 299.369197][T11570] syz_tun: entered promiscuous mode [ 299.376071][T11570] batadv_slave_0: entered promiscuous mode [ 299.395789][T11570] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 299.403980][T11570] Cannot create hsr debugfs directory [ 299.412697][T11570] hsr1: entered allmulticast mode [ 299.417852][T11570] syz_tun: entered allmulticast mode [ 299.423378][T11570] batadv_slave_0: entered allmulticast mode [ 299.434172][T11574] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1242'. [ 299.654321][T11576] dummy0 speed is unknown, defaulting to 1000 [ 299.664928][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1247'. [ 299.757791][T11591] netlink: 'syz.2.1248': attribute type 46 has an invalid length. [ 299.769710][T11592] openvswitch: netlink: Message has 4 unknown bytes. [ 299.776904][T11592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.819620][ C1] syz_tun: tun_net_xmit 86 [ 299.869481][ T6315] hsr_slave_0: left promiscuous mode [ 299.880761][ T6315] hsr_slave_1: left promiscuous mode [ 299.886958][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.903276][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.911953][T11593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'. [ 299.929212][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.936787][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.976966][ T6315] veth1_macvtap: left promiscuous mode [ 299.982861][ T6315] veth0_macvtap: left promiscuous mode [ 299.988919][ T6315] veth1_vlan: left promiscuous mode [ 299.994441][ T6315] veth0_vlan: left promiscuous mode [ 300.541867][ T6315] team0 (unregistering): Port device team_slave_1 removed [ 300.587025][ T6315] team0 (unregistering): Port device team_slave_0 removed [ 300.688649][ T5840] Bluetooth: hci5: command tx timeout [ 300.688786][ T5844] Bluetooth: hci7: command tx timeout [ 301.033151][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.052736][T11597] netem: incorrect gi model size [ 301.058605][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.068236][T11597] netem: change failed [ 301.181555][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.216769][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.428576][ T5914] syz_tun: tun_net_xmit 96 [ 301.533086][ T6314] syz_tun: tun_net_xmit 92 [ 301.643205][T11576] chnl_net:caif_netlink_parms(): no params data found [ 301.973529][T11636] netlink: 'syz.2.1257': attribute type 2 has an invalid length. [ 301.981676][T11636] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 301.989842][T11636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1257'. [ 302.319226][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.352072][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.366328][T11576] bridge_slave_0: entered allmulticast mode [ 302.414212][T11576] bridge_slave_0: entered promiscuous mode [ 302.460367][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.477870][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.502145][T11576] bridge_slave_1: entered allmulticast mode [ 302.519324][T11576] bridge_slave_1: entered promiscuous mode [ 302.550311][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1259'. [ 302.571126][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1259'. [ 302.653683][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.673553][T11647] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1260'. [ 302.696205][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.743420][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 302.756031][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 302.769245][ T5836] Bluetooth: hci5: command tx timeout [ 302.777475][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 302.804041][T11643] [ 302.806423][T11643] ====================================================== [ 302.813463][T11643] WARNING: possible circular locking dependency detected [ 302.820512][T11643] 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 Not tainted [ 302.827627][T11643] ------------------------------------------------------ [ 302.834648][T11643] syz.8.1259/11643 is trying to acquire lock: [ 302.840720][T11643] ffffffff8f66a318 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 302.850319][T11643] [ 302.850319][T11643] but task is already holding lock: [ 302.857684][T11643] ffffffff8f66a2b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 302.867365][T11643] [ 302.867365][T11643] which lock already depends on the new lock. [ 302.867365][T11643] [ 302.877776][T11643] [ 302.877776][T11643] the existing dependency chain (in reverse order) is: [ 302.886882][T11643] [ 302.886882][T11643] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 302.894806][T11643] lock_acquire+0x120/0x360 [ 302.899848][T11643] _raw_spin_lock_bh+0x36/0x50 [ 302.905142][T11643] nr_rt_ioctl+0x390/0xd50 [ 302.910097][T11643] sock_do_ioctl+0xdc/0x300 [ 302.915141][T11643] sock_ioctl+0x576/0x790 [ 302.920008][T11643] __se_sys_ioctl+0xfc/0x170 [ 302.925154][T11643] do_syscall_64+0xfa/0x3b0 [ 302.930197][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.936629][T11643] [ 302.936629][T11643] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 302.944635][T11643] lock_acquire+0x120/0x360 [ 302.949678][T11643] _raw_spin_lock_bh+0x36/0x50 [ 302.954977][T11643] nr_rt_ioctl+0x193/0xd50 [ 302.959924][T11643] sock_do_ioctl+0xdc/0x300 [ 302.964960][T11643] sock_ioctl+0x576/0x790 [ 302.969817][T11643] __se_sys_ioctl+0xfc/0x170 [ 302.974967][T11643] do_syscall_64+0xfa/0x3b0 [ 302.980009][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.986430][T11643] [ 302.986430][T11643] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 302.994265][T11643] validate_chain+0xb9b/0x2140 [ 302.999559][T11643] __lock_acquire+0xab9/0xd20 [ 303.004768][T11643] lock_acquire+0x120/0x360 [ 303.009805][T11643] _raw_spin_lock_bh+0x36/0x50 [ 303.015141][T11643] nr_rt_device_down+0xa9/0x720 [ 303.020540][T11643] nr_device_event+0x137/0x150 [ 303.025838][T11643] notifier_call_chain+0x1b3/0x3e0 [ 303.031495][T11643] dev_close_many+0x29c/0x410 [ 303.036713][T11643] netif_close+0x158/0x210 [ 303.041677][T11643] dev_close+0x10a/0x220 [ 303.046800][T11643] bpq_device_event+0x2f4/0x600 [ 303.052182][T11643] notifier_call_chain+0x1b3/0x3e0 [ 303.057843][T11643] __dev_notify_flags+0x18d/0x2e0 [ 303.063478][T11643] netif_change_flags+0xe8/0x1a0 [ 303.068946][T11643] dev_change_flags+0x130/0x260 [ 303.074336][T11643] dev_ioctl+0x7b4/0x1150 [ 303.079189][T11643] sock_do_ioctl+0x22c/0x300 [ 303.084307][T11643] sock_ioctl+0x576/0x790 [ 303.089156][T11643] __se_sys_ioctl+0xfc/0x170 [ 303.094280][T11643] do_syscall_64+0xfa/0x3b0 [ 303.099315][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.105756][T11643] [ 303.105756][T11643] other info that might help us debug this: [ 303.105756][T11643] [ 303.115994][T11643] Chain exists of: [ 303.115994][T11643] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 303.115994][T11643] [ 303.129821][T11643] Possible unsafe locking scenario: [ 303.129821][T11643] [ 303.137344][T11643] CPU0 CPU1 [ 303.142733][T11643] ---- ---- [ 303.148449][T11643] lock(nr_neigh_list_lock); [ 303.153133][T11643] lock(&nr_node->node_lock); [ 303.160426][T11643] lock(nr_neigh_list_lock); [ 303.167724][T11643] lock(nr_node_list_lock); [ 303.172337][T11643] [ 303.172337][T11643] *** DEADLOCK *** [ 303.172337][T11643] [ 303.180490][T11643] 2 locks held by syz.8.1259/11643: [ 303.185728][T11643] #0: ffffffff8f5127c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 303.194563][T11643] #1: ffffffff8f66a2b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 303.204595][T11643] [ 303.204595][T11643] stack backtrace: [ 303.210499][T11643] CPU: 0 UID: 0 PID: 11643 Comm: syz.8.1259 Not tainted 6.16.0-rc3-syzkaller-00985-g8b98f34ce1d8 #0 PREEMPT(full) [ 303.210525][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.210537][T11643] Call Trace: [ 303.210546][T11643] [ 303.210561][T11643] dump_stack_lvl+0x189/0x250 [ 303.210595][T11643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.210623][T11643] ? __pfx__printk+0x10/0x10 [ 303.210641][T11643] ? print_lock_name+0xde/0x100 [ 303.210660][T11643] print_circular_bug+0x2ee/0x310 [ 303.210680][T11643] check_noncircular+0x134/0x160 [ 303.210699][T11643] validate_chain+0xb9b/0x2140 [ 303.210718][T11643] ? rt6_disable_ip+0x6b3/0x720 [ 303.210746][T11643] ? __lock_acquire+0xab9/0xd20 [ 303.210771][T11643] __lock_acquire+0xab9/0xd20 [ 303.210797][T11643] ? nr_rt_device_down+0xa9/0x720 [ 303.210815][T11643] lock_acquire+0x120/0x360 [ 303.210837][T11643] ? nr_rt_device_down+0xa9/0x720 [ 303.210858][T11643] ? nr_rt_device_down+0xa9/0x720 [ 303.210874][T11643] _raw_spin_lock_bh+0x36/0x50 [ 303.210891][T11643] ? nr_rt_device_down+0xa9/0x720 [ 303.210907][T11643] nr_rt_device_down+0xa9/0x720 [ 303.210924][T11643] ? do_raw_spin_unlock+0x122/0x240 [ 303.210946][T11643] nr_device_event+0x137/0x150 [ 303.210961][T11643] notifier_call_chain+0x1b3/0x3e0 [ 303.210992][T11643] dev_close_many+0x29c/0x410 [ 303.211015][T11643] ? __pfx_dev_close_many+0x10/0x10 [ 303.211033][T11643] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 303.211055][T11643] ? bond_netdev_event+0x227/0xe80 [ 303.211074][T11643] netif_close+0x158/0x210 [ 303.211093][T11643] ? __pfx_netif_close+0x10/0x10 [ 303.211111][T11643] ? tun_device_event+0x77/0x1020 [ 303.211137][T11643] ? macsec_notify+0x104/0x660 [ 303.211156][T11643] dev_close+0x10a/0x220 [ 303.211179][T11643] bpq_device_event+0x2f4/0x600 [ 303.211201][T11643] notifier_call_chain+0x1b3/0x3e0 [ 303.211231][T11643] __dev_notify_flags+0x18d/0x2e0 [ 303.211273][T11643] ? __pfx___dev_notify_flags+0x10/0x10 [ 303.211296][T11643] ? __dev_change_flags+0x4cc/0x6d0 [ 303.211322][T11643] ? __pfx___dev_change_flags+0x10/0x10 [ 303.211345][T11643] ? dev_ioctl+0x7a4/0x1150 [ 303.211364][T11643] ? full_name_hash+0x92/0xe0 [ 303.211389][T11643] netif_change_flags+0xe8/0x1a0 [ 303.211415][T11643] dev_change_flags+0x130/0x260 [ 303.211440][T11643] dev_ioctl+0x7b4/0x1150 [ 303.211462][T11643] sock_do_ioctl+0x22c/0x300 [ 303.211481][T11643] ? __pfx_sock_do_ioctl+0x10/0x10 [ 303.211497][T11643] ? __lock_acquire+0xab9/0xd20 [ 303.211528][T11643] sock_ioctl+0x576/0x790 [ 303.211545][T11643] ? __pfx_sock_ioctl+0x10/0x10 [ 303.211578][T11643] ? __fget_files+0x2a/0x420 [ 303.211613][T11643] ? __fget_files+0x3a0/0x420 [ 303.211631][T11643] ? __fget_files+0x2a/0x420 [ 303.211650][T11643] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.211676][T11643] ? __pfx_sock_ioctl+0x10/0x10 [ 303.211691][T11643] __se_sys_ioctl+0xfc/0x170 [ 303.211718][T11643] do_syscall_64+0xfa/0x3b0 [ 303.211739][T11643] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.211757][T11643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.211774][T11643] ? clear_bhb_loop+0x60/0xb0 [ 303.211793][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.211812][T11643] RIP: 0033:0x7feba1f8e929 [ 303.211829][T11643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.211845][T11643] RSP: 002b:00007feba2ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.211865][T11643] RAX: ffffffffffffffda RBX: 00007feba21b5fa0 RCX: 00007feba1f8e929 [ 303.211878][T11643] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000007 [ 303.211890][T11643] RBP: 00007feba2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.211901][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.211912][T11643] R13: 0000000000000000 R14: 00007feba21b5fa0 R15: 00007ffc05a50ff8 [ 303.211932][T11643] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.606889][ T5949] syz_tun: tun_net_xmit 96 [ 303.614667][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 303.632314][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 303.798531][T11656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.102157][T10589] syz_tun (unregistering): left promiscuous mode [ 304.111042][T11654] dummy0 speed is unknown, defaulting to 1000 [ 304.212354][ T6301] bridge_slave_1: left allmulticast mode [ 304.221552][ T6301] bridge_slave_1: left promiscuous mode [ 304.227296][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.235892][ T6301] bridge_slave_0: left allmulticast mode [ 304.244672][ T6301] bridge_slave_0: left promiscuous mode [ 304.250645][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.357155][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.367421][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.377216][ T6301] bond0 (unregistering): Released all slaves [ 304.416253][T11654] chnl_net:caif_netlink_parms(): no params data found [ 304.535886][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.543435][T11654] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.553436][T11654] bridge_slave_0: entered allmulticast mode [ 304.561362][T11654] bridge_slave_0: entered promiscuous mode [ 304.568932][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.576076][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.583606][T11654] bridge_slave_1: entered allmulticast mode [ 304.590685][T11654] bridge_slave_1: entered promiscuous mode [ 304.612192][T11654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.626012][T11654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.652524][T11654] team0: Port device team_slave_0 added [ 304.660714][T11654] team0: Port device team_slave_1 added [ 304.686124][T11654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.694035][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.720849][T11654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.735663][T11654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.742753][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.772162][T11654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.807807][T11654] hsr_slave_0: entered promiscuous mode [ 304.814158][T11654] hsr_slave_1: entered promiscuous mode [ 304.906098][T11654] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 304.914987][T11654] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.924684][T11654] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.940467][T11654] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 304.952896][ T6301] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.004271][ T6301] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.029742][T11654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.045516][T11654] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.055344][ T6301] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.074545][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.081687][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.094072][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.101212][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.132588][ T6301] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.220522][ T6301] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.234455][ T6301] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47128 - 0 [ 305.278691][T11654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.304810][ T6301] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.315938][ T6301] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47128 - 0 [ 305.368560][ T6301] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.380235][ T6301] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47128 - 0 [ 305.449041][ T6301] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.461065][ T6301] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47128 - 0 [ 305.506918][T11654] veth0_vlan: entered promiscuous mode [ 305.525964][ T6301] bridge_slave_1: left allmulticast mode [ 305.535965][ T6301] bridge_slave_1: left promiscuous mode [ 305.541740][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.550785][ T6301] bridge_slave_0: left allmulticast mode [ 305.556444][ T6301] bridge_slave_0: left promiscuous mode [ 305.562595][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.572968][ T6301] bridge_slave_1: left allmulticast mode [ 305.578744][ T6301] bridge_slave_1: left promiscuous mode [ 305.585228][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.594612][ T6301] bridge_slave_0: left allmulticast mode [ 305.600709][ T6301] bridge_slave_0: left promiscuous mode [ 305.606372][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.744128][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.754352][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.764755][ T6301] bond0 (unregistering): Released all slaves [ 305.808384][ T5840] Bluetooth: hci8: command tx timeout [ 305.923133][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.935299][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.945140][ T6301] bond0 (unregistering): Released all slaves [ 305.955140][ T6301] bond1 (unregistering): Released all slaves [ 305.965841][T11654] veth1_vlan: entered promiscuous mode [ 305.996327][T11654] veth0_macvtap: entered promiscuous mode [ 306.017551][ T6301] : left promiscuous mode [ 306.026505][T11654] veth1_macvtap: entered promiscuous mode [ 306.043306][T11654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.055980][T11654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.077711][ T6327] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.086718][ T6327] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.102203][ T6315] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.112810][ T6315] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.148411][T11654] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 306.172758][ T6315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.174390][T11654] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 306.182205][ T6315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.234455][ T6311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.243807][ T6311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.323197][ T6301] hsr_slave_0: left promiscuous mode [ 306.332610][ T6301] hsr_slave_1: left promiscuous mode [ 306.339555][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.346996][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.358169][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.365598][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.377805][ T6301] batadv_slave_0: left promiscuous mode [ 306.392177][ T6301] hsr_slave_0: left promiscuous mode [ 306.398003][ T6301] hsr_slave_1: left promiscuous mode [ 306.406038][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.417090][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.425865][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.433577][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.449635][ T6301] veth1_macvtap: left promiscuous mode [ 306.455160][ T6301] veth0_macvtap: left promiscuous mode [ 306.460859][ T6301] veth1_vlan: left promiscuous mode [ 306.466125][ T6301] veth0_vlan: left promiscuous mode [ 306.472284][ T6301] veth1_macvtap: left promiscuous mode [ 306.477797][ T6301] veth0_macvtap: left promiscuous mode [ 306.483534][ T6301] veth1_vlan: left promiscuous mode [ 306.488909][ T6301] veth0_vlan: left promiscuous mode [ 306.685902][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 306.714202][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 306.941854][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 306.965316][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 307.608698][ T6301] IPVS: stop unused estimator thread 0... [ 307.654220][ T6301] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.622966][ T6301] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.793733][ T6301] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.842283][ T6301] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.921661][ T6301] bridge_slave_1: left allmulticast mode [ 308.927324][ T6301] bridge_slave_1: left promiscuous mode [ 308.933247][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.942573][ T6301] bridge_slave_0: left allmulticast mode [ 308.948826][ T6301] bridge_slave_0: left promiscuous mode [ 308.954606][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.043751][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.056721][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.066641][ T6301] bond0 (unregistering): Released all slaves [ 309.256654][ T6301] hsr_slave_0: left promiscuous mode [ 309.264415][ T6301] hsr_slave_1: left promiscuous mode [ 309.270280][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.277673][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.285362][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.292843][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.304154][ T6301] veth1_macvtap: left promiscuous mode [ 309.309977][ T6301] veth0_macvtap: left promiscuous mode [ 309.315538][ T6301] veth1_vlan: left promiscuous mode [ 309.320981][ T6301] veth0_vlan: left promiscuous mode [ 309.435361][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 309.457425][ T6301] team0 (unregistering): Port device team_slave_0 removed