last executing test programs: 3.543192917s ago: executing program 3 (id=999): ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x2, 0x56}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x2004, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x48000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x803, 0x0) pwritev(r2, &(0x7f0000000900)=[{&(0x7f0000000840)="c2cfe5af2e0d45facab91b4d00da407312bc0c67ec92e0afd732ba340b2705f2235bd30dcfc30f6517328bcbc6eff6a98146219d6fe457fdf87d71d26ac322c49706458f0fb0882294310123fb4db3deef3d8546df7d13adfbbbadd1cb2ce19c65bff9e4f5a6e0f6b4cf56a603bcd6def53a4b8200f66e8b0b8e8213f73e710aae4f8e04c9e3c78747c02f2133eec7", 0x8f}], 0x1, 0x213, 0x101) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x98, 0xff, 0x2, 0xff, 0xb, 0x1600}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @remote, @empty}, &(0x7f0000000800)=0xc) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r8, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x444, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x950}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0xfffffffffffffef1, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9de}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "409e08436572a237a011463d376a608982ed06d1140617baeb41c5d969a7"}}, @TIPC_NLA_NODE_ID={0x94, 0x3, "fcdb224dae7d450a3789fe964ee6d9319e7c67f3992b8ede18b038b2918aa75020b869a11d3508b7241b979785cf0c08133748b6e3a37fb60736437b18361071766b80f76d7aa2a030b6bad79c745ddd9c0c83922209e053e46ea63d6c3cf14b16c592284bd69dcb7b9d05c95f17c0508d6fed47ef09511ee2527b10c4383786e64474176aea3cacb25350a5b527ad8e"}, @TIPC_NLA_NODE_ID={0xdb, 0x3, "695f08a1f9cc23654e0cbb476e7cf43b46f325ec53a88e2b3c0f5b3687dc7733fb63e77f3ff354518641bf5f2958dead13cef3f6c169aa7c1e1862800635ab7844d3e9b268413b8d375f1d05cc77742ac92af6e3d43cd78cdd8b3ea4777f58ef5c5db82e96d3350ea6cbb87b08c5d1e2335cb9912fec9a98b6f44388fef12566a6f7f227778cc13e1cdb8d493d4971377de14f2dc31dcd9a90c8a84a60e4274dd423228974506b399948764adda202adde1820c128fe98959bbe420334f066bd1fa4a708df8100604e420228217d8e3677dc6211e0553a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x444}, 0x1, 0x0, 0x0, 0x20004001}, 0x20004001) 3.220005922s ago: executing program 3 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.996811319s ago: executing program 3 (id=1006): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @mcast2, @local, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0x9800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x1, 0x7, 0x1}}}}}, 0x52) (async) write$tun(r1, &(0x7f0000000040)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @mcast2, @local, {[], @mlv2_query={0x82, 0x0, 0x0, 0x6, 0x9800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x1, 0x7, 0x1}}}}}, 0x52) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {0x10}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2.655802382s ago: executing program 3 (id=1011): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) socket(0x11, 0x800000003, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x27c, 0x19, 0x400, 0x70bd2b, 0x25dfdbfc, {0xc}, [@generic="3c8595e48c5294", @nested={0x214, 0x72, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @typed={0x8, 0x11f, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x10e}, @typed={0xc, 0xf7, 0x0, 0x0, @u64=0x955}, @typed={0x8, 0x4d, 0x0, 0x0, @u32}, @generic="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", @generic="059729f6eb48cbaa1088a2182fd2041e37b1a5bd110dc242d69e5aa9aac3a129677f5a705085023498d5198f714780ff727df8c704488fcd6e866450a713e5203f8fb04dba9ee669bbedb1545490e7f70c7108e7923d56ea800590eeb8400c4810308159a5a4548709eff1b3f89f6defcd1b8ab610afe56f5cc7f119b31097d4b67a52f108f5a169fa0cb21aab596c657f429c36244e867a87dba3be5475b3a640076e57d940b86f07a5cfd76de8590a63ed29f4583b7de229ede821a25b7362377565c622b5244e29487c2c15", @typed={0x8, 0x136, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x12c, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @typed={0x14, 0x111, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="5edda1a53a289abca71218039300970afa5e0a447399f6baf02ce35deee441ef2976537bda4f18403b96b444bb2b9f967b91df66228f955f"]}, 0x27c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000000) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x393}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.727778377s ago: executing program 0 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0500"], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='bcache_invalidate\x00', r1, 0x0, 0x1}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x4040000) (async) connect$rose(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xf}, {0xf}}}, 0x24}}, 0x20000400) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r11}, 0x10) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x2f, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@tail_call, @ldst={0x8b0b98310c9d11ca, 0x2, 0x1, 0xa, 0x5, 0x8, 0x4}, @exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffff36c}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x6}, @printk={@lu}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, @jmp={0x5, 0x1, 0x8, 0x6, 0xb, 0x100, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x200, 0xcc, &(0x7f00000009c0)=""/204, 0x41000, 0x24, '\x00', r9, 0x1b, r3, 0x8, &(0x7f0000000540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xc, 0x6, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12], 0x0, 0x10, 0x72b51db2, @void, @value}, 0x94) (async, rerun: 64) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async, rerun: 32) close(r13) (rerun: 32) 1.725502523s ago: executing program 1 (id=1024): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.713869377s ago: executing program 4 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000200), 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000240)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @loopback, 0x1ff}}, 0x24) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x0, 'ip6tnl0\x00', {0x1}, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="004522184263305b9d000d90549300007cffffff", @ANYRES32=r1, @ANYBLOB="00000000000000002000128009000100766c616e00000000100002800c000200000000000400000008000500f3417e14f79fc3299fcca9964d6ec0f50fca68958556a0dcacf9d63d79b9e42eb90b81eaba8a87aed2e4b0bc861b2ce19d51cf7a0127c31296c02013386806e7557f9e92e3efb0aa42cef21f59b1066d604a0f2958578ba09e26eef892ac72c68b02dba3a44359a6a38062f6867ae89094c0f140ff7d957cf7b108e3d6c06b08e3fec8d24fd8d1212ff74008053b5ff3dcf9b76e980eb5e1bdf12d24e9896b6d9248e0e941b8f417e1da9a01c99cc28e4515f768d94ab7748e64e4", @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESDEC=r1, @ANYBLOB="e367ee3e208f"], 0x50}, 0x1, 0xba01, 0x0, 0x8008050}, 0x810) 1.504187491s ago: executing program 4 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000006c0), 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x4000000) 1.481710158s ago: executing program 1 (id=1027): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="15000000b48e4900cd047451dd170e2a61d7a355b11dca012194e445439d385b02a0b75051e56ca72f0c6379b97ad3819dab7d65", @ANYRES16=0x0, @ANYBLOB="0100000000000000000014000000"], 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x0, 0x3]}}, 0x0, 0x1d, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) r6 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, &(0x7f0000000080)) r7 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000640), 0x1003, r9}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)="af", 0x0, 0x2, r9}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x5d, "75323cdc647f832efdd924612096dd70b367bd6ae6cfa53f67a354f57d26772a613acaec3e867c8f444a88715628aa7f536c204cc9faf6287a0bdbdc993387367ab91a5a0567ee8b9f974b524d6063632c53d0b67f39d671f9845ea52a"}, &(0x7f0000000240)=0x65) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r11, 0x6, 0x30}, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff}, 0x6) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r14, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x3ac84b8f40f69c57) 1.359832841s ago: executing program 3 (id=1028): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x15, 'cpuset'}]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r1}, 0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x0, 0xdf, 0x35, &(0x7f0000001240)="f02113f2006c154736dba33f9abe1688f1a62739009a73d413adcd0a3fc978c3428d8185322fd9e6e182122763d5dcb49e71a2e5b5be0532d760e0ab40bb2c3f205f824bea7a9cfb25676d21d5ab2728d5954dd1e47f0d5f5c5e9b43245e4ac5dd6f068c6fcdbd4b5e91dc9daed3b6c4762a917b15d4bcf09668f728d1597b05c7023f09503ef57cd0ce26da9729562f4f02d97e589c6b28eeabb1cbd8a4bbf5102486ed195800db497c48bdf3ac412bcdb4622f84845e646e51626ea556afd80d245139b1c3c6f911ae5bfb93fab200ff3234289362eb079af4bd26373bd4", &(0x7f0000001140)=""/53, 0x7f, 0x0, 0x1000, 0xb8, &(0x7f00000019c0)="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", &(0x7f0000001340)="16a8ade3d74d6e8ae9647fa57c49dcb9936c5bf18ddf957967d39a548fb04e4f5708257963aebcfb61015e0b01a02a0c0da903a12ab2c4ca09df305ab8908cee4c66fff46479f72f4a5d4b0495c4a3e4c190cab8e2bf8752e417c5ae6697042fa30861e6d04db8148384e24c2294918bc437d5a3f622ac8185af6ce7bec9e38f72fd09986b5277df9458b62a94be50bfd7225dfca3de8743ad8dacf5ad844fc8189826de3c0811691ffe90fa11976611b77cab02ec8dd1bc", 0x7, 0x0, 0x7d1}, 0x50) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000001100), 0x4) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x53000, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2901}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x60}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xfffffffd, 0xffffffffffffffff, 0x5b0f9f04, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x10, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000100)=0x93, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) socket$kcm(0xa, 0x3, 0x73) 1.351609751s ago: executing program 0 (id=1029): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x1b5}], 0x1}}], 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x1b5}], 0x1}}], 0x2, 0x0) (async) 1.274050318s ago: executing program 2 (id=1030): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x24}}, 0x8000) 1.273721813s ago: executing program 4 (id=1031): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0x5}]}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000120005010000000000000000050001"], 0x18}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x12, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r12}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$team(&(0x7f0000000040), r13) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) 1.111048122s ago: executing program 0 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x10c, r5, 0x200, 0x70bd2b, 0xd2, {{}, {@void, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_FRAME={0x98, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @from_mac=@device_b, {0xd, 0x4f5}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x1004, 0x3e, @random=0x2, @void, @void, [{0xdd, 0x70, "8d1605e97d10d85e89802a650e439d51cf8d76d554c4856438e9e18acae33c8edaaa1613f54b30c1afb34d428129535922aeab122773afe773b6be8af37b976885567a40c9c20efd6288f90daa58a056cf426e1d98505c262b74ec87c6583d347e2d7bea39c17f4aff65d81388e55a3b"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x817, 0x40, 0x3, 0x5851, 0x6]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc4d}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x10c}}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x448, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000a5db124a00002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200776731"], 0x34}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000540), &(0x7f0000000580)=0x40) 1.031475228s ago: executing program 2 (id=1033): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080), 0x4) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x20, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%ps \x00'}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x10001, 0x9, {{0x22, 0x4, 0x1, 0x8, 0x88, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @broadcast, {[@noop, @generic={0x94, 0xc, "4cc3e41516a647de2231"}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x2, 0x2}, {0x7, 0xd, "064e82bee2edcdc420e079"}, {0x2, 0x3, "f7"}, {0x1, 0xd, "8f1a08da10f53dbaf6b169"}, {0x6, 0xf, "e4284eda9c1eb87474f116b18c"}, {0x0, 0xb, "24b33c6b456f5aa461"}]}, @timestamp_prespec={0x44, 0x24, 0x45, 0x3, 0x7, [{@local, 0x5005}, {@empty, 0xd14}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@multicast2, 0xc958}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x20, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x7, 0x9, 0x0, 0x2, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0xe10b474610dadca1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @generic={0x4, 0x6, 0x2, 0xfff, 0x5}, @ldst={0x1, 0x1, 0x1, 0xa, 0xa, 0x1, 0xfffffffffffffff0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0xb, 0x1, 0x2, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x5, 0x3, 0x3, 0x18, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x5, 0x8, 0x10}, 0x10, 0x238c5, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pK \x00'}, 0x20) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x14, 0x2, 0x81, 0x6, 0x20000, 0xffffffffffffffff, 0xf3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0xd, 0x54b46a52, 0xff, 0x40000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x5, @void, @value, @void, @value}, 0x50) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x5c5, 0xe, 0x8, 0x12040, 0xffffffffffffffff, 0x62f3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x6, @void, @value, @value}, 0x50) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x8}, 0x18) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdc5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x0, 0x9, 0x4, 0xd55}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xdbd4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0xb, 0xb, 0xa, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x6, 0x23, &(0x7f0000000400)=""/35, 0x41000, 0x21, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x4, 0x77a1, 0x9}, 0x10, 0x2316, r5, 0x8, &(0x7f0000000c80)=[r6, r7, r8, r9, r1, r10, r11, r12, r13], &(0x7f0000000cc0)=[{0x4, 0x5, 0x6, 0x4}, {0x4, 0x3, 0x2, 0xc}, {0x5, 0x1, 0x5, 0x6}, {0x4, 0x4, 0xe, 0xc}, {0x3, 0x1, 0x5, 0x4}, {0x4, 0x3, 0x6, 0x1}, {0x4, 0x1, 0xb, 0xb}, {0x0, 0x5, 0xf, 0x4}], 0x10, 0x5, @void, @value}, 0x94) connect$bt_rfcomm(r9, &(0x7f0000000e00)={0x1f, @none, 0x10}, 0xa) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000e40)={0x0, 0x4}, &(0x7f0000000e80)=0x8) bind$l2tp(r2, &(0x7f0000000ec0)={0x2, 0x0, @local}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002000)={r3, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002080)=@generic={&(0x7f0000002040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x3, 0x8, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000f80)=""/4096, 0x41100, 0x0, '\x00', r4, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001fc0)={0x2, 0x0, 0x401}, 0x10, 0x0, r14, 0x1, &(0x7f00000020c0)=[r11, r12, r10, r15, r16], &(0x7f0000002100)=[{0x0, 0x1, 0x3}], 0x10, 0x8, @void, @value}, 0x94) (async) sendmsg$kcm(r9, &(0x7f0000003300)={&(0x7f0000002200)=@phonet={0x23, 0x5, 0xb, 0xad}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002280)="897d34f746823b4a8de81be14a705383b524111aad03cf0dc3bdcb6b4ea7ddef", 0x20}, {&(0x7f00000022c0)="a32cd5f42b17b51f97ecd175a200ffd269c7ec7ecbc15583411615d911d59353f96797086dfc661239c2927d8c64760f8b7ebe1844176ff199abb5ad21eadece736b0a4699fb0973aba0ee6fd183e273001e2f09b8b2af5b9a7170640e9f5c5101658dd20c4d2cf85b3e88f012a5d80f5964bc73e13126187b95e9378b37fbc9b6fe2e38f87caf6482a446b7bdfaadf391a6dca77e55e8dc915dc67beb61c76ad4d28da44f2dc6f381919cdf059f71ca060088c8927b1fc98f6050d92471f5cefc21192cfa57c7311e856b8a0f2a5c306f548d82c4d22772194d105ce87ee2a7898ec2c68a5f72382ec4886e440e82a3a9f584ac8546388cb9b841865dbedce05d1a03a63b361888aef798fa7df279dc2b0caa28db2c5cc82c30b678958501d14947875f3a21bafdc23a14172b9ecb4e70df765b7f527fb4bbb1ab75b7196f69b2e38fffdbb06a3a967fdca741bc420e36d68c95f563d10b1de32b4cfba84277074f4efd2d48b543d3d70845631de384f5aa1e5fbfa9c54faa78d9ee60637df6b79fb4554cfd088baa29c507edafbab7ac6275155d5f85cc322f89c2f00684d87a5a5a3a1672354b3ad93d9b346b8dd123ae2b7b8d9f196f418672e8a200f8d16e48e2071947af0d0b13725c9d16a2b3656cd95094873455d7d3b27b005c9d9f257a1014f7eb3b5c82a0ba1116e7eda36790958135701242274698ea25b52f4010947d5ffc65b1cfb8cdcffb3d52873bd723766753349b08bbe85f35e50dbb45e5f9b7856db277da996cd25eefed97480bcc03602493f931d4fc7234a0a9d2c395f31ac1e9686d61ff2c052e2bdc2b8917b6b39dc2987bd6883e5ccb0e902ee53b0ccbb8adaa8269f7ef58ce4dfa7aab3ff4cd19be82cbf759e8b11a1bf671ddec8db38c5b25bbff123df66553d673097575b8f96dbcefa23660d6e7f2cc7d2e22b6a80f1066d2316d219f5b45d27985f7a96312ecc6cdcfbcaa3d4c3b91bc8f37b08138c8b99875adca76848d7a1052362bbcc3383f602ba2f54bfe9498e058b293a4d2cd43ecb6fa1e8b6f75ad502f4501218f69dfc7cdb9491ba572dd52c275f534e5affb6393d3c4259e8a967f3641995d10da1b2f412f08a6f46c3221845cf15070bf1b66b98e26736f60423e2a9a727c7c5795249027aac9baddd19421d6cd928ebf97cc28f65c6bb742234c7cb81a9fa00821f4271941b362ed08bc88a41a5deed3db212ace2038dabe886c5af2e634a6e50973af99ae67ee544eccc4f3c653073a79808e316dffdcb8e745e2bc63e932dedbd977b0bdb3ad7fc24025ec057593aad8f68621130818a334dbb405af4c9d72e272f015986e9a03874980d445a7915aa109a0a7c5efa1691f15b239551040e28d0943ee86b9d7e80b71c7f2eb8009c141cb0b5568fc38ae4e4f8cbb27a8013153101fe583e07b76f985ca899f3b38019f2a01a6f6e5501100af7571a170c284c96ba51a45acc89e8367ee7e23a076588a283a55a265430a0ee686f03641e4f8f4703e8d40a173ccfde163a4aa87736793f1a731e1bbdfa2ca74fbb16c4ec8fed1d9f36e8e47906c72645d1036799b06b9f1adf4e93cf0b5744494ac1a82b0236ee3dc122d561ee879cd5254aa6ba2595ce30d1b6c0d56dbec97d890f727789a34aa558aa4a2a0858baadad5d724d29a4c3dd9a4b6ebde8aaa4c57dca0a2382c25ae7fc47dde16a9d21a16c0d168f948f54b69df6e67bb957e338974a15e65142599628958e00a97dbfc0240ece26c659e8d1b81e4ec0cad5b14e63daae4edc5b0e3026b2c4fef052b7d72436337b96804847d4085de254def7f7c73edb128fece6ee7abe44320e1ce8fe626f2da387b1d3e186f91ca3a42aed69d193be6d9b5b8b6ca30a0a1f9dbeb67981995090e27e4aa6a5c18b017201c2c2765c639f1522e60aaf04d872dbdf48deaf1e652fec46265adb8942cd226eca8a5f66d4754b635fb20b69bdda923d7f9a085fc8b42cb89287203859db66026a467c4d126c3387eed0bb7e426ea276f0e6ea52385e70f665ca1b1f55be5c4d20763f475772cf48f74571a5719d8e64633f071398e76134d4f7d9ffc589c9e152d0dfdf5774d02bba4e517465cbb0a61422650c8a999de95b3cad0883598f1dcbdb965291fc0483f153ed834926ccfee8101ebb23d8fc5bc3604157344f323e0e082228f01a99cdaf49916ae1fe2ad977053c21a7f0cca076f16ad9a85ac3ff780c93c3632bcc684602d9e2868b245b375c8889944a71b81c40b332cd94f482b7822bfc2963a62380390ee3d932610a6e6b6c7a1ff3b907d3007a1d59d982e6c6afe8c61a8d6c72f0780f2645cca558dda27c897e4a0dfde7050c21bdee8b7095eead7c7e183363cc8b5b2a5f869b4428a49124c448d5629251fed72c4c9b59c6bbfdaf4eb84b8e85acb2ff986c8572830189a6e117de6e53c69405748cf4d2bdbe00af3eab1e5f72a62abf61a40166c6781b76897d1a9e6c9c051249d37a8a139d31d774043ce89ea3e6f7229ba249cb7939089fcba0d8518baf4c4131c171b455ea18eea69b4743bfa82f48aedc63ef7a0538a89499fe843d4087d6ab460e021e5f521809331636af86e8da51d883cf9c0b61ea3975a53a0e1118b35160e599ab2726d870957fe843037831cde7bc59ebb86f77cfe3ee6b54415cc63e116902259a379c9fd0afe65dbebe5f67f66be5390f0669924f306477712bd9f9f782b2af462af709a5995a9a0f06414bad31fa1777fe0d60968e0a625cd63bc1985e069ef0f4c3d97bcb7d4156c74a081bd42865ca62cf2afe61e95125f5ccbacb5ffce2686e1c3c7b3e206f2041e006ba647cc60dd9636b63b0e692ee748ac7b67bad42c53de2ccf4f97f280a5780ec5a6b60fdff6a35e50aa2a2a9c34cb57ee8d2cffac0808b6f04981dc33120d9dfa634a0bb7973005feb704f1dbf7da902903f34bf595cbd78b0544cd5b1b64397516a30771ae9eba5f29e52e3a81a32597fa45f55eead5dfebd66f917815a4f80405905b8665b0fc4cc68d0399a37c7640bf5b48c04b87a118d83380cbf335af107886e4e574228593057914127671913676e7878fc6232260a85433e69f7b70e453eef3b38ea6568b1b1da1ddcdcab35de54c42613a151b38416c7194626189cdbf6b9631910f87cd15ecbe76eb0a0dceed284112bd4f03badeee9f8877bc262039902796be6a81a2a62332c90ee306b8740431a328be196cf204c31cd3e0b160bdf103e678976c82f975b6dff36941c4611276ead4e127173905f55a95ba93af17bd44991b19869dd686ea1d8b5adceb253e2a16ab82e2eaf5e1679cd1111ba7956b75035e2d9d8172ce041f80b89ce116507624e9eee288e913249dacab5e4a33b2d885e8e690ec70ef2a863d28c00f1f4aeefc14501ab0c10188858e2e6a3d7eb7fc9c4ad4d140011c0888485eea0ff1996cd906f5b6b6f76f72839f1c8f1a7270a83eae69ba7cb348354571d5927f3eeda1662015b0ae8a9f4dd960e9a82e238307c858b714591ff6b18761c5429f5de2c53aaa5a0c91cc7ac8a95be289748d41b832785773f7c02665b146165c9f4c648489462f04da3850c4232d229ddad8157cb184fec7824c9829917f90f9364127e11333b62f2839ce8b235493ebff06e86e1c17c7910e36cf1755b6606748aee5e4cb7bdee1397fdc78ef3b8bc58332f19f07ace1381ef85f0f4fe57e8c82616a98c8e18afced18644eaa978f7d4398262f6dc8483f8db314af58680499ec76335ee08e9fd7d96d4d233c94db22235a2b02862c1a4ed1b5b2dc7f601f586d30caac91682160d684ce7723ed81d300b3f80b1a78c154df9c25aaf427c5b3895f68cf92138d5591ec45c14be969d9970f997306161c62763c8d39f155d629688a6b445350f9d0ec8d9fc1a4bc10d6bb2641c73a5d2fee120be18c3e1bed18005c14d07f559bb71c4bf40c052cb7fbaf8e4017122f9cbb20f8d92d91ede08083261a76b7c69f3708efbe2d8bf2095db9a2d8587222bb834415f745762d6262d92748fb2b6c1a8170fcd5588f12dd81a0d8d57ca236fc80875db1a587d2424439886494c7c6c64d2a22bc7be32f96df4a74655111604d0df662cf434113d953df550e11034ff05f7892a96e4513fcb3b1a9bbcc79fa143cad60586aae9671c647628542ae080f0544b31c4fae917bc6eed9a6cd0bbf05a3d3a589edf8dc8a63ea50291df4095b4a3ef3c0c357a0850fe63b37eeb779a479c58116cbff74a979f9e2fe96885730cd2378c413c71fc013a81f86088e272139d10995280a02a620c755921bce2f13e6e5817e652b5aaa078b7004537ee80f176b6481397edabe363a9d2fa63728e04b45c045b28d7b960fa3072ee2ce6edaf956ffa0458f5135a9bb9b671202cd2f4c50bedda1a058b7d7ef1ae07a7483df12429662869ea56e7dcd055d5fc2d13bd7b8d821d5d2aa701d1c4f041518c68d499ac34b4dfb7329cd2071567984c78f7646c4edf298d5ffd85ac7c42b28cbe0fe9547aafe25a57a4562968e874757db4dbb8ad948a63a5cf4f938018cee8f412dfea3c26b342c1efe2758716faf95bcf2bb37f33385875acefb108097e53d48e9fd52a3192c5b3a7286199a187c57507ee713a45360da96cdd325e485c3a3a50282d6544473e6772e4472cc1870b088f8bea081b9168cd6a7d3c060ac948f84f3820b2c738cf10e3467f34096670b3da104b026cc22e8b45546d41136bd548a5787d3f9360864a5fe990f4b8133c83ec787f6c145029f27f0d0fd62a17032bb4258314b1bbd8e71b73303eb5fcf0f3afb5e36a267b355a11e0b0d1c708f5e8c5bcf9205b2c3b32af34436c6bbdbb8fe963858f1d74004d1e26ff8c9c99c3f4bd38b3e0a6420fa37d800a2c3ef97434c50fb6ba0391003261b1d381230bd44d863aa6d2f601ae97f967c5dcdc953b5dd6c4fba1fa69bcb0b68728da982d0fca2b2558b7b35475eda39230a2184e6d59cc17ca6c1e82d280feb1b41e613139093fede407d53e9d1a1de305867928ed2a8e9b59f2602d5efac6607eb40d7d776535b9d478d7996a0f0c0f7fddd55b5efd9c2e643ce83141200f56f9fe1f70f0b8503221a7c2640cc61ae37456a9a8ded21aecf4be6c156c8784d1e2017daa9540210d11d1ecc48a8c0ef45621830d18419a1c3d79676766796fd2837576947df27a560df6f2142728cdbbc3bb454986faad11b1545932d59c3cdfa7219952ab6b25496d99e802875ae8d7ed60bcc96cb8c9b9268e0abbdd7d126f2e01c377377558ee75ef23edf7f80f4207a97d501f81b913bcb42020a8a069be58172e690e1fe77309a081a1ac5982cd9c9062d4a5f73e977427e130a46373401e7354a4fc7d4320926a5e78ea86d7282a9c82e6beede4f88b788248d45c69a1732e55522cfffa68d780b5b2ff3edd4be795bef6d93690f92917a1300f06eebd17894c392fed9d7158a5cfade4e84860f09b85e4f60896d16c76ddc00d79a34d31cca2d3d33f0a485238f5aa8cef6bdc0eb38888a314dc0b052d634581e5094afa60fadc055779badf04a2368849bfdf068cebe7585802b5687ac9209f6c8d2b0cd7271a823c631a5154c4df7d2585cdc45f44d5d697e394a571ea02050657e8ae1787bfe520ee5cddd849d392e8e042add3fec46ad72b4c489c5a694809d8c023dea27348e53eb23417e06b6347e4ad2ac3d4e9f8e7737d02172481feba80825a292a26d9533fe2881a69e0e411e38d7c4d7cd8d9b18d09ea960b5eab5c38baa95da8572", 0x1000}], 0x2}, 0x4144) (async) accept4$tipc(r3, &(0x7f0000003340)=@id, &(0x7f0000003380)=0x10, 0x0) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003400), r9) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000003680)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003640)={&(0x7f0000003440)={0x1cc, r17, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x973c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff5}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x76a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x45e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa53b}]}]}, 0x1cc}}, 0xc840) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000036c0)=@base={0x1d, 0x81, 0x10001, 0x6, 0x41040, 0x1, 0x5, '\x00', r4, r9, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 911.54062ms ago: executing program 2 (id=1034): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0xc4, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0xfffffffffffffd41, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r0}}]}, {0x5d, 0xa, "8a27eb4451ffac1c8d1f146893574b7cc3dd11b1fc8b042b7e1f56967844b37af95aa7bca61117ee2ad53654d53978ab5ceff97dd47c7a9e218522a301c517ad10cac99bf462dce018e2f86ff552669bec9aa2229e2db92622"}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x20040040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x400, 0x5, {{0x1c, 0x4, 0x3, 0x3a, 0x70, 0x64, 0x0, 0x2, 0x952dcd917583c130, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x4, [{@multicast2, 0xfff}]}, @rr={0x7, 0xf, 0xe, [@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote]}, @end, @timestamp={0x44, 0x1c, 0xec, 0x0, 0x9, [0x7, 0x5, 0x7ff, 0x8, 0x80, 0x6]}, @end, @ssrr={0x89, 0x23, 0x65, [@rand_addr=0x64010100, @remote, @loopback, @broadcast, @multicast1, @local, @broadcast, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x0, 0x4, 0x2c, @ipv4={'\x00', '\xff\xff', @rand_addr=0x9}, @rand_addr=' \x01\x00', 0x8, 0x80, 0x9, 0x8001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x0, 0x40, 0x0, 0x1, {{0x11, 0x4, 0x2, 0x9, 0x44, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x13, 0xdf, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast]}, @rr={0x7, 0x7, 0x29, [@empty]}, @lsrr={0x83, 0x13, 0x4d, [@local, @remote, @rand_addr=0x64010102, @local]}]}}}}}) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0x58, 0xa, 0x6, 0xd, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x1, 0x9, 0x10}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000a00)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000a40)=0x14) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048845}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000028c0)=@deltfilter={0x2c, 0x2d, 0x5, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, r16, {0x7, 0xfff3}, {0xffff, 0xf}, {0xffff, 0x3}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r18, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e40a0000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000a000000080007000000000008000100", @ANYRES32=r1, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000008500050003000600000004000400080006", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="9c01028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004008100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="2801028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004005b0b000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff03000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r0, @ANYBLOB="4bfd0280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r2, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040003000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff00000008000600", @ANYRES32=r6, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400000041050500000008000100", @ANYRES32=r7, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="cc00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000010ff0100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000400050909000000e906060301800000ff5a0205040000000000020a020000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000200029f0000000008000100", @ANYRES32=r12, @ANYBLOB="e00102803c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000300030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400faffffff38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r18, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0xae4}}, 0x4844) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r20 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r20, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r20, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r19, @ANYBLOB="0100000000001535c120d320585e4b6dc87d", @ANYRES32=r21, @ANYBLOB="0500180130000000050019010c0000000800260085160000"], 0x34}}, 0x0) 884.286967ms ago: executing program 0 (id=1035): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcbf}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 634.674403ms ago: executing program 0 (id=1036): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xfffb, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0xb507, 0x0, 0x0, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x4068000) 629.347644ms ago: executing program 1 (id=1037): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'vlan0\x00', {0xf}}) 628.555147ms ago: executing program 3 (id=1038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) close(r2) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0xa}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x8, 0x20}, 0xc) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000200)=0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @private2}, 0x1c) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000280)={0x80}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000340), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x264, 0x12, 0x800, 0x6, 0x25dfdbfe, {0x23, 0x7, 0x5, 0xf, {0x4e20, 0x4e23, [0xfffffff7, 0x9f2d, 0xca, 0x9], [0x1, 0x28b, 0x8, 0x6], r5, [0x3, 0x80]}, 0xe92d, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "810fb551b1b9565a16f4"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "d20e669dba9961bc14b52bc27ea6e09bcf12e941ddf9544eeb804192cbd895238b48acc284babe0626d04062cd9540e0fcb10f5d9fafa9ae2380686ad7c411566e05b464a1f223837d9ce3b3a591cae3f9da24713030577c451585b1318e7ae7f433c94100e67655a5eba675c4d6f04d556a669f9e5efd6f98e107374d8c8954019a16952277eba9491cdfae7a441bba76c096fac1db97763057f2a024ae042d2b426a21018629aa01a8750db1110d95d65c335ae0001cedc29039785135772c2b32ce14a4be50760ae99fe5f7efea739553e57e94"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "4466ed0d38819d24161b633dc1dc90de79e82be8ce465da4b245293ff6bd1af1cd7e004d56820d421aa6fc69fd4b44b4ec3b6d015483805cd04ce180f47f6231f8d5c34293c1dbb5b56688"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "b015fce9e1e1ed4fefb3ac11eb7acc37c846e51c6d571bca76f2bdeb"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "737d81ba93eb632f68988c5aad88890b9eec52c13a7683c95604585a3c70209c05f5dab5e5d57c1447d165bfdbddcd39f55d75499a0fdf79f59863832e86798fb46206a7fea4911fee0a6859489f9393571494ba9551d7df2be2a0c25bdc6ccb10ee43f8210053406adfa64087a47a081b5413ffb54117c4eff68e637e38915fe0050d7df2339d57d21f09825afc9d920801009523dded5ac9797a618f8e2f1b52633f5cd73be8c93b3475e18673b6484ad63d49f30e"}]}, 0x264}, 0x1, 0x0, 0x0, 0x20040440}, 0x4) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) write(r3, &(0x7f0000000740)="54785d5b9b6c6e8d93f17644f9e650672b23a8cc83cd4cd3df7869dc66828b468be8584e84c4ec7c4db81c2b2f69a76efe3c031870d717428499ec0848b5c0913d86786a8f3a1b6ea2a621a9720e1af10e85a739bf89271819cbed064b8ae52268bb0ca097b5a26ca64c0ded305e7751eeb92cc5812e5b70f826748d6ae7b204220d3922e7c9960fcb4cb54b7a6b5670be7a9e539f143488d8969acbc51bb4e19f231314ab89011c3be930d440b84d7fc1978fe4b884d1fad16c01b43c33487ea5a97dd8c211733ddceaee3884c3dd213271a4d40e109ba06e86c8112bdbb37540a7864a9342919ca0", 0xe9) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000840)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r9, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xa9, 0xe}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r11, 0x0, 0xcd, &(0x7f0000000a00)={@rand_addr=0x7, @remote, 0x0, "7dba899dc8a5339a9469768388c46798cde23a56e966c3e36771bc2c486d7f4d", 0xc, 0x3, 0xffff, 0x8001}, 0x3c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a40)={r8}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000b00)={r4, 0x48, &(0x7f0000000a80)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x6}]}, &(0x7f0000000b40)=0x10) 551.897833ms ago: executing program 2 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xd}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="800000001000010400000000fddbdf2500000000", @ANYRESDEC=r3, @ANYBLOB="123a010000010000580012800b000100697036746e6c00004800028014001400ff02000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a664c800ac16d7250265dca1fd9fc1fc2186599bc9ba18a8f4b3026768ab5a07a127a08cf0b6aa6d6e956908201c0bbb51cecb5cd685fec14c8d32dd23734180279fd8093ee96cff8ed9c2d380ba38aaeccdddc53d23cbe679a1b7003ac90e516878", @ANYRES32, @ANYBLOB="080003"], 0x80}}, 0x0) unshare(0x28000600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x3, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x41, 0xca, &(0x7f00000008c0)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES32=r6, @ANYRES64=0x0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES8=r4], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a010200"], 0x14}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000975f2ddf76368107ad254ec93a0000000000000000000000000000000036e45800"/157], 0x90) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000600), 0x4) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, 0xfffffffffffffffe, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES64=r2, @ANYRES32=r2], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42180, 0x0) 551.537462ms ago: executing program 4 (id=1040): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000911823000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 419.649101ms ago: executing program 1 (id=1041): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x410) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040840) 333.56863ms ago: executing program 4 (id=1042): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) (async) syz_emit_ethernet(0x5a, &(0x7f00000006c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x24, 0x3a, 0x0, @remote, @mcast2, {[@fragment={0x89, 0x0, 0x37, 0x1, 0x0, 0x2, 0x67}], @mlv2_query={0x82, 0x0, 0x0, 0x514, 0x1, @local, 0x7, 0x1, 0xa, 0x5b}}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) (async) write(r5, &(0x7f0000000200)="c5dbe6a7ac98b4e204783dbc9a0980bd96b71bf8ae602a36d49ded37793bc2001f8e53b1b33256201b8324e3a278f1fe00f80efc96d1a39be83b1799850983aec9859974f2914d7804360de265b4bf6d11a2bed2f8e6919c4080ea83c3d071c17b49073cf0caa838414a6d85fb9465d4944baefb1ca935ee6306459d203c941f868ec72827136046379b10a2617f90378a592d05a76590b9805cf5b7945c072231ce2f76358b1127674b8c7d8a60a1458d30cb7438621a19f72255030e83b9786a8badbf5ab632dee08199b9fd257fcd71e81720c1c08a", 0xd7) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d21b1b228a159a9b5c7000007000000921c9eb29b7924b5e77c84ac96570f60ec614ff51f50208eb2b6aca47bacc5d19c28d8f460a121905acfd15210c7db5f0e689990cfa078922d180b2cdc67fda538b645e6ed68707ff8c742ba152c6de6ba8d8b6d7a1f57f635ae23353f5c0ee6ac03649f0848ca0ddb", @ANYRES32=r4, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001000000"], 0x30}}, 0x0) (async) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 247.79713ms ago: executing program 2 (id=1043): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="bdacb6b55e096c72b19e3b33362b5a925f073c30f05edf57e51be491546b52de4f8022b2f4069dc06c64147efce87e26925e3ea0d2839af5512944ea681dadbb89c28d38cfbb381d3e673119690d6ca5ad8d7b5e7e63e71902953e2c6b78843e42d53cf3ad69bf2578040e8e0b3a3f97a3e40018550d62fd35e265da3347ba", @ANYRES64=0x0], 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', r2, 0x4000, r2}, 0x18) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00530000000000000000000000000000010000000000000000f300"], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f00000002c0)=""/106, &(0x7f0000000200)=0x6a) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x40010, r7, 0x1abd3000) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711203000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd7127cfc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029c1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ed842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c9097"]}]}, 0x118}], 0x1}, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r11, &(0x7f0000000380)={0x22, 0xff, 0xa6, 0x7, 0xf3}, 0x6) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) (async) getsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, 0x0, 0x0) 247.412006ms ago: executing program 0 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000740)={r8, 0x9, 0x1ff, 0x4}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000780)={'veth1_to_bond\x00', 0x10}) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r12, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x5, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0xc, 0xb, 0x6, 0xc, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x37}, @alu={0x4, 0x1, 0x9, 0x2, 0x5, 0xc, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xe3, &(0x7f00000004c0)=""/227, 0x40f00, 0x4, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0x3, 0xff}, 0x10, 0x22565, r0, 0x8, &(0x7f00000005c0)=[r6, r11, r6, r12, r2], &(0x7f0000000600)=[{0x1, 0x1, 0x4, 0xc}, {0x4, 0x3, 0xd}, {0x2, 0x1, 0x10, 0x4}, {0x0, 0x2, 0x6, 0x8}, {0x3, 0x1, 0x8, 0x9}, {0x2, 0x2, 0xd, 0xa}, {0x5, 0x5, 0x7, 0x3}, {0x2, 0x2, 0x3, 0xc}], 0x10, 0x1ff, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r13}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) 245.416146ms ago: executing program 1 (id=1045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 89.992311ms ago: executing program 4 (id=1046): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) socket(0x1e, 0x2, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="7c533121ba56b5b10006000081001a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_int(r10, 0x29, 0xc8, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000c40)={r9, 0x7fff, 0xb, 0x5}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x5, &(0x7f0000000800)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="00000000000000000925bccc2043c9da1fd53072b0995e99294d"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xde, &(0x7f0000000080)=""/222, 0x40f00, 0x2, '\x00', r2, @fallback=0x33, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x0, 0x4}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r7, 0x1, r8, r11], &(0x7f00000003c0)=[{0x5, 0x1, 0x2, 0x9}, {0x2, 0x4, 0x7, 0x6}], 0x10, 0x5, @void, @value}, 0x94) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x8, 0x3, 0x4, 0x1, 0xffffffffffffffff, 0x8fc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r12}, 0x38) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000ff8c45fdf1559ef6bee094de80d8d3d1cdaef8fa1a4e48a140b67f915620404a2bbdf7759cb0cd53bdc35e8fde246fdfc31b19904bc4fffa290d9d6321dff79268ac823c3ffef19653525bdafdb7f8169caec22e8c0d0b5a50b4ca5a37cf7233054657150c4947623cdcfa737f08faf8e849500b6faa5319923908e5f0b03a32269d3c8f12ccc0750d7d28aa2a0c6fc71957cdc0f1afbc4d72293f3608f67fa04e31e2f9d5b3d411d3d83f64baffd70dfd", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r5, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000c00), 0x0, 0x10, &(0x7f0000000c80), &(0x7f00000010c0), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0c0000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000308000140000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1d, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0xa, 0x6, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x3, 0xac, &(0x7f0000000680)=""/172, 0x41100, 0x37, '\x00', r2, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x2, 0x24}, 0x10, r14, r13, 0x8, &(0x7f0000000f40)=[r16, r11, r11], &(0x7f0000000f80)=[{0x0, 0x5, 0x100003, 0x5}, {0x1, 0x1, 0xe, 0x5}, {0x0, 0x3, 0xf, 0x3}, {0x4, 0x1, 0xd, 0xa}, {0x2, 0x2, 0x4}, {0x0, 0x5, 0x9, 0x8}, {0x5, 0x3, 0x4, 0x9}, {0x5, 0x5, 0x7, 0xa}], 0x10, 0x7, @void, @value}, 0x94) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1f4}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 80.279484ms ago: executing program 1 (id=1047): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x7) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) (async) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) (async) close(r2) 0s ago: executing program 2 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000600"/20, @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.40' (ED25519) to the list of known hosts. [ 69.831127][ T5823] cgroup: Unknown subsys name 'net' [ 70.043656][ T5823] cgroup: Unknown subsys name 'cpuset' [ 70.051605][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.635684][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.658378][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.664857][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.093321][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.102109][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.109977][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.114930][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.118520][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.132463][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.142459][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.150482][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.158298][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.166540][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.167110][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.174078][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.183385][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.188692][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.202833][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.210527][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.221707][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.237611][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.239283][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.252611][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.260057][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.266914][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.268506][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.282301][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.290913][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.299467][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.306982][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.329910][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.345942][ T5149] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.353255][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.757794][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 74.790234][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 74.834685][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 74.897579][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 74.960646][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 75.001958][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.013327][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.021011][ T5845] bridge_slave_0: entered allmulticast mode [ 75.028416][ T5845] bridge_slave_0: entered promiscuous mode [ 75.064511][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.071814][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.079121][ T5845] bridge_slave_1: entered allmulticast mode [ 75.086265][ T5845] bridge_slave_1: entered promiscuous mode [ 75.149106][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.156928][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.164076][ T5834] bridge_slave_0: entered allmulticast mode [ 75.171265][ T5834] bridge_slave_0: entered promiscuous mode [ 75.179068][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.186543][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.193728][ T5833] bridge_slave_0: entered allmulticast mode [ 75.201193][ T5833] bridge_slave_0: entered promiscuous mode [ 75.230873][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.238167][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.245521][ T5834] bridge_slave_1: entered allmulticast mode [ 75.252151][ T5834] bridge_slave_1: entered promiscuous mode [ 75.258848][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.269489][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.278067][ T5833] bridge_slave_1: entered allmulticast mode [ 75.284735][ T5833] bridge_slave_1: entered promiscuous mode [ 75.300604][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.312458][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.370169][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.377722][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.384889][ T5850] bridge_slave_0: entered allmulticast mode [ 75.392153][ T5850] bridge_slave_0: entered promiscuous mode [ 75.410674][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.440280][ T5845] team0: Port device team_slave_0 added [ 75.448433][ T5845] team0: Port device team_slave_1 added [ 75.463131][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.470342][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.477991][ T5850] bridge_slave_1: entered allmulticast mode [ 75.484742][ T5850] bridge_slave_1: entered promiscuous mode [ 75.504375][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.516400][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.525688][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.532788][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.540217][ T5839] bridge_slave_0: entered allmulticast mode [ 75.547126][ T5839] bridge_slave_0: entered promiscuous mode [ 75.566993][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.573979][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.600573][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.630523][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.650060][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.657462][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.664693][ T5839] bridge_slave_1: entered allmulticast mode [ 75.671627][ T5839] bridge_slave_1: entered promiscuous mode [ 75.679371][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.686578][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.712634][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.726198][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.774941][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.799682][ T5834] team0: Port device team_slave_0 added [ 75.808299][ T5834] team0: Port device team_slave_1 added [ 75.818610][ T5833] team0: Port device team_slave_0 added [ 75.827114][ T5833] team0: Port device team_slave_1 added [ 75.876794][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.888689][ T5850] team0: Port device team_slave_0 added [ 75.918969][ T5845] hsr_slave_0: entered promiscuous mode [ 75.925289][ T5845] hsr_slave_1: entered promiscuous mode [ 75.944338][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.956482][ T5850] team0: Port device team_slave_1 added [ 75.962706][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.970215][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.996599][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.018407][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.025389][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.051790][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.082712][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.090014][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.116385][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.139698][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.147055][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.173861][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.204422][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.211993][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.238149][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.267044][ T5839] team0: Port device team_slave_0 added [ 76.275059][ T5839] team0: Port device team_slave_1 added [ 76.281694][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.289087][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.316063][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.316066][ T5149] Bluetooth: hci3: command tx timeout [ 76.332939][ T5838] Bluetooth: hci0: command tx timeout [ 76.376003][ T5838] Bluetooth: hci4: command tx timeout [ 76.376019][ T5149] Bluetooth: hci1: command tx timeout [ 76.414456][ T5834] hsr_slave_0: entered promiscuous mode [ 76.423695][ T5834] hsr_slave_1: entered promiscuous mode [ 76.430675][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.439188][ T5834] Cannot create hsr debugfs directory [ 76.456162][ T5850] hsr_slave_0: entered promiscuous mode [ 76.462322][ T5850] hsr_slave_1: entered promiscuous mode [ 76.468724][ T5838] Bluetooth: hci2: command tx timeout [ 76.475542][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.483121][ T5850] Cannot create hsr debugfs directory [ 76.508292][ T5833] hsr_slave_0: entered promiscuous mode [ 76.514566][ T5833] hsr_slave_1: entered promiscuous mode [ 76.521875][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.529663][ T5833] Cannot create hsr debugfs directory [ 76.536056][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.543170][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.569905][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.583014][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.590227][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.616416][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.808179][ T5839] hsr_slave_0: entered promiscuous mode [ 76.814463][ T5839] hsr_slave_1: entered promiscuous mode [ 76.820776][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.828426][ T5839] Cannot create hsr debugfs directory [ 77.017788][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.055792][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.084146][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.101146][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.134798][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.155766][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.180709][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.197936][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.231885][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.253442][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.278493][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.299343][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.347589][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.372460][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.383923][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.414537][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.468645][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.491748][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.519140][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.528718][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.588434][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.609185][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.642186][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.657561][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.682205][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.689514][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.711350][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.718499][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.737346][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.754421][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.762112][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.789629][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.805261][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.812433][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.871294][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.893491][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.931311][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.938456][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.951660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.958782][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.968295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.975397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.020962][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028161][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.082894][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.145062][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.193465][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.200733][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.238101][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.245250][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.376046][ T5838] Bluetooth: hci0: command tx timeout [ 78.376396][ T5149] Bluetooth: hci3: command tx timeout [ 78.410957][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.448272][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.455559][ T5149] Bluetooth: hci1: command tx timeout [ 78.456470][ T5838] Bluetooth: hci4: command tx timeout [ 78.537070][ T5838] Bluetooth: hci2: command tx timeout [ 78.586683][ T5834] veth0_vlan: entered promiscuous mode [ 78.645125][ T5834] veth1_vlan: entered promiscuous mode [ 78.758220][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.783708][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.794692][ T5834] veth0_macvtap: entered promiscuous mode [ 78.833539][ T5834] veth1_macvtap: entered promiscuous mode [ 78.892427][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.931711][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.944369][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.953688][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.963116][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.973332][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.002106][ T5833] veth0_vlan: entered promiscuous mode [ 79.049666][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.073325][ T5850] veth0_vlan: entered promiscuous mode [ 79.117288][ T5850] veth1_vlan: entered promiscuous mode [ 79.124329][ T5833] veth1_vlan: entered promiscuous mode [ 79.171577][ T5845] veth0_vlan: entered promiscuous mode [ 79.187060][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.208234][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.244056][ T5845] veth1_vlan: entered promiscuous mode [ 79.256955][ T5850] veth0_macvtap: entered promiscuous mode [ 79.284127][ T5833] veth0_macvtap: entered promiscuous mode [ 79.301455][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.311536][ T5833] veth1_macvtap: entered promiscuous mode [ 79.318236][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.342167][ T5850] veth1_macvtap: entered promiscuous mode [ 79.373062][ T5839] veth0_vlan: entered promiscuous mode [ 79.419562][ T5845] veth0_macvtap: entered promiscuous mode [ 79.437872][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.449272][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.462494][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.478453][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.489881][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.504547][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.517855][ T5845] veth1_macvtap: entered promiscuous mode [ 79.529540][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.531964][ T5839] veth1_vlan: entered promiscuous mode [ 79.563165][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.572060][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.583294][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.597158][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.608110][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.618964][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.628946][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.639797][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.651294][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.710264][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.728096][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.739615][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.750405][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.762004][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.790993][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.803553][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.813994][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.825550][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.838142][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.852748][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.864358][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.879217][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.889365][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.903053][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.912763][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.939355][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.958635][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.973284][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.990666][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.004383][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.016955][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.028537][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.085905][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.094677][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.125777][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.134548][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.164455][ T5839] veth0_macvtap: entered promiscuous mode [ 80.270424][ T5839] veth1_macvtap: entered promiscuous mode [ 80.319311][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.328921][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.340131][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.348389][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.352163][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.366557][ T5928] netlink: 'syz.1.7': attribute type 18 has an invalid length. [ 80.368817][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.388789][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.399356][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.409391][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.420307][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.431293][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.445348][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.451599][ T5928] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.461082][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.462391][ T5928] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.471281][ T5838] Bluetooth: hci3: command tx timeout [ 80.478140][ T5928] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.478173][ T5928] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.483705][ T5149] Bluetooth: hci0: command tx timeout [ 80.496975][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.522544][ T5928] Zero length message leads to an empty skb [ 80.524891][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.539709][ T5149] Bluetooth: hci1: command tx timeout [ 80.545321][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.556361][ T5149] Bluetooth: hci4: command tx timeout [ 80.579849][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.590079][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.600675][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.611235][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.622475][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.632594][ T5149] Bluetooth: hci2: command tx timeout [ 80.639364][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.670882][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.688357][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.697475][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.706308][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.744938][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.764365][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.797901][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.812184][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.873941][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.908461][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.923481][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.939076][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.074855][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.131016][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.240629][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.277500][ T5947] nbd: must specify at least one socket [ 81.290666][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.813997][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.900651][ T5965] TCP: TCP_TX_DELAY enabled [ 82.130199][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 82.139895][ T5972] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.291646][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 82.431840][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.475462][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'. [ 82.500460][ T5992] bridge0: port 3(team0) entered blocking state [ 82.510107][ T5992] bridge0: port 3(team0) entered disabled state [ 82.517342][ T5992] team0: entered allmulticast mode [ 82.522706][ T5992] team_slave_0: entered allmulticast mode [ 82.529704][ T5992] team_slave_1: entered allmulticast mode [ 82.535823][ T5149] Bluetooth: hci0: command tx timeout [ 82.535865][ T5149] Bluetooth: hci3: command tx timeout [ 82.550265][ T5992] team0: entered promiscuous mode [ 82.556034][ T5992] team_slave_0: entered promiscuous mode [ 82.564615][ T5992] team_slave_1: entered promiscuous mode [ 82.572340][ T5992] bridge0: port 3(team0) entered blocking state [ 82.579384][ T5992] bridge0: port 3(team0) entered forwarding state [ 82.618510][ T5838] Bluetooth: hci4: command tx timeout [ 82.624662][ T5149] Bluetooth: hci1: command tx timeout [ 82.696628][ T5149] Bluetooth: hci2: command tx timeout [ 82.739473][ T5997] team0: No ports can be present during mode change [ 82.941140][ T6005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.995736][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 83.009479][ T6008] netlink: 'syz.3.30': attribute type 2 has an invalid length. [ 83.032410][ T6008] netlink: 'syz.3.30': attribute type 6 has an invalid length. [ 83.145926][ T6012] netlink: 72 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.182121][ T6012] netlink: 512 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.399410][ T6016] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20000 [ 83.756448][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.39'. [ 83.789777][ T6030] bridge0: port 3(syz_tun) entered blocking state [ 83.810789][ T6030] bridge0: port 3(syz_tun) entered disabled state [ 83.824486][ T6030] syz_tun: entered allmulticast mode [ 83.842960][ T6030] syz_tun: entered promiscuous mode [ 83.856030][ T6030] bridge0: port 3(syz_tun) entered blocking state [ 83.862613][ T6030] bridge0: port 3(syz_tun) entered forwarding state [ 84.410709][ T6059] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET) [ 84.776058][ T6074] : renamed from bond0 (while UP) [ 84.820208][ T6076] netlink: 64 bytes leftover after parsing attributes in process `syz.0.57'. [ 85.047306][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.60'. [ 85.307032][ T6092] netlink: 'syz.4.62': attribute type 21 has an invalid length. [ 85.354175][ T6092] netlink: 156 bytes leftover after parsing attributes in process `syz.4.62'. [ 85.396424][ T6101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.422469][ T6092] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.467879][ T6101] 8021q: VLANs not supported on ip6tnl0 [ 85.544600][ C0] Illegal XDP return value 16128 on prog (id 6) dev lo, expect packet loss! [ 85.600851][ T6104] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.742960][ T6113] 8021q: VLANs not supported on ip_vti0 [ 86.318972][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.331827][ T6144] batadv_slave_1: entered promiscuous mode [ 86.341986][ T6144] batadv_slave_1: entered allmulticast mode [ 86.416089][ T6151] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 86.434292][ T6151] block nbd1: Unsupported socket: shutdown callout must be supported. [ 86.681472][ T6160] tipc: Started in network mode [ 86.702849][ T6160] tipc: Node identity 6, cluster identity 4711 [ 86.733851][ T6160] tipc: Node number set to 6 [ 86.810217][ T6160] netlink: 'syz.2.80': attribute type 29 has an invalid length. [ 86.848830][ T6160] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 87.027110][ T975] cfg80211: failed to load regulatory.db [ 87.323600][ T6186] __nla_validate_parse: 11 callbacks suppressed [ 87.323622][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 87.466273][ T6190] netlink: 'syz.1.90': attribute type 11 has an invalid length. [ 87.475673][ T6192] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 87.497871][ T6192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.505456][ T6192] IPv6: NLM_F_CREATE should be set when creating new route [ 87.569265][ T6196] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 87.615577][ T6196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.696839][ T6196] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 89.393160][ T5918] IPVS: starting estimator thread 0... [ 89.485901][ T6245] IPVS: using max 18 ests per chain, 43200 per kthread [ 89.500165][ T6248] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 89.644897][ T6250] netlink: 'syz.3.106': attribute type 20 has an invalid length. [ 89.923767][ T6255] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.108'. [ 90.245761][ T6264] xt_CT: No such helper "pptp" [ 90.366747][ T6244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.613626][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 90.618589][ T6291] dccp_v6_rcv: dropped packet with invalid checksum [ 90.672220][ T6295] netlink: 'syz.2.116': attribute type 39 has an invalid length. [ 90.905346][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 91.204380][ T6331] tipc: Started in network mode [ 91.242225][ T6331] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 91.255686][ T6331] tipc: Enabling of bearer rejected, failed to enable media [ 91.278484][ T6318] netlink: 32 bytes leftover after parsing attributes in process `syz.3.121'. [ 91.498468][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.580480][ T6346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.125'. [ 91.688939][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 91.698169][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 91.882812][ T6363] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 92.008497][ T6363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.239066][ T6372] netlink: 'syz.0.133': attribute type 5 has an invalid length. [ 92.877870][ T6415] xt_bpf: check failed: parse error [ 92.886471][ T6416] xt_bpf: check failed: parse error [ 92.970749][ T6418] netlink: 72 bytes leftover after parsing attributes in process `syz.1.146'. [ 93.314708][ T6432] netlink: 'syz.1.152': attribute type 7 has an invalid length. [ 93.505835][ T6437] netlink: 'syz.0.153': attribute type 6 has an invalid length. [ 93.696505][ T6446] af_packet: tpacket_rcv: packet too big, clamped from 2932 to 2928. macoff=96 [ 93.757444][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 93.796671][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 93.807767][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 93.828283][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 93.863613][ T6457] Bluetooth: MGMT ver 1.23 [ 94.041721][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 94.050811][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 94.113300][ T6460] can: request_module (can-proto-0) failed. [ 94.403203][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 94.486749][ T6489] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 94.495319][ T6489] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 94.661326][ T6498] netlink: 240 bytes leftover after parsing attributes in process `syz.0.173'. [ 94.683746][ T6493] netlink: 'syz.2.172': attribute type 29 has an invalid length. [ 94.694122][ T6493] netlink: 'syz.2.172': attribute type 29 has an invalid length. [ 94.975793][ T6512] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 95.002793][ T6512] netlink: 100 bytes leftover after parsing attributes in process `syz.2.178'. [ 95.607502][ T6536] xt_l2tp: v2 doesn't support IP mode [ 95.715028][ T6542] gtp0: entered promiscuous mode [ 95.954570][ T6549] netlink: 'syz.2.193': attribute type 29 has an invalid length. [ 95.966481][ T6549] netlink: 'syz.2.193': attribute type 29 has an invalid length. [ 96.151983][ T6561] team0: entered promiscuous mode [ 96.176129][ T6561] team_slave_0: entered promiscuous mode [ 96.199535][ T6561] team_slave_1: entered promiscuous mode [ 96.220275][ T6561] batadv_slave_1: entered promiscuous mode [ 96.300507][ T6561] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 96.388719][ T6563] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 96.524532][ T6576] lo: entered allmulticast mode [ 96.536645][ T6576] lo: left allmulticast mode [ 97.065246][ T6602] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 97.540564][ T6620] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 97.815562][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.096229][ T6638] __nla_validate_parse: 9 callbacks suppressed [ 98.096249][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 98.383445][ T6655] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 99.302109][ T6690] syz.2.230: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 99.321946][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.2.230 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 99.321975][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.322000][ T6690] Call Trace: [ 99.322009][ T6690] [ 99.322019][ T6690] dump_stack_lvl+0x241/0x360 [ 99.322061][ T6690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.322084][ T6690] ? __pfx__printk+0x10/0x10 [ 99.322103][ T6690] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 99.322124][ T6690] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 99.322146][ T6690] warn_alloc+0x278/0x410 [ 99.322163][ T6690] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 99.322179][ T6690] ? __pfx_warn_alloc+0x10/0x10 [ 99.322196][ T6690] ? kasan_save_track+0x3f/0x80 [ 99.322211][ T6690] ? __kasan_kmalloc+0x98/0xb0 [ 99.322229][ T6690] ? xsk_setsockopt+0x4aa/0x810 [ 99.322244][ T6690] ? do_sock_setsockopt+0x3af/0x720 [ 99.322258][ T6690] ? __x64_sys_setsockopt+0x1ee/0x280 [ 99.322272][ T6690] ? do_syscall_64+0xf3/0x230 [ 99.322293][ T6690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.322321][ T6690] __vmalloc_node_range_noprof+0x126/0x1380 [ 99.322357][ T6690] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.322376][ T6690] ? __kasan_kmalloc+0x98/0xb0 [ 99.322398][ T6690] vmalloc_user_noprof+0x74/0x80 [ 99.322413][ T6690] ? xskq_create+0xb6/0x170 [ 99.322442][ T6690] xskq_create+0xb6/0x170 [ 99.322460][ T6690] xsk_init_queue+0xa1/0x100 [ 99.322479][ T6690] xsk_setsockopt+0x4aa/0x810 [ 99.322497][ T6690] ? __pfx_xsk_setsockopt+0x10/0x10 [ 99.322512][ T6690] ? __pfx_aa_sk_perm+0x10/0x10 [ 99.322536][ T6690] ? aa_sock_opt_perm+0x79/0x120 [ 99.322562][ T6690] ? __pfx_xsk_setsockopt+0x10/0x10 [ 99.322577][ T6690] do_sock_setsockopt+0x3af/0x720 [ 99.322595][ T6690] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.322614][ T6690] ? __fget_files+0x395/0x410 [ 99.322653][ T6690] ? __fget_files+0x2a/0x410 [ 99.322681][ T6690] __x64_sys_setsockopt+0x1ee/0x280 [ 99.322701][ T6690] do_syscall_64+0xf3/0x230 [ 99.322737][ T6690] ? clear_bhb_loop+0x35/0x90 [ 99.322761][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.322787][ T6690] RIP: 0033:0x7fa6e998d169 [ 99.322803][ T6690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.322815][ T6690] RSP: 002b:00007fa6ea863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.322830][ T6690] RAX: ffffffffffffffda RBX: 00007fa6e9ba6080 RCX: 00007fa6e998d169 [ 99.322841][ T6690] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 99.322849][ T6690] RBP: 00007fa6e9a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 99.322858][ T6690] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.322867][ T6690] R13: 0000000000000001 R14: 00007fa6e9ba6080 R15: 00007fffa589bc98 [ 99.322888][ T6690] [ 99.322906][ T6690] Mem-Info: [ 99.614294][ T6690] active_anon:7595 inactive_anon:0 isolated_anon:0 [ 99.614294][ T6690] active_file:1095 inactive_file:38303 isolated_file:0 [ 99.614294][ T6690] unevictable:768 dirty:86 writeback:0 [ 99.614294][ T6690] slab_reclaimable:10000 slab_unreclaimable:100919 [ 99.614294][ T6690] mapped:31386 shmem:4303 pagetables:895 [ 99.614294][ T6690] sec_pagetables:0 bounce:0 [ 99.614294][ T6690] kernel_misc_reclaimable:0 [ 99.614294][ T6690] free:1339080 free_pcp:409 free_cma:0 [ 99.659749][ T6690] Node 0 active_anon:30380kB inactive_anon:0kB active_file:4380kB inactive_file:153136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125544kB dirty:336kB writeback:0kB shmem:15676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11176kB pagetables:3580kB sec_pagetables:0kB all_unreclaimable? no [ 99.703089][ T6690] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.739463][ T6690] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.768138][ T6690] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 99.774106][ T6690] Node 0 DMA32 free:1439628kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:30340kB inactive_anon:0kB active_file:4380kB inactive_file:152816kB unevictable:1536kB writepending:328kB present:3129332kB managed:2549828kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:860kB free_cma:0kB [ 99.804475][ T6690] lowmem_reserve[]: 0 0 0 0 0 [ 99.809338][ T6690] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:8kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 99.837799][ T6690] lowmem_reserve[]: 0 0 0 0 0 [ 99.842610][ T6690] Node 1 Normal free:3902564kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.872721][ T6690] lowmem_reserve[]: 0 0 0 0 0 [ 99.877566][ T6690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.898764][ T6690] Node 0 DMA32: 2*4kB (UM) 76*8kB (UME) 357*16kB (UM) 72*32kB (UE) 30*64kB (UME) 5*128kB (UM) 0*256kB 2*512kB (ME) 2*1024kB (M) 6*2048kB (UM) 345*4096kB (M) = 1439672kB [ 99.916092][ T6690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 99.928045][ T6690] Node 1 Normal: 237*4kB (UM) 63*8kB (UME) 44*16kB (UME) 202*32kB (UME) 93*64kB (UME) 39*128kB (UME) 12*256kB (UME) 8*512kB (UME) 7*1024kB (UM) 5*2048kB (UE) 942*4096kB (M) = 3902572kB [ 99.952222][ T6690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.962033][ T6690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.974049][ T6690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.988901][ T6690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.000717][ T6690] 43701 total pagecache pages [ 100.009022][ T6690] 0 pages in swap cache [ 100.013289][ T6690] Free swap = 124996kB [ 100.019612][ T6690] Total swap = 124996kB [ 100.023822][ T6690] 2097051 pages RAM [ 100.033635][ T6690] 0 pages HighMem/MovableOnly [ 100.038447][ T6690] 427872 pages reserved [ 100.042641][ T6690] 0 pages cma reserved [ 100.973206][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 101.324501][ T6702] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 4, id = 0 [ 101.713295][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 102.286772][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 102.699717][ T6786] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 102.753976][ T6792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.252'. [ 102.775822][ T6792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.252'. [ 102.785218][ T6792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.915654][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 103.008044][ T6804] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 103.050705][ T6807] netlink: 'syz.4.255': attribute type 2 has an invalid length. [ 103.060750][ T6807] netlink: 'syz.4.255': attribute type 6 has an invalid length. [ 103.332289][ T6814] netlink: 96 bytes leftover after parsing attributes in process `syz.0.258'. [ 103.381432][ T6817] dvmrp0: entered allmulticast mode [ 103.402989][ T6817] netlink: 300 bytes leftover after parsing attributes in process `syz.2.259'. [ 103.499494][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 103.539149][ T6822] netlink: 108 bytes leftover after parsing attributes in process `syz.0.262'. [ 103.616840][ T6827] No such timeout policy "syz0" [ 103.703714][ T6829] netdevsim0: mtu less than device minimum [ 103.778573][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 103.996917][ T6850] team0: Device xfrm0 is of different type [ 104.013959][ T6847] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.065830][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.074794][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.682040][ T6891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.272'. [ 121.713912][ T6889] netlink: zone id is out of range [ 121.731303][ T6889] netlink: zone id is out of range [ 121.747896][ T6889] netlink: zone id is out of range [ 121.767781][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 121.775764][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 121.778218][ T6889] netlink: zone id is out of range [ 121.805231][ T6889] netlink: zone id is out of range [ 121.856221][ T6889] netlink: zone id is out of range [ 121.919989][ T6889] netlink: zone id is out of range [ 121.938052][ T6889] netlink: zone id is out of range [ 122.146816][ T6909] trusted_key: syz.4.280 sent an empty control message without MSG_MORE. [ 122.165922][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.281'. [ 122.429365][ T6925] tipc: Can't bind to reserved service type 0 [ 122.444084][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 122.946914][ T6947] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 122.967036][ T6947] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 122.997252][ T6947] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 123.027020][ T6947] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 123.056669][ T6947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.293'. [ 123.071036][ T6955] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 123.254321][ T6959] syz.4.297 (6959) used greatest stack depth: 18160 bytes left [ 123.271499][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.298'. [ 123.529653][ T6978] Cannot find add_set index 0 as target [ 123.630807][ T6984] netlink: 260 bytes leftover after parsing attributes in process `syz.1.305'. [ 123.724366][ T6988] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 123.763448][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 124.074249][ T6995] bond1: entered promiscuous mode [ 124.090324][ T7002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 124.105870][ T6995] bond1: entered allmulticast mode [ 124.135336][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.169393][ T7004] netlink: 44 bytes leftover after parsing attributes in process `syz.0.309'. [ 124.576813][ T7019] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 124.803811][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.812385][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.074703][ T7028] bridge_slave_0: left allmulticast mode [ 125.084753][ T7028] bridge_slave_0: left promiscuous mode [ 125.101454][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.141502][ T7028] bridge_slave_1: left allmulticast mode [ 125.166826][ T7028] bridge_slave_1: left promiscuous mode [ 125.181807][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.212540][ T7028] bond0: (slave bond_slave_0): Releasing backup interface [ 125.231777][ T7028] bond0: (slave bond_slave_1): Releasing backup interface [ 125.253112][ T7028] team0: Port device team_slave_0 removed [ 125.269257][ T7028] team0: Port device team_slave_1 removed [ 125.287964][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.301891][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.314540][ T7028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.326960][ T7028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.398767][ T7028] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.414734][ T7028] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.424909][ T7028] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.438379][ T7028] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.617009][ T7057] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 125.630289][ T7057] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.984421][ T5149] Bluetooth: hci4: link tx timeout [ 125.990825][ T5149] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.264526][ T7099] bridge_slave_0: entered allmulticast mode [ 126.562940][ T7115] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 126.803642][ T7128] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.837636][ T7131] __nla_validate_parse: 39 callbacks suppressed [ 126.837657][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.349'. [ 126.889769][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 127.258633][ T7152] tipc: Started in network mode [ 127.263575][ T7152] tipc: Node identity ac14140f, cluster identity 4711 [ 127.304604][ T7152] tipc: New replicast peer: 255.255.255.255 [ 127.324831][ T7152] tipc: Enabled bearer , priority 10 [ 127.372799][ T7159] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 127.382715][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 127.396744][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 127.751416][ T7182] openvswitch: netlink: Tunnel attr 7 has unexpected len 4 expected 0 [ 127.956386][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.995199][ T7196] netlink: 'syz.1.370': attribute type 3 has an invalid length. [ 128.056686][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 128.109407][ T7205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.372'. [ 128.132034][ T7205] netlink: 72 bytes leftover after parsing attributes in process `syz.4.372'. [ 128.256958][ T7211] Cannot find add_set index 0 as target [ 128.401593][ T7218] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.408582][ T7218] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.425963][ T7218] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.432505][ T7218] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.439563][ T5918] tipc: Node number set to 2886997007 [ 128.479836][ T7225] dvmrp1: entered allmulticast mode [ 128.805062][ T7246] ax25_connect(): syz.0.380 uses autobind, please contact jreuter@yaina.de [ 128.956300][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 129.182344][ T7259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.215991][ T7259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.441082][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 129.459130][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 129.472218][ T7268] netlink: 'syz.3.393': attribute type 11 has an invalid length. [ 129.530448][ T7268] netlink: 176 bytes leftover after parsing attributes in process `syz.3.393'. [ 129.965526][ T977] IPVS: starting estimator thread 0... [ 130.055611][ T7293] IPVS: using max 20 ests per chain, 48000 per kthread [ 130.075599][ T7297] netlink: 'syz.1.403': attribute type 3 has an invalid length. [ 130.085046][ T7298] netlink: 'syz.1.403': attribute type 3 has an invalid length. [ 131.075227][ T7345] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 131.097619][ T7347] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.067031][ T7407] __nla_validate_parse: 10 callbacks suppressed [ 132.067052][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'. [ 132.129112][ T7407] netlink: 92 bytes leftover after parsing attributes in process `syz.0.433'. [ 132.136724][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 132.169669][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 132.321645][ T7413] dvmrp1: entered allmulticast mode [ 132.586581][ T7430] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 132.808077][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 132.911323][ T7450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.918661][ T7450] IPv6: NLM_F_CREATE should be set when creating new route [ 133.096166][ T5149] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.102781][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.111092][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121308][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.215966][ T7463] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 133.235515][ T7463] netlink: 152 bytes leftover after parsing attributes in process `syz.0.452'. [ 133.368094][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 133.395122][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 133.613475][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 134.274811][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.469'. [ 134.905789][ T7555] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 135.113231][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.208757][ T7564] netlink: 'syz.3.484': attribute type 12 has an invalid length. [ 135.291925][ T7570] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 135.868835][ T7595] bond1: entered promiscuous mode [ 135.884868][ T7595] bond1: entered allmulticast mode [ 135.893931][ T7595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.181813][ T7619] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.213316][ T7619] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.342835][ T7595] bond1 (unregistering): Released all slaves [ 137.284297][ T7682] __nla_validate_parse: 9 callbacks suppressed [ 137.284317][ T7682] netlink: 80 bytes leftover after parsing attributes in process `syz.3.510'. [ 137.330827][ T7682] nbd: illegal input index 61504 [ 137.350603][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 137.482166][ T7694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.568445][ T7688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.594075][ T7700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.070348][ T7723] netlink: 64 bytes leftover after parsing attributes in process `syz.1.521'. [ 138.113791][ T7712] can: request_module (can-proto-5) failed. [ 138.158233][ T7723] ipvlan0: entered promiscuous mode [ 138.175114][ T7723] ipvlan0: entered allmulticast mode [ 138.181622][ T7723] veth0_vlan: entered allmulticast mode [ 138.494010][ T7748] netlink: 176 bytes leftover after parsing attributes in process `syz.3.527'. [ 138.655131][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 138.781263][ T5887] IPVS: starting estimator thread 0... [ 138.885504][ T7768] IPVS: using max 20 ests per chain, 48000 per kthread [ 138.980620][ T7775] netlink: 'syz.4.531': attribute type 18 has an invalid length. [ 139.254084][ T7790] sctp: [Deprecated]: syz.4.536 (pid 7790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.254084][ T7790] Use struct sctp_sack_info instead [ 139.545947][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 139.571455][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 139.597900][ T7807] netlink: 'syz.0.539': attribute type 15 has an invalid length. [ 140.230780][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 140.371190][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.552'. [ 140.640339][ T7866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.558'. [ 140.672686][ T7868] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 141.984009][ T7944] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 142.000080][ T7944] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 142.306557][ T7960] __nla_validate_parse: 11 callbacks suppressed [ 142.306576][ T7960] netlink: 204 bytes leftover after parsing attributes in process `syz.2.592'. [ 142.357719][ T7960] batman_adv: batadv0: Adding interface: ip6gretap1 [ 142.364691][ T7960] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 142.395994][ T7960] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 142.542186][ T7969] nbd: couldn't find device at index 1255035857 [ 142.576444][ T7971] IPv6: Can't replace route, no match found [ 142.607070][ T7972] xt_l2tp: v2 tid > 0xffff: 150994944 [ 142.620717][ T7971] Bluetooth: MGMT ver 1.23 [ 142.714045][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 142.963216][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'. [ 143.053682][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 143.070403][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 143.104453][ T7996] netlink: 'syz.1.605': attribute type 11 has an invalid length. [ 143.272649][ T8001] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 143.280974][ T8001] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 143.294167][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.326958][ T8001] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.345325][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 143.367534][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 143.425730][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.438721][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.470611][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.480773][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 143.496436][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.526027][ T8019] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 143.554948][ T8010] bond0: (slave batadv0): Releasing backup interface [ 143.802985][ T8037] sctp: [Deprecated]: syz.1.616 (pid 8037) Use of int in maxseg socket option. [ 143.802985][ T8037] Use struct sctp_assoc_value instead [ 144.306360][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 144.314831][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 144.324369][ T8059] batadv_slave_1: default FDB implementation only supports local addresses [ 144.351643][ T8060] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 144.538924][ T8074] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 144.627609][ T8078] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 145.055486][ T8101] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.169752][ T8111] SET target dimension over the limit! [ 145.224904][ T8111] bridge0: entered promiscuous mode [ 145.256035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.266659][ T8111] gretap0: entered promiscuous mode [ 145.274093][ T8111] hsr2: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 145.555013][ T8119] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 146.514574][ T8168] netlink: 'syz.4.656': attribute type 11 has an invalid length. [ 146.648835][ T8171] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 146.672547][ T8167] set match dimension is over the limit! [ 147.144189][ T8194] sctp: [Deprecated]: syz.4.666 (pid 8194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.144189][ T8194] Use struct sctp_sack_info instead [ 147.492420][ T8208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.576882][ T8217] __nla_validate_parse: 7 callbacks suppressed [ 147.576902][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 147.686702][ T8225] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 147.690107][ T8227] xt_hashlimit: size too large, truncated to 1048576 [ 147.725750][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'. [ 147.737907][ T8225] netlink: 'syz.3.674': attribute type 4 has an invalid length. [ 147.772108][ T8230] sit1: entered promiscuous mode [ 147.783213][ T8230] sit1: entered allmulticast mode [ 147.854818][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 148.040812][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'. [ 148.053957][ T8247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.678'. [ 148.092557][ T8246] netlink: 'syz.1.679': attribute type 16 has an invalid length. [ 148.105573][ T8246] netlink: 'syz.1.679': attribute type 17 has an invalid length. [ 148.195006][ T8251] tipc: Enabling of bearer rejected, failed to enable media [ 148.289907][ T8216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.416188][ T8261] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 148.440332][ T8261] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 148.568415][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 148.965335][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.693'. [ 149.022288][ T8288] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 149.241050][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 149.273726][ T8297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.697'. [ 149.288043][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 149.905927][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 150.016560][ T8320] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.064845][ T8332] nbd: couldn't find device at index 1255035857 [ 150.128011][ T8337] validate_nla: 2 callbacks suppressed [ 150.128031][ T8337] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 150.165923][ T8337] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 150.365110][ T8341] bridge0: port 4(batadv1) entered blocking state [ 150.422608][ T8341] bridge0: port 4(batadv1) entered disabled state [ 150.430356][ T8341] batadv1: entered allmulticast mode [ 150.437326][ T8341] batadv1: entered promiscuous mode [ 150.449419][ T8348] xt_cluster: node mask cannot exceed total number of nodes [ 150.690643][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.698255][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.848662][ T746] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 150.858605][ T746] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 151.322021][ T8387] netlink: 'syz.4.723': attribute type 8 has an invalid length. [ 151.592667][ T8396] netlink: 'syz.0.724': attribute type 30 has an invalid length. [ 151.786380][ T8396] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.795212][ T8396] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.804085][ T8396] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.813150][ T8396] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.863485][ T8411] ipt_ECN: cannot use operation on non-tcp rule [ 151.950331][ T8414] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 152.056043][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 152.136377][ T62] wlan0: Trigger new scan to find an IBSS to join [ 152.376692][ T8432] sctp: [Deprecated]: syz.1.735 (pid 8432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.376692][ T8432] Use struct sctp_sack_info instead [ 152.511345][ T8440] netlink: 'syz.2.737': attribute type 13 has an invalid length. [ 152.715149][ T8449] __nla_validate_parse: 8 callbacks suppressed [ 152.715170][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 152.775532][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 152.943734][ T8458] ip6tnl2: entered allmulticast mode [ 153.004337][ T8461] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20002 [ 153.053981][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 153.325769][ T8472] Bluetooth: MGMT ver 1.23 [ 153.457747][ T8479] netlink: 'syz.1.746': attribute type 12 has an invalid length. [ 153.521261][ T8479] netlink: 'syz.1.746': attribute type 29 has an invalid length. [ 153.535578][ T8479] netlink: 'syz.1.746': attribute type 2 has an invalid length. [ 153.543301][ T8479] netlink: 'syz.1.746': attribute type 2 has an invalid length. [ 153.591853][ T8479] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 153.617949][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.796328][ T8484] netlink: 152 bytes leftover after parsing attributes in process `syz.4.749'. [ 153.853449][ T8486] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.876483][ T8484] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 154.104370][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 154.113984][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'. [ 154.136841][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 154.327490][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 154.336544][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 154.367631][ T8512] No such timeout policy "syz0" [ 154.525212][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 154.576729][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 155.179670][ T62] wlan0: Trigger new scan to find an IBSS to join [ 155.250709][ T8517] geneve0: entered promiscuous mode [ 155.259275][ T8517] team0: Port device geneve0 added [ 155.373655][ T8537] bond2: entered promiscuous mode [ 155.394133][ T8537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.655020][ T8559] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 155.665579][ T8556] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 155.682665][ T8565] validate_nla: 4 callbacks suppressed [ 155.682684][ T8565] netlink: 'syz.4.773': attribute type 13 has an invalid length. [ 156.253209][ T8601] Unknown options in mask 1f4 [ 156.283072][ T8605] netlink: 'syz.0.780': attribute type 29 has an invalid length. [ 156.888999][ T8634] C: renamed from team_slave_0 [ 157.232063][ T8634] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 157.244455][ T8634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.276081][ T8645] IPv6: sit1: Disabled Multicast RS [ 157.289443][ T8645] sit1: entered allmulticast mode [ 157.814038][ T8666] IPv6: sit1: Disabled Multicast RS [ 157.974465][ T8676] __nla_validate_parse: 8 callbacks suppressed [ 157.974486][ T8676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.799'. [ 158.143720][ T1094] wlan0: Trigger new scan to find an IBSS to join [ 158.682787][ T8705] netlink: 5692 bytes leftover after parsing attributes in process `syz.1.808'. [ 158.909139][ T8726] netem: change failed [ 158.962460][ T8726] bridge0: port 3(batadv1) entered blocking state [ 158.988198][ T8726] bridge0: port 3(batadv1) entered disabled state [ 158.994861][ T8726] batadv1: entered allmulticast mode [ 159.054223][ T8726] batadv1: entered promiscuous mode [ 159.107271][ T1164] wlan0: Creating new IBSS network, BSSID 3a:28:42:d2:c7:a6 [ 159.277384][ T8743] veth0_to_hsr: entered promiscuous mode [ 159.387413][ T8743] veth0_to_hsr: left promiscuous mode [ 159.454081][ T1094] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 159.463489][ T1094] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 159.520293][ T8758] bond3: entered promiscuous mode [ 159.551198][ T8758] bond3: entered allmulticast mode [ 159.575972][ T8758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.721016][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 159.787721][ T8758] bond3 (unregistering): Released all slaves [ 160.496673][ T8805] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.783809][ T8817] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 161.048951][ T8829] tipc: Started in network mode [ 161.053898][ T8829] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 161.094109][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 161.211907][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'. [ 161.240615][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.855'. [ 161.308922][ T8845] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 161.337162][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.461868][ T8857] netlink: 64 bytes leftover after parsing attributes in process `syz.2.860'. [ 161.627238][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 161.646168][ T8871] openvswitch: netlink: Flow key attr not present in new flow. [ 161.698675][ T8847] team0 (unregistering): Port device team_slave_0 removed [ 161.739550][ T8847] team0 (unregistering): Port device team_slave_1 removed [ 161.812083][ T8878] netlink: 256 bytes leftover after parsing attributes in process `syz.3.865'. [ 161.844266][ T8878] netlink: 'syz.3.865': attribute type 9 has an invalid length. [ 162.011236][ T8883] syz_tun: left allmulticast mode [ 162.034236][ T8883] syz_tun: left promiscuous mode [ 162.044519][ T8883] bridge0: port 3(syz_tun) entered disabled state [ 162.125004][ T8883] bridge_slave_0: left allmulticast mode [ 162.144113][ T8883] bridge_slave_0: left promiscuous mode [ 162.162656][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.178583][ T8883] bridge_slave_1: left allmulticast mode [ 162.184484][ T8883] bridge_slave_1: left promiscuous mode [ 162.190778][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.204490][ T8883] bond0: (slave bond_slave_0): Releasing backup interface [ 162.229147][ T8883] bond0: (slave bond_slave_1): Releasing backup interface [ 162.254294][ T8883] team0: Failed to send options change via netlink (err -105) [ 162.262529][ T8883] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 162.273923][ T8883] team0: Port device team_slave_0 removed [ 162.286161][ T8883] team0: Failed to send options change via netlink (err -105) [ 162.294127][ T8883] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 162.304425][ T8883] team0: Port device team_slave_1 removed [ 162.332277][ T8891] team0: Failed to send options change via netlink (err -105) [ 162.344805][ T8891] team0: Mode changed to "loadbalance" [ 163.010194][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 163.043236][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 163.099843][ T8940] netlink: 'syz.4.884': attribute type 29 has an invalid length. [ 163.159443][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 163.271480][ T8948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 163.401163][ T8951] xt_l2tp: v2 doesn't support IP mode [ 163.444092][ T8951] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 163.501405][ T8951] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 163.728855][ T8960] : entered promiscuous mode [ 163.983631][ T8972] netlink: 'syz.3.891': attribute type 2 has an invalid length. [ 164.012547][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 164.052784][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.891'. [ 164.496011][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 164.809883][ T9010] netlink: 156 bytes leftover after parsing attributes in process `syz.4.904'. [ 164.877361][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 165.096188][ T9023] xt_hashlimit: max too large, truncated to 1048576 [ 165.713423][ T9059] netlink: 3 bytes leftover after parsing attributes in process `syz.0.916'. [ 166.055004][ T9069] xt_CT: No such helper "pptp" [ 166.272090][ T9090] tun0: tun_chr_ioctl cmd 1074025675 [ 166.276176][ T9091] netlink: 104 bytes leftover after parsing attributes in process `syz.2.925'. [ 166.297172][ T9090] tun0: persist disabled [ 166.811991][ T9111] netlink: 'syz.4.932': attribute type 32 has an invalid length. [ 167.887864][ T9165] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 168.147790][ T9174] netlink: 'syz.0.950': attribute type 12 has an invalid length. [ 168.431829][ T9191] __nla_validate_parse: 7 callbacks suppressed [ 168.431850][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 168.641102][ T9205] netlink: 'syz.0.958': attribute type 32 has an invalid length. [ 168.710990][ T9207] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 168.743118][ T9207] netlink: 224 bytes leftover after parsing attributes in process `syz.3.959'. [ 168.787215][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 168.814190][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'. [ 169.469948][ T9234] "syz.0.965" (9234) uses obsolete ecb(arc4) skcipher [ 169.758944][ T9265] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 169.849831][ T9273] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 169.885706][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 170.087589][ T9285] raw_sendmsg: syz.4.977 forgot to set AF_INET. Fix it! [ 170.178666][ T9292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.980'. [ 170.293817][ T9297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.980'. [ 170.377440][ T9305] netlink: 'syz.1.984': attribute type 12 has an invalid length. [ 170.394916][ T9305] netlink: 'syz.1.984': attribute type 29 has an invalid length. [ 170.403393][ T9305] netlink: 148 bytes leftover after parsing attributes in process `syz.1.984'. [ 170.413982][ T9305] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 170.421918][ T9305] netlink: 'syz.1.984': attribute type 2 has an invalid length. [ 170.444175][ T9305] netlink: 39 bytes leftover after parsing attributes in process `syz.1.984'. [ 170.493952][ T9303] macsec1: entered promiscuous mode [ 170.545621][ T9303] batadv0: entered promiscuous mode [ 170.561464][ T9303] macsec1: entered allmulticast mode [ 170.567242][ T9303] batadv0: entered allmulticast mode [ 170.786311][ T9322] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 170.844596][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 170.858326][ T9322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.202568][ T9343] nftables ruleset with unbound chain [ 173.033750][ T9446] .: renamed from bond0 [ 173.451139][ T9469] __nla_validate_parse: 8 callbacks suppressed [ 173.451160][ T9469] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1023'. [ 173.541430][ T9466] 8021q: VLANs not supported on ip6tnl0 [ 173.947507][ T9494] validate_nla: 3 callbacks suppressed [ 173.947528][ T9494] netlink: 'syz.4.1031': attribute type 2 has an invalid length. [ 174.115052][ T9500] xt_l2tp: unknown flags: 18 [ 174.358913][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 174.567286][ T9518] netlink: 'syz.0.1036': attribute type 10 has an invalid length. [ 174.597185][ T9518] bridge0: port 3(team0) entered blocking state [ 174.615632][ T9518] bridge0: port 3(team0) entered disabled state [ 174.622189][ T9518] team0: entered allmulticast mode [ 174.626392][ T9520] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1039'. [ 174.627915][ T9518] team_slave_0: entered allmulticast mode [ 174.648302][ T9518] team_slave_1: entered allmulticast mode [ 174.666232][ T9518] geneve0: entered allmulticast mode [ 174.682233][ T9518] team0: left allmulticast mode [ 174.687530][ T9518] team_slave_0: left allmulticast mode [ 174.700828][ T9518] team_slave_1: left allmulticast mode [ 174.710971][ T9518] geneve0: left allmulticast mode [ 175.167954][ T5850] ================================================================== [ 175.176084][ T5850] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 175.183498][ T5850] Write of size 8 at addr ffff88805c7be5a0 by task syz-executor/5850 [ 175.191588][ T5850] [ 175.193945][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 175.193969][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.193981][ T5850] Call Trace: [ 175.193988][ T5850] [ 175.193997][ T5850] dump_stack_lvl+0x241/0x360 [ 175.194026][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.194047][ T5850] ? __pfx__printk+0x10/0x10 [ 175.194066][ T5850] ? _printk+0xd5/0x120 [ 175.194085][ T5850] ? __virt_addr_valid+0x183/0x530 [ 175.194105][ T5850] ? __virt_addr_valid+0x183/0x530 [ 175.194124][ T5850] print_report+0x16e/0x5b0 [ 175.194149][ T5850] ? __virt_addr_valid+0x183/0x530 [ 175.194168][ T5850] ? __virt_addr_valid+0x183/0x530 [ 175.194185][ T5850] ? __virt_addr_valid+0x45f/0x530 [ 175.194204][ T5850] ? __phys_addr+0xba/0x170 [ 175.194222][ T5850] ? sco_conn_put+0xad/0x210 [ 175.194248][ T5850] kasan_report+0x143/0x180 [ 175.194274][ T5850] ? sco_conn_put+0xad/0x210 [ 175.194301][ T5850] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 175.194329][ T5850] sco_conn_put+0xad/0x210 [ 175.194354][ T5850] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 175.194380][ T5850] hci_conn_hash_flush+0xff/0x240 [ 175.194404][ T5850] hci_dev_close_sync+0xa8b/0x1260 [ 175.194437][ T5850] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 175.194464][ T5850] ? rcu_is_watching+0x15/0xb0 [ 175.194491][ T5850] hci_unregister_dev+0x20b/0x510 [ 175.194518][ T5850] vhci_release+0x80/0xd0 [ 175.194546][ T5850] ? __pfx_vhci_release+0x10/0x10 [ 175.194575][ T5850] __fput+0x3e9/0x9f0 [ 175.194612][ T5850] task_work_run+0x24f/0x310 [ 175.194636][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 175.194656][ T5850] ? do_exit+0xa25/0x28e0 [ 175.194685][ T5850] ? do_exit+0xa25/0x28e0 [ 175.194715][ T5850] do_exit+0xa2a/0x28e0 [ 175.194754][ T5850] ? __pfx_do_exit+0x10/0x10 [ 175.194782][ T5850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.194815][ T5850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.194849][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.194875][ T5850] ? lockdep_hardirqs_on+0x99/0x150 [ 175.194904][ T5850] do_group_exit+0x207/0x2c0 [ 175.194949][ T5850] __x64_sys_exit_group+0x3f/0x40 [ 175.194977][ T5850] x64_sys_call+0x26a8/0x26b0 [ 175.195001][ T5850] do_syscall_64+0xf3/0x230 [ 175.195031][ T5850] ? clear_bhb_loop+0x35/0x90 [ 175.195061][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.195088][ T5850] RIP: 0033:0x7fa6e998d169 [ 175.195104][ T5850] Code: Unable to access opcode bytes at 0x7fa6e998d13f. [ 175.195114][ T5850] RSP: 002b:00007fffa589b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 175.195135][ T5850] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6e998d169 [ 175.195149][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 175.195160][ T5850] RBP: 00007fa6e99eaad8 R08: 00007fffa58995b7 R09: 00000000000927c0 [ 175.195174][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.195186][ T5850] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007fffa589c0b0 [ 175.195207][ T5850] [ 175.195214][ T5850] [ 175.487064][ T5850] Allocated by task 9369: [ 175.491393][ T5850] kasan_save_track+0x3f/0x80 [ 175.496081][ T5850] __kasan_kmalloc+0x98/0xb0 [ 175.500679][ T5850] __kmalloc_noprof+0x285/0x4c0 [ 175.505541][ T5850] sk_prot_alloc+0xe0/0x210 [ 175.510043][ T5850] sk_alloc+0x3e/0x370 [ 175.514150][ T5850] __netlink_create+0x65/0x260 [ 175.518920][ T5850] netlink_create+0x3ab/0x560 [ 175.523605][ T5850] __sock_create+0x4c0/0xa30 [ 175.528237][ T5850] __sys_socket+0x150/0x3c0 [ 175.533100][ T5850] __x64_sys_socket+0x7a/0x90 [ 175.537786][ T5850] do_syscall_64+0xf3/0x230 [ 175.542301][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.548203][ T5850] [ 175.550525][ T5850] Freed by task 9410: [ 175.554523][ T5850] kasan_save_track+0x3f/0x80 [ 175.559215][ T5850] kasan_save_free_info+0x40/0x50 [ 175.564248][ T5850] __kasan_slab_free+0x59/0x70 [ 175.569016][ T5850] kfree+0x196/0x430 [ 175.572920][ T5850] __sk_destruct+0x50c/0x690 [ 175.577514][ T5850] rcu_core+0xaaa/0x17a0 [ 175.581783][ T5850] handle_softirqs+0x2d4/0x9b0 [ 175.586554][ T5850] __irq_exit_rcu+0xf7/0x220 [ 175.591148][ T5850] irq_exit_rcu+0x9/0x30 [ 175.595398][ T5850] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 175.601039][ T5850] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.607029][ T5850] [ 175.609354][ T5850] Last potentially related work creation: [ 175.615064][ T5850] kasan_save_stack+0x3f/0x60 [ 175.619746][ T5850] kasan_record_aux_stack+0xaa/0xc0 [ 175.624955][ T5850] call_rcu+0x168/0xac0 [ 175.629120][ T5850] netlink_release+0x165a/0x1b20 [ 175.634069][ T5850] sock_close+0xbc/0x240 [ 175.638316][ T5850] __fput+0x3e9/0x9f0 [ 175.642306][ T5850] task_work_run+0x24f/0x310 [ 175.646899][ T5850] syscall_exit_to_user_mode+0x13f/0x340 [ 175.652558][ T5850] do_syscall_64+0x100/0x230 [ 175.657162][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.663080][ T5850] [ 175.665408][ T5850] The buggy address belongs to the object at ffff88805c7be000 [ 175.665408][ T5850] which belongs to the cache kmalloc-2k of size 2048 [ 175.679464][ T5850] The buggy address is located 1440 bytes inside of [ 175.679464][ T5850] freed 2048-byte region [ffff88805c7be000, ffff88805c7be800) [ 175.693433][ T5850] [ 175.695756][ T5850] The buggy address belongs to the physical page: [ 175.702172][ T5850] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c7b8 [ 175.710932][ T5850] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 175.719431][ T5850] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 175.726976][ T5850] page_type: f5(slab) [ 175.730959][ T5850] raw: 00fff00000000040 ffff88801b042000 ffffea0001e8e800 dead000000000002 [ 175.739636][ T5850] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 175.748243][ T5850] head: 00fff00000000040 ffff88801b042000 ffffea0001e8e800 dead000000000002 [ 175.756932][ T5850] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 175.765630][ T5850] head: 00fff00000000003 ffffea000171ee01 ffffffffffffffff 0000000000000000 [ 175.774316][ T5850] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 175.783007][ T5850] page dumped because: kasan: bad access detected [ 175.789426][ T5850] page_owner tracks the page as allocated [ 175.795149][ T5850] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 75462945297, free_ts 25135257037 [ 175.815913][ T5850] post_alloc_hook+0x1f4/0x240 [ 175.820731][ T5850] get_page_from_freelist+0x365c/0x37a0 [ 175.826283][ T5850] __alloc_frozen_pages_noprof+0x292/0x710 [ 175.832091][ T5850] alloc_pages_mpol+0x311/0x660 [ 175.836946][ T5850] allocate_slab+0x8f/0x3a0 [ 175.841452][ T5850] ___slab_alloc+0xc27/0x14a0 [ 175.846164][ T5850] __slab_alloc+0x58/0xa0 [ 175.850504][ T5850] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 175.856937][ T5850] kmalloc_reserve+0x111/0x2a0 [ 175.861712][ T5850] pskb_expand_head+0x1ee/0x1440 [ 175.866655][ T5850] netlink_trim+0x1d6/0x2e0 [ 175.871159][ T5850] netlink_broadcast_filtered+0x76/0x12a0 [ 175.876881][ T5850] nlmsg_notify+0xfb/0x1c0 [ 175.881310][ T5850] __dev_notify_flags+0xf7/0x400 [ 175.886257][ T5850] rtnl_newlink_create+0x535/0xa40 [ 175.891376][ T5850] rtnl_newlink+0x17cc/0x1d30 [ 175.896061][ T5850] page last free pid 1 tgid 1 stack trace: [ 175.901863][ T5850] free_frozen_pages+0xe0d/0x10e0 [ 175.906897][ T5850] free_contig_range+0x14c/0x430 [ 175.911867][ T5850] destroy_args+0x94/0x4b0 [ 175.916291][ T5850] debug_vm_pgtable+0x551/0x590 [ 175.921151][ T5850] do_one_initcall+0x248/0x930 [ 175.925915][ T5850] do_initcall_level+0x157/0x210 [ 175.930855][ T5850] do_initcalls+0x71/0xd0 [ 175.935197][ T5850] kernel_init_freeable+0x435/0x5d0 [ 175.940432][ T5850] kernel_init+0x1d/0x2b0 [ 175.944775][ T5850] ret_from_fork+0x4b/0x80 [ 175.949307][ T5850] ret_from_fork_asm+0x1a/0x30 [ 175.954091][ T5850] [ 175.956427][ T5850] Memory state around the buggy address: [ 175.962065][ T5850] ffff88805c7be480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.970138][ T5850] ffff88805c7be500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.978218][ T5850] >ffff88805c7be580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.986278][ T5850] ^ [ 175.991382][ T5850] ffff88805c7be600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.999445][ T5850] ffff88805c7be680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.007503][ T5850] ================================================================== [ 176.045498][ T5850] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 176.052751][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 176.063624][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.073689][ T5850] Call Trace: [ 176.076970][ T5850] [ 176.079905][ T5850] dump_stack_lvl+0x241/0x360 [ 176.084593][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.089800][ T5850] ? __pfx__printk+0x10/0x10 [ 176.094391][ T5850] ? preempt_schedule+0xe1/0xf0 [ 176.099249][ T5850] ? vscnprintf+0x5d/0x90 [ 176.103584][ T5850] panic+0x349/0x880 [ 176.107501][ T5850] ? check_panic_on_warn+0x21/0xb0 [ 176.112630][ T5850] ? __pfx_panic+0x10/0x10 [ 176.117051][ T5850] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 176.123037][ T5850] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 176.129369][ T5850] ? print_report+0x519/0x5b0 [ 176.134055][ T5850] check_panic_on_warn+0x86/0xb0 [ 176.139004][ T5850] ? sco_conn_put+0xad/0x210 [ 176.143620][ T5850] end_report+0x77/0x160 [ 176.147871][ T5850] kasan_report+0x154/0x180 [ 176.152469][ T5850] ? sco_conn_put+0xad/0x210 [ 176.157070][ T5850] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 176.162365][ T5850] sco_conn_put+0xad/0x210 [ 176.166790][ T5850] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 176.172080][ T5850] hci_conn_hash_flush+0xff/0x240 [ 176.177134][ T5850] hci_dev_close_sync+0xa8b/0x1260 [ 176.182342][ T5850] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 176.187916][ T5850] ? rcu_is_watching+0x15/0xb0 [ 176.192691][ T5850] hci_unregister_dev+0x20b/0x510 [ 176.197722][ T5850] vhci_release+0x80/0xd0 [ 176.202058][ T5850] ? __pfx_vhci_release+0x10/0x10 [ 176.207093][ T5850] __fput+0x3e9/0x9f0 [ 176.211091][ T5850] task_work_run+0x24f/0x310 [ 176.215687][ T5850] ? __pfx_task_work_run+0x10/0x10 [ 176.220901][ T5850] ? do_exit+0xa25/0x28e0 [ 176.225251][ T5850] ? do_exit+0xa25/0x28e0 [ 176.229678][ T5850] do_exit+0xa2a/0x28e0 [ 176.233850][ T5850] ? __pfx_do_exit+0x10/0x10 [ 176.238475][ T5850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.244466][ T5850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.250893][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.256100][ T5850] ? lockdep_hardirqs_on+0x99/0x150 [ 176.261317][ T5850] do_group_exit+0x207/0x2c0 [ 176.265927][ T5850] __x64_sys_exit_group+0x3f/0x40 [ 176.270972][ T5850] x64_sys_call+0x26a8/0x26b0 [ 176.275657][ T5850] do_syscall_64+0xf3/0x230 [ 176.280172][ T5850] ? clear_bhb_loop+0x35/0x90 [ 176.284862][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.290761][ T5850] RIP: 0033:0x7fa6e998d169 [ 176.295179][ T5850] Code: Unable to access opcode bytes at 0x7fa6e998d13f. [ 176.302194][ T5850] RSP: 002b:00007fffa589b818 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 176.310614][ T5850] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6e998d169 [ 176.318591][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 176.326569][ T5850] RBP: 00007fa6e99eaad8 R08: 00007fffa58995b7 R09: 00000000000927c0 [ 176.334548][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.342538][ T5850] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007fffa589c0b0 [ 176.350520][ T5850] [ 176.353876][ T5850] Kernel Offset: disabled [ 176.358200][ T5850] Rebooting in 86400 seconds..