last executing test programs: 1m8.949251938s ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x100000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, &(0x7f0000001b40)=""/189, 0xbd}, 0x46c0}], 0x1, 0x40000002, 0x0) sendto$packet(r2, &(0x7f0000000180)="166cf2c6ccfbdb833d82af01a8ec71dc67946b9faace26f9ccedc263a3efbc6e3c98a6e296d11dbb656141af5ef339e2b27816da00425b0321bd59cb532651f7595be7d43ec48e36a9c46b082cce500853fd908e2818b75b0462a2d981b2fcf385c1488b9402040a4d0aec9c38b0fdbdf79bdf3d7d720ecec3b962d38d64f492c3", 0x81, 0x21, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 56.774692278s ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x100000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, &(0x7f0000001b40)=""/189, 0xbd}, 0x46c0}], 0x1, 0x40000002, 0x0) sendto$packet(r2, &(0x7f0000000180)="166cf2c6ccfbdb833d82af01a8ec71dc67946b9faace26f9ccedc263a3efbc6e3c98a6e296d11dbb656141af5ef339e2b27816da00425b0321bd59cb532651f7595be7d43ec48e36a9c46b082cce500853fd908e2818b75b0462a2d981b2fcf385c1488b9402040a4d0aec9c38b0fdbdf79bdf3d7d720ecec3b962d38d64f492c3", 0x81, 0x21, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 38.407545885s ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x100000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, &(0x7f0000001b40)=""/189, 0xbd}, 0x46c0}], 0x1, 0x40000002, 0x0) sendto$packet(r2, &(0x7f0000000180)="166cf2c6ccfbdb833d82af01a8ec71dc67946b9faace26f9ccedc263a3efbc6e3c98a6e296d11dbb656141af5ef339e2b27816da00425b0321bd59cb532651f7595be7d43ec48e36a9c46b082cce500853fd908e2818b75b0462a2d981b2fcf385c1488b9402040a4d0aec9c38b0fdbdf79bdf3d7d720ecec3b962d38d64f492c3", 0x81, 0x21, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 24.122843454s ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x100000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, &(0x7f0000001b40)=""/189, 0xbd}, 0x46c0}], 0x1, 0x40000002, 0x0) sendto$packet(r2, &(0x7f0000000180)="166cf2c6ccfbdb833d82af01a8ec71dc67946b9faace26f9ccedc263a3efbc6e3c98a6e296d11dbb656141af5ef339e2b27816da00425b0321bd59cb532651f7595be7d43ec48e36a9c46b082cce500853fd908e2818b75b0462a2d981b2fcf385c1488b9402040a4d0aec9c38b0fdbdf79bdf3d7d720ecec3b962d38d64f492c3", 0x81, 0x21, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 12.174950306s ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x100000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, &(0x7f0000001b40)=""/189, 0xbd}, 0x46c0}], 0x1, 0x40000002, 0x0) sendto$packet(r2, &(0x7f0000000180)="166cf2c6ccfbdb833d82af01a8ec71dc67946b9faace26f9ccedc263a3efbc6e3c98a6e296d11dbb656141af5ef339e2b27816da00425b0321bd59cb532651f7595be7d43ec48e36a9c46b082cce500853fd908e2818b75b0462a2d981b2fcf385c1488b9402040a4d0aec9c38b0fdbdf79bdf3d7d720ecec3b962d38d64f492c3", 0x81, 0x21, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 7.676715899s ago: executing program 3 (id=1587): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0, r2, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbe000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0xa, 0x3, 0x3a) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0xc0000000, 0x240, 0x1158, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x21, &(0x7f0000000100)="7c7c7b35452cf5cc27d4cbc34751de83", 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 6.536998876s ago: executing program 3 (id=1592): r0 = socket(0x11, 0x3, 0x0) unshare(0x20040400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@empty, 0x0}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PRATE64={0xc, 0x5, 0x28c19c4be41a64e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x7, 0x2, 0x5, 0x153}, {0x0, 0x1, 0x1, 0x2, 0x3af4, 0xfffffffe}, 0xc76, 0xff, 0x13cb}}]}}]}, 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0x630, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff110}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5d5}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x4, 0x7, 0x26}, {0xf9b0, 0x3, 0xff, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x40000}, 0x88880) bind$packet(r0, &(0x7f0000000040)={0x11, 0x5, r5, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffe2000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"]}, 0x135) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.242888132s ago: executing program 3 (id=1597): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x9, @local, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.02508206s ago: executing program 3 (id=1598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0xc00) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000100)=0x9, 0x4) r4 = socket(0x2a, 0x4, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80e8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x880}, 0x41) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x804) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x13}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000640)={0x29, 0x2, 0x0, 0xf0, 0x0, [@mcast2]}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001780)={&(0x7f0000000680)="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", &(0x7f0000001680)=""/17, &(0x7f00000016c0)="7576c3826885e4977e5a", &(0x7f0000001700)="17a6a5361887166bddaea8b84b2cb19493ca03f7c4a2a0dcfb0c44fef5943367999fdd5574b37d963c8a486537930151dfa277626f3bd17b53b04674aedc65c748d6264dec", 0x6, r1}, 0x38) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000001900)={&(0x7f00000017c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001800)="6eefa84dcf52c859e9a23db98c4c6a1162893968afaac4666659f57912f1ce04c7d832ec40314807a31881e93431b084faaa2a9128b8964e3cd911d6eb90bcc5e0ad6d15595988ce7ef5ab1a5c88185abbf23dbf51d402ea2485f9ec22e494547354f5553c3a20278707e6a33f12d9058616b1e92b295202bb2d4056ff930b7297fb703735dff0a3eb26b5b1f98378028cd682d14dd0716790a383a40258b727fb10db18ab8bcb2038a36a1163fa1773aea3566248f9a2fe9f17a8b6c8", 0xbd}], 0x1}, 0x1) sendfile(r1, r3, &(0x7f0000001940)=0x80000000, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000001980)={0x7, '\x00', {0x7}, 0x7}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), r8) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000001a00)=0xff6, &(0x7f0000001a40)=0x2) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x11}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x44081) r10 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r10, &(0x7f0000001f00)=[{{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/179, 0xb3}, {&(0x7f0000001d00)=""/51, 0x33}, {&(0x7f0000001d40)=""/121, 0x79}], 0x4}, 0x4}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=""/10, 0xa}, 0x8}], 0x2, 0x20, &(0x7f0000001f80)={0x77359400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002280)={0x6, 0xb, &(0x7f0000002140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x5d}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}], &(0x7f00000021c0)='syzkaller\x00', 0x92bb, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x7, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240), 0x10, 0x3, @void, @value}, 0x94) 3.915619026s ago: executing program 3 (id=1605): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x6, 0xfffffffe, 0x40, @remote, @empty, 0x40, 0x7, 0x3, 0xe4}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r4, 0x0, 0x80, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f00000003c0)=""/74, 0x4a, 0x0, &(0x7f0000000440)=""/44, 0x2c}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000100000080000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000500"/28], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r14}, &(0x7f0000000100), &(0x7f0000000140), 0x3}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x8, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x401, 0x88, &(0x7f0000000200)=""/136, 0x40f00, 0x46, '\x00', r1, @fallback=0x8, r4, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xa, 0x800, 0xd704}, 0x10, r5, r6, 0x0, &(0x7f0000000640)=[r7, r8, r9, r10, r11, r12, r13, r14, r15, 0x1], &(0x7f0000000740), 0x10, 0xffffffff, @void, @value}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000006000000000000060015000200000014001680100008800c0002800600010000050000"], 0x38}}, 0x0) r17 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r17, &(0x7f0000000100)={0xa, 0x4e63, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x1}, 0x1c) sendmmsg$inet6(r17, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rthdr_2292={{0x18, 0x29, 0x32, {0x32, 0x0, 0x0, 0x4}}}], 0x18}}], 0x1, 0x0) 1.947345753s ago: executing program 4 (id=1628): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x3, 0xc, 0x9, 0x40, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) 1.887816807s ago: executing program 4 (id=1629): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.796116603s ago: executing program 4 (id=1630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x0, 0x10, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xff, 0x0, 0x0, 0x3], 0x0, [0x7f, 0x4, 0x2, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x106], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x2) 1.757476147s ago: executing program 4 (id=1632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x3, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003a80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a47", 0x43}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x158, 0x24, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xa, 0xf}, {0x5, 0xd}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffffffff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x8, 0x4, 0x2, 0x2, 0x3f, 0x9}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0xfffa, 0xb, 0x2, 0x200, 0xbe4, 0x7}}, {0x12, 0x2, [0x4, 0x800, 0x9, 0x824, 0xe9f, 0x1, 0xfc]}}, {{0x1c, 0x1, {0x3, 0x7, 0xafe, 0x1, 0x2, 0x9, 0x101, 0x5}}, {0xe, 0x2, [0x3, 0x5, 0x5, 0x9, 0x1]}}, {{0x1c, 0x1, {0x8, 0x1, 0xa047, 0x4, 0x0, 0x3, 0x1, 0x2}}, {0x8, 0x2, [0x6, 0x3]}}, {{0x1c, 0x1, {0x4, 0xd, 0x3, 0x0, 0x2, 0x2, 0x1, 0x5}}, {0xe, 0x2, [0x9, 0x8, 0xa, 0xe5a, 0xc151]}}, {{0x1c, 0x1, {0x2a, 0x81, 0x2, 0x0, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0x1, 0x2, 0x4, 0xd, 0x8]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20840}, 0x4010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/205, 0x1a, 0xcd, 0x1, 0x726, 0x0, @void, @value}, 0x28) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.622196162s ago: executing program 2 (id=1633): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @null, @netrom, @null, @default, @null, @remote, @rose]}, &(0x7f0000000080)=0x48) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000000740)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/8, 0x8}], 0x2, &(0x7f0000000280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/107, 0x6b}], 0x6}}], 0x2, 0x1, &(0x7f0000000800)={r4, r5+10000000}) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, &(0x7f0000000840)={'wg1\x00', {0x2, 0x4e20, @local}}) write$cgroup_int(r16, &(0x7f0000000880)=0x1000, 0x12) syz_init_net_socket$ax25(0x3, 0x2, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r10, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x15) r20 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r20, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) writev(r17, &(0x7f0000001c00)=[{&(0x7f0000000ac0)="60fbb3418790a7abc58629dfc7a8f62cdfd80432d4b0d39d53c82e310f52112f655618a74fbdcaa88c659ba4556409c934a08b2db7da598b9386742d14108d0bef8b8275ee9faa20f4adc707c29b787978929c1ca7e5581c3017496e4c045ea40202a6e4bf74795b2c", 0x69}, {&(0x7f0000000b40)="7fedb6d7d31ae12a27e745b9395d8bb045df2a2a43045e31470964d424609cdae49f97f4be1d0ae6b147a4c5b484c3c56413095ea591d32d55807a2ddca48dd0d5c8a07bcd72cb321b598aaf645718c792683b150ed1d7687fea6a20a5ee85b421143d3215cda3960623c1111915f1ea866a487abd7121cfb3daf082ac0448129304fe7e37a30f14d422cc95daab6fd34557e3622bd6523787a265", 0x9b}, {&(0x7f0000000c00)="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", 0x1000}], 0x3) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x102, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1008010}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, r20, 0x300, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x20000014) setsockopt$inet6_group_source_req(r11, 0x29, 0x2b, &(0x7f0000001d80)={0x0, {{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x25}}}, {{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002000)={@ifindex=r19, 0x9, 0x0, 0x1, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r23 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_ext={0x1c, 0xb, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb1d0}, [@func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x3, 0x3, 0x9, 0x4, 0x7fff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @alu={0x7, 0x1, 0x5, 0xb, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f0000002100)='syzkaller\x00', 0xc, 0x1f, &(0x7f0000002140)=""/31, 0x41000, 0x61, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000002180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000021c0)={0x0, 0x5, 0x9, 0x6}, 0x10, 0x62b7, r9, 0x3, &(0x7f0000002200)=[r7, r12, r14, r14, r15], &(0x7f0000002240)=[{0x4, 0x2, 0x1, 0x4}, {0x2, 0x4, 0x2, 0x7}, {0x1, 0x1, 0x8}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002040)={@map=r7, r17, 0x3c, 0x4, 0x0, @void, @value=r23, @void, @void, r22}, 0x20) sendmmsg(r2, &(0x7f0000002900)=[{{&(0x7f0000002340)=@llc={0x1a, 0x30d, 0x8, 0x4c, 0x6, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000023c0)="c67c683840c5a8be70e4d6eaf8edd12306d13e93ddbcd752cb49fc0e9b5e5c9a8eb93c289c37eea9e40b5a58d8b5244a83ab1cf14e79dae70789d45728390a555fb376ea539775a7ef88d7e978420273ab97fb6d6e9cae9e724979825e936f333b16e18993960c5a121ce56d73c2aa0ac010f3b6a153bfd242ed", 0x7a}, {&(0x7f0000002440)="33c72592b6b43e3337d97734fa561480b607ea7e718a153485226ee1369fef18933ecae5bd8c8b6b4395ee4735a9c09b5aed541fc3f56582733791dfbc608005e9623e677957f907615e6edd8a6feb2e077820136a2a0d0097ab416bdd7da92a199bdc8bf28ef44d0a506bc445c37d84af95f85d298f34c339eeb97440f4b2d8f29db96fea6c48d94aecdba0bb19f8a4e7a7b6363a5acfcf65f4012e8296", 0x9e}, {&(0x7f0000002500)="0799eefc92834a42a267209365a7c7b3deb1a50b3d50b9b3a122", 0x1a}, {&(0x7f0000002540)="2c9671e11c0a2bb481a1a4955fc35bf306dfe2df1842707253ff3220bb8119812cfa22eec6139ba1e742185f3854f0a50d96e480f3b2924c63a6414ea28d1b10c76487c54e4e85fa", 0x48}, {&(0x7f00000025c0)="9d856faf2a7c4810c806033b250a4a9e886e9bb8a8883f2925ea3b555d5c463027d29b", 0x23}, {&(0x7f0000002600)="37bce2d995f753372f0e26733c6f92e3d950ac74b0815a07513935676811e856093ad159add7e69580b5c005a198df739c6ab981eafae54588954dc617f4d76cad87593d3436abc5ba3ab58fe72a993fb7f1e78885257a4ee689a2c6aaf6908ebbbe787163dbe5bed0", 0x69}, {&(0x7f0000002680)="c8154e0a47de0683bc277ecc01cf259b9b8a9efc74a9d1a3d0a1be124394eed85f706ff648ab4e1811bad85fee81769a470f7d330addb987d569d73a8433de06cca29383a6215ca594aaa8b319a7f091a057037a19cc45f597512f7ea4196a2b8150ff416bf27f0eadeebae89b95ea32aee873e87c88d248f96a77493a510aa40e430652b6526628b9792679a1c04678f672a121cb429dd18237c2cbf9f5cf991c1414dcfda7ef1def7781e7ce", 0xad}, {&(0x7f0000002740)="9021dc05a6845b6c85a338fb5a110c77547385868ad15f630f611619cc592cf400f7ac6029a45538f374101acaaa032ffdb7e4f0ffeb513efa", 0x39}, {&(0x7f0000002780)="094f29fdc491eb3499a446074c7b8bfdc21e1b82820a77", 0x17}], 0x9, &(0x7f0000002880)=[{0x30, 0x119, 0x6, "3737007d11bffe1aeee6357f64ac1090781834c91510855c95"}, {0x50, 0x11, 0x3, "c25625a797297241b2b085700f7ec1e69a386b4ed793e0ef7a78180da91e1436bfd395206533f12ad479c047818bbfe7f7c7f449a4241aeb3f749c3d"}], 0x80}}], 0x1, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000029c0)={{r17, 0xffffffffffffffff}, &(0x7f0000002940), &(0x7f0000002980)=r18}, 0x20) r25 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a00)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xb3, '\x00', r21, r11, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002c80), &(0x7f0000002cc0)=r3}, 0x20) r27 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002d80)=@generic={&(0x7f0000002d40)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e00)={0x6, 0x2c, &(0x7f0000002a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x37}, @map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x24b}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x8, 0x1, 0x0, r10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @jmp={0x5, 0x1, 0x7, 0x4, 0x9, 0xfffffffffffffff4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r24}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r25}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000002c00)='GPL\x00', 0xee, 0x0, 0x0, 0x40f00, 0x2, '\x00', r19, 0x25, r18, 0x8, &(0x7f0000002c40)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=[r11, r13, r8, r16, r6, r26, r11, r27], 0x0, 0x10, 0x8, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ec0)) 1.483548218s ago: executing program 2 (id=1634): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)={0x60, r3, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x8000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "792e04f98b4735cfbd1eab2900001684e78fc1065886c617"}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40890) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="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", 0x11f}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832", 0xe4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d9", 0x2b}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81f", 0xf1}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc99951", 0x25}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4f", 0xf}, {&(0x7f00000014c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aeaf75e9d1b381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e", 0x52}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000007c0)={0x1, 0x8000, @status={[0x100000001, 0x7fff, 0x9, 0x0, 0x8000, 0x1]}, [0x9, 0x1, 0x5, 0x7, 0xfffffffffffffc00, 0x4, 0x7, 0x4, 0x9, 0x0, 0x2, 0x2, 0x6, 0x6, 0x8, 0x2, 0x0, 0x80, 0xe, 0x2, 0x9, 0xd33, 0x7, 0xffffffff, 0x5, 0x1b, 0x6, 0x800000000000000, 0x5, 0xfffffffffffffff8, 0x1, 0x8, 0x80, 0x8, 0xffffffffffffff19, 0x401, 0x2000000000000, 0xe, 0x1, 0x3ff, 0x1, 0x7ff, 0x3, 0x8, 0x3, 0x100000001, 0x0, 0x3, 0x78f1090, 0x0, 0x4, 0x2, 0x7fffffff, 0x2, 0xffffffffffffff00, 0x1, 0x9, 0x76af, 0x8, 0x3, 0x9, 0xffffffff80000000, 0x81, 0x9]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8c0000000000850000e9d00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 1.426116023s ago: executing program 2 (id=1635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x40}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x34}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000000)=0xfffffff7, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0xb, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x0, 0x0, 0x8, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x364, 0x2, 0x400}, {0x0, 0xfffffffc, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0x0, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x3ff}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x5, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x6}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81, 0x5}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x6, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0x6}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x5, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0001, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffff9}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x10, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x3a, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0x0, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x6, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0x7, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x8, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x2, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x7fff, 0x4, 0x101, 0x3ff}, {0x93, 0x1007, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.337583884s ago: executing program 1 (id=1636): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.332526682s ago: executing program 2 (id=1637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd2, &(0x7f00000001c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1.332022811s ago: executing program 4 (id=1638): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0xa) socket$nl_generic(0x10, 0x3, 0x10) 1.33173888s ago: executing program 0 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x100000) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f00000005c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) recvmmsg(r4, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000140)=""/10, 0xa}], 0x1, &(0x7f0000001b40)=""/189, 0xbd}, 0x46c0}], 0x1, 0x40000002, 0x0) sendto$packet(r2, &(0x7f0000000180)="166cf2c6ccfbdb833d82af01a8ec71dc67946b9faace26f9ccedc263a3efbc6e3c98a6e296d11dbb656141af5ef339e2b27816da00425b0321bd59cb532651f7595be7d43ec48e36a9c46b082cce500853fd908e2818b75b0462a2d981b2fcf385c1488b9402040a4d0aec9c38b0fdbdf79bdf3d7d720ecec3b962d38d64f492c3", 0x81, 0x21, &(0x7f0000000280)={0x11, 0x10, 0x0, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 415.364543ms ago: executing program 1 (id=1639): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) 414.958066ms ago: executing program 2 (id=1640): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0400000000000400000003020200"], 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in6={0xa, 0x4e24, 0x5, @remote, 0xf}, @in6={0xa, 0x4e22, 0xd0b9, @loopback, 0x6}, @in6={0xa, 0x4e21, 0xcf6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xac) 414.503817ms ago: executing program 3 (id=1641): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', r5, 0x29, 0x8, 0x7, 0x5, 0x8, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x708, 0x4, 0xd13}}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x4, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x4}, {0x7, 0x4, 0x6, 0xc3}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x0, 0x0, 0xd6bf}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000092cffeeb5a0273256dbd4ab1de08490000000000000061"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 414.268889ms ago: executing program 4 (id=1642): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x40106183, &(0x7f0000000340)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @bcast, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r2 = socket$netlink(0x10, 0x3, 0xf) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delqdisc={0x50, 0x25, 0x302, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0xfff1, 0xc}, {0x6}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x50}}, 0x10040) 344.151474ms ago: executing program 1 (id=1643): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dfeb0100180000000093b10000000c0000000c0000000200000063fd50"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@short={0xb, @remote, @netrom, 0x1, @null}, &(0x7f0000000300)=0x1c, 0x80000) r2 = accept4$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev, @null, 0x0, [@netrom, @bcast, @netrom, @null, @null, @null]}, &(0x7f0000000100)=0x40, 0x0) accept4$rose(r2, &(0x7f0000000140)=@full={0xb, @dev, @null, 0x0, [@remote, @remote, @remote, @bcast, @remote, @bcast]}, &(0x7f0000000280)=0x40, 0x100000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x322, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in=@multicast2, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x40}, {0xffffffff}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xf, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000b00b703000000000000850000000f000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000ba000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x403, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) 334.643209ms ago: executing program 1 (id=1644): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x3, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r2, 0x12574000) sendmsg$inet_sctp(r1, &(0x7f0000000ac0)={&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x6f, @empty, 0x922}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000740)="ead5ccc858f7b4b2663df8600ed0d05ca61826d3c9cc94878fa85e3457", 0x1d}, {&(0x7f0000000780)="06bd0fb97e6d279378712305c667314352a29bf64dea3055d9c900bc78ea33033eb8ac98bbc0e24df2355952f966713be3ccf750f7295a0d6774f86b1d7624921dba4822cde1c90991d9f801ef417486d9a6a6e15a31ab3f3a531be2589cc87e0130bc8f61357e674ecad0a902facd952054b419aff3b628cae9841c4236153695b97d3464b4f846ae64124d9928f45ab7c57fea1fbe5200ca893bc95bf9e5ed474306196f1093b38f6cff623a81bf791369a508c755df547aa071c650b3c9cff58b5132098f050e568d96a95dbc5f5fc06100529767eb3a4f9bc69e928cb5a2eb21c138d6ed09e5777e40abd66e17a5df4ce4628811", 0xf6}, {&(0x7f0000000880)="73c8d9bcf57ceeacf87519f03da3538f2275a20ad609433dc947e86c5d0f97afc1876dbd448d39962237c80618a9d342e2222eb331a914f023bf71b0de4463c4731d56ab39e3b6e5696dd8d344052834f792", 0x52}, {&(0x7f0000000900)="81437b02bed60f9f080ca44eebd7111c6ebde4dd71a4defcf859e56e69d420e617282e5e14da296296590617cec1", 0x2e}, {&(0x7f0000000940)="19c82d2c094d84061c61d2bc4929e70a71b0c88745851169f04e6030bdeb51b3b7c9cb205db47793ba67610ad8f39ac88906b013f9ce51f2c362af950e78edf3906b3eaa513a931251127c241f734d230181338dbeb87f833007544b04a9e83a3f58018d77597db5bcd453a7d21139734cbc4f6b544a9adbb8c32d17abd253d7aab50773e0f8b16cc585d4c67a0e8138c3bc547d07775b92aea2a4ce704bb0003f21ac832e0d5c6d642c1c7c8ea70c8f513b", 0xb2}], 0x5, &(0x7f0000000a80)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x200}}], 0x18, 0x805}, 0x20000040) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_batadv\x00', {0x2}, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000008000002"}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) recvfrom(r0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, &(0x7f0000001b00)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x6, 0x5, "593ddabf4e7a272bf9ea55274f1bfbc9466120fe60d88d5d70ad7a8e60b6cd0e83446374bc18c9b9c23f752e4db8418e32599808458314e51f575a44f1bcdc", 0x9}, 0x80) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x318, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x32}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x70}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8df3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x84, 0x3, "de26d2761c29d37c4d27eb113ab3da36a539c9a1e5fb9f26d47adf3ac1512e8848b487211625593ef281ed34b3111b5b886231f575c359fc3bd7a2474c915aba88f575c5c42a7fc4441fd42638530ebf6349b117ed485eceefff19785cdce0ef4f2396d5cf4ee337cdff53e1e865ebb44bd7ff9e3f338ca3259143c9856c9b22"}, @TIPC_NLA_NODE_ID={0xb2, 0x3, "84c2ee6e46845c0c76c71abe8767392580cbf6634772cfbb39194fdbbaf4d03ae585a9f4474c1a7db7a1c54fed724660abedb4257d82f0a1bd21aba11598fcaad695e0a059492c1fe71643fd019309b345838a84fda7a301824794b1c1b6b8962b22e3dc80c64b3f463231d7867b53a05dbe45b9ee975a243181d6ed469ed5c1610e96c0b814769f0d8ae05be7ac1d4f525cf31c74d6be0892cc44d57f49dc47c289d9b3dfa2701c491649b87e25"}, @TIPC_NLA_NODE_ID={0x13, 0x3, "cbbea3ed08592ef7b9bfe1ede406c4"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "26429bbc12df102c2d495d03cbfdfca2c7aea53415b83d8d7b"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5abaccae}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff6b05}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x800}, 0x24040005) 176.293254ms ago: executing program 2 (id=1645): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 27.895795ms ago: executing program 1 (id=1646): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x1, 0x4) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x1, 0x65, 0xc, 0x2, 0x4, @multicast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000068000903000a00000000000000040004007458e390f269bdb351bd4f6a6400000000000000"], 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = epoll_create1(0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)={0x80000005}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x26020480) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x33, 0x33, 0x8, [@datasec={0x3, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x7, 0x6}, {0x4, 0x80000000, 0x40}], "e25c68"}, @restrict={0xa}]}, {0x0, [0x30, 0x0, 0x2e, 0x61, 0x0, 0x2e]}}, &(0x7f00000004c0)=""/8, 0x54, 0x8, 0x0, 0x5, 0x0, @void, @value}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x506f, 0x0, 0x0, 0x0, 0x54cd}, {}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x6, 0x3, 0x1, 0xff, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x6, 0xd2, &(0x7f0000000680)=""/210, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x8, 0x8001, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x5, 0x2, 0x5, 0x3}, {0x4, 0x4, 0xd, 0x7}, {0x4, 0x2, 0x3}, {0x3, 0x4, 0x1, 0x6}, {0x1, 0x1, 0xf, 0x6}, {0x5, 0x1, 0x4, 0x7}, {0x2, 0x5, 0x9, 0x6}, {0x5, 0x2, 0xf, 0xc}, {0x0, 0x1, 0x8, 0x5}], 0x10, 0xff, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r9}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) 0s ago: executing program 1 (id=1647): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000540)='bcache_btree_gc_coalesce\x00', r1}, 0x18) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017c094eb881e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) gettid() (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) r7 = socket(0x28, 0x805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x4, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES64], 0x40}, 0x24040090) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000003180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000d5437f47a8062181fe52bce4b930dfe94284119c999313fb75389b2db241c16fa3d17e97cceb21ae46ed8cc859235c1c4529beff20ad1af11ad7b1a17851e065dc08c8a4edbf9651e4cdae19417bc7dab6a41f575acd4cc59afc0df67189276b20c7027fa1ba3d77c4297847b8befd373bafc5cd8a73"], 0x30, 0x8885}, 0x40041) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) kernel console output (not intermixed with test programs): 21.773906][ T7135] tipc: Started in network mode [ 221.778990][ T7135] tipc: Node identity ac14140f, cluster identity 4711 [ 221.787437][ T7135] tipc: New replicast peer: 255.255.255.255 [ 221.811060][ T7135] tipc: Enabled bearer , priority 10 [ 221.890338][ T7127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.067616][ T7138] vxcan3: entered allmulticast mode [ 222.248459][ T7127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.376252][ T7145] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 222.381393][ T30] audit: type=1800 audit(1747636981.782:4): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.332" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 222.399512][ T7145] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 222.423196][ T7137] syzkaller1: entered promiscuous mode [ 222.445946][ T7137] syzkaller1: entered allmulticast mode [ 222.477830][ T7145] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 222.509627][ T7127] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.537965][ T7127] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.578450][ T7145] syz.4.332 (7145) used greatest stack depth: 18312 bytes left [ 222.656440][ T7127] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.666738][ T7161] 8021q: VLANs not supported on wg0 [ 222.684521][ T7127] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.820682][ T5925] tipc: Node number set to 2886997007 [ 222.851520][ T7169] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 223.045371][ T7178] netlink: 'syz.2.341': attribute type 4 has an invalid length. [ 223.397656][ T7195] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 223.430381][ T7195] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 223.481118][ T7203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.022974][ T7232] __nla_validate_parse: 63 callbacks suppressed [ 224.022994][ T7232] netlink: 240 bytes leftover after parsing attributes in process `syz.1.355'. [ 225.295474][ T7214] geneve2: entered promiscuous mode [ 225.301406][ T7214] geneve2: entered allmulticast mode [ 225.308284][ T7222] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 225.325071][ T7222] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 225.355991][ T7230] ip6tnl1: entered promiscuous mode [ 225.381951][ T7230] ip6tnl1: entered allmulticast mode [ 225.494951][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.358'. [ 225.505024][ T7267] syz.4.359: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 225.552925][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.4.359 Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 PREEMPT(full) [ 225.552955][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.552972][ T7267] Call Trace: [ 225.552987][ T7267] [ 225.552997][ T7267] dump_stack_lvl+0x189/0x250 [ 225.553052][ T7267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.553082][ T7267] ? __pfx__printk+0x10/0x10 [ 225.553103][ T7267] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 225.553125][ T7267] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 225.553150][ T7267] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 225.553175][ T7267] warn_alloc+0x214/0x310 [ 225.553207][ T7267] ? __pfx___schedule+0x10/0x10 [ 225.553232][ T7267] ? __pfx_warn_alloc+0x10/0x10 [ 225.553261][ T7267] ? kasan_save_track+0x4f/0x80 [ 225.553285][ T7267] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 225.553312][ T7267] ? xskq_create+0x56/0x170 [ 225.553333][ T7267] ? __x64_sys_setsockopt+0x18b/0x220 [ 225.553360][ T7267] ? do_syscall_64+0xf6/0x210 [ 225.553382][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.553413][ T7267] __vmalloc_node_range_noprof+0x125/0x12c0 [ 225.553476][ T7267] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 225.553512][ T7267] ? __kasan_kmalloc+0x93/0xb0 [ 225.553546][ T7267] vmalloc_user_noprof+0x74/0x80 [ 225.553578][ T7267] ? xskq_create+0xbf/0x170 [ 225.553599][ T7267] xskq_create+0xbf/0x170 [ 225.553622][ T7267] xsk_init_queue+0xb0/0x110 [ 225.553645][ T7267] xsk_setsockopt+0x43f/0x710 [ 225.553667][ T7267] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.553699][ T7267] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 225.553722][ T7267] ? __pfx_xsk_setsockopt+0x10/0x10 [ 225.553743][ T7267] do_sock_setsockopt+0x257/0x3e0 [ 225.553775][ T7267] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 225.553800][ T7267] ? __fget_files+0x2a/0x420 [ 225.553832][ T7267] ? __fget_files+0x3a0/0x420 [ 225.553857][ T7267] ? __fget_files+0x2a/0x420 [ 225.553895][ T7267] __x64_sys_setsockopt+0x18b/0x220 [ 225.553932][ T7267] do_syscall_64+0xf6/0x210 [ 225.553957][ T7267] ? clear_bhb_loop+0x60/0xb0 [ 225.553992][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.554011][ T7267] RIP: 0033:0x7ff4dfb8e969 [ 225.554045][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.554060][ T7267] RSP: 002b:00007ff4e0a5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.554080][ T7267] RAX: ffffffffffffffda RBX: 00007ff4dfdb5fa0 RCX: 00007ff4dfb8e969 [ 225.554093][ T7267] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 225.554105][ T7267] RBP: 00007ff4dfc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 225.554116][ T7267] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.554128][ T7267] R13: 0000000000000000 R14: 00007ff4dfdb5fa0 R15: 00007fffabc7e2a8 [ 225.554158][ T7267] [ 225.554170][ T7267] Mem-Info: [ 225.860211][ T7281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.362'. [ 225.871509][ T7267] active_anon:4426 inactive_anon:0 isolated_anon:0 [ 225.871509][ T7267] active_file:1303 inactive_file:39867 isolated_file:0 [ 225.871509][ T7267] unevictable:768 dirty:111 writeback:0 [ 225.871509][ T7267] slab_reclaimable:10682 slab_unreclaimable:97980 [ 225.871509][ T7267] mapped:28973 shmem:1406 pagetables:840 [ 225.871509][ T7267] sec_pagetables:0 bounce:0 [ 225.871509][ T7267] kernel_misc_reclaimable:0 [ 225.871509][ T7267] free:1343135 free_pcp:1160 free_cma:0 [ 225.928683][ T7267] Node 0 active_anon:17672kB inactive_anon:0kB active_file:5212kB inactive_file:159268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115952kB dirty:444kB writeback:0kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11184kB pagetables:3452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 225.962667][ T7267] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 225.972865][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 226.043369][ T30] audit: type=1800 audit(1747636985.432:5): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.363" name="memory.events" dev="tmpfs" ino=506 res=0 errno=0 [ 226.056673][ T7267] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 226.117014][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 226.157458][ T7267] lowmem_reserve[]: 0 2503 2503 2503 2503 [ 226.164213][ T7267] Node 0 DMA32 free:1448764kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:17740kB inactive_anon:0kB active_file:5212kB inactive_file:159176kB unevictable:1536kB writepending:444kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:1984kB local_pcp:888kB free_cma:0kB [ 226.182114][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 226.208280][ T7267] lowmem_reserve[]: 0 0 0 0 0 [ 226.214537][ T7267] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 226.234464][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 226.264762][ T7267] lowmem_reserve[]: 0 0 0 0 0 [ 226.269717][ T7267] Node 1 Normal free:3912228kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:96kB free_cma:0kB [ 226.286987][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 226.309273][ T7267] lowmem_reserve[]: 0 0 0 0 0 [ 226.314892][ T7267] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 226.328564][ T7267] Node 0 DMA32: 46*4kB (UME) 150*8kB (UM) 106*16kB (ME) 219*32kB (UME) 575*64kB (UME) 362*128kB (UME) 157*256kB (UM) 44*512kB (UM) 21*1024kB [ 226.328772][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 226.357780][ T7267] (UME) 5*2048kB (UM) 308*4096kB (UM) = 1449256kB [ 226.364910][ T7267] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 226.382868][ T7267] Node 1 Normal: 199*4kB (UME) 45*8kB (UME) 42*16kB (UME) 188*32kB (UME) 92*64kB (UME) 37*128kB (UME) 16*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3912228kB [ 226.407237][ T7267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.418009][ T7267] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.434206][ T7293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'. [ 226.451841][ T7293] vlan0: entered promiscuous mode [ 226.464168][ T7267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 226.505671][ T7267] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.508929][ T7297] sctp: [Deprecated]: syz.3.366 (pid 7297) Use of int in max_burst socket option. [ 226.508929][ T7297] Use struct sctp_assoc_value instead [ 226.524693][ T7267] 42528 total pagecache pages [ 226.548323][ T7267] 0 pages in swap cache [ 226.558386][ T7267] Free swap = 124996kB [ 226.574513][ T7299] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 226.587490][ T7267] Total swap = 124996kB [ 226.589192][ T7299] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 226.594691][ T7267] 2097051 pages RAM [ 226.628854][ T7267] 0 pages HighMem/MovableOnly [ 226.645856][ T7267] 424397 pages reserved [ 226.664801][ T7267] 0 pages cma reserved [ 226.988523][ T7333] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 227.010481][ T7333] netlink: 'syz.2.374': attribute type 10 has an invalid length. [ 227.091466][ T7333] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 227.103304][ T7337] syzkaller1: entered promiscuous mode [ 227.117387][ T7337] syzkaller1: entered allmulticast mode [ 227.202110][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.285218][ T7344] bond1: (slave gretap1): making interface the new active one [ 227.319461][ T7344] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 227.370542][ T7355] netlink: 'syz.3.381': attribute type 6 has an invalid length. [ 227.595458][ T7371] bridge0: port 3(team0) entered disabled state [ 227.818059][ T7371] bridge0: port 3(team0) entered disabled state [ 227.833367][ T7371] team_slave_0: left promiscuous mode [ 227.838978][ T7371] team_slave_0: left allmulticast mode [ 227.858793][ T7371] team0 (unregistering): Port device team_slave_0 removed [ 227.869252][ T7371] team_slave_1: left promiscuous mode [ 227.876407][ T7371] team_slave_1: left allmulticast mode [ 227.884495][ T7371] team0 (unregistering): Port device team_slave_1 removed [ 227.892095][ T7371] bond1: left promiscuous mode [ 227.897017][ T7371] bond1: left allmulticast mode [ 227.905869][ T7371] team0 (unregistering): Port device bond1 removed [ 227.914055][ T7371] geneve0: left promiscuous mode [ 227.919361][ T7371] geneve0: left allmulticast mode [ 227.949890][ T7371] team0 (unregistering): Port device geneve0 removed [ 228.575616][ T7428] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 228.672044][ T7428] team0: Port device geneve0 added [ 229.580107][ T7473] __nla_validate_parse: 6 callbacks suppressed [ 229.580127][ T7473] netlink: 80 bytes leftover after parsing attributes in process `syz.1.414'. [ 229.795520][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.417'. [ 230.048809][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'. [ 230.117264][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'. [ 230.451926][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 230.485019][ T7508] tipc: Disabling bearer [ 230.626433][ T7521] netlink: 5 bytes leftover after parsing attributes in process `syz.1.425'. [ 230.823668][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 230.856206][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 230.958418][ T7508] vxcan3: entered allmulticast mode [ 231.939223][ T7545] netlink: 'syz.3.432': attribute type 9 has an invalid length. [ 231.951987][ T7544] netlink: 'syz.3.432': attribute type 9 has an invalid length. [ 232.127073][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 232.192485][ T7553] wireguard0: entered promiscuous mode [ 232.205083][ T7553] wireguard0: entered allmulticast mode [ 232.265105][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 232.571512][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.606550][ T7555] bridge_slave_1: left allmulticast mode [ 232.633092][ T7555] bridge_slave_1: left promiscuous mode [ 232.646267][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.837323][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.113161][ T7591] pim6reg: entered allmulticast mode [ 233.148965][ T7591] pim6reg: left allmulticast mode [ 233.965145][ T7642] netlink: 'syz.4.459': attribute type 10 has an invalid length. [ 234.076774][ T7642] veth0_vlan: left promiscuous mode [ 234.092393][ T7642] veth0_vlan: entered promiscuous mode [ 234.114443][ T7642] team0: Device veth0_vlan failed to register rx_handler [ 234.308416][ T7645] IPVS: set_ctl: invalid protocol: 47 172.20.20.19:20002 [ 235.405637][ T7692] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 235.438219][ T7693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.452017][ T7693] __nla_validate_parse: 4 callbacks suppressed [ 235.452036][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 235.501088][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.531572][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.553009][ T7700] netlink: 76 bytes leftover after parsing attributes in process `syz.1.473'. [ 235.575649][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.587483][ T7700] nbd: must specify at least one socket [ 235.594313][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.694149][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 235.765806][ T7711] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 236.235116][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 236.329670][ T7731] netlink: 'syz.0.482': attribute type 8 has an invalid length. [ 236.399765][ T7735] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 236.438343][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 236.454248][ T7737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.483'. [ 236.458393][ T7739] openvswitch: netlink: Unknown nsh attribute 0 [ 236.482043][ T7739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.553929][ T7744] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 236.588492][ T7735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.596031][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 236.861619][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 237.086773][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 237.223842][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.492'. [ 239.713402][ T7775] ip6gretap0: entered promiscuous mode [ 239.719386][ T7775] macvtap1: entered promiscuous mode [ 239.759471][ T7775] macvtap1: entered allmulticast mode [ 239.773007][ T7775] ip6gretap0: entered allmulticast mode [ 239.812029][ T7784] ip6gretap0: left allmulticast mode [ 239.821673][ T7784] ip6gretap0: left promiscuous mode [ 240.159835][ T7813] netlink: 'syz.3.506': attribute type 21 has an invalid length. [ 240.201199][ T7813] smc: net device bond0 applied user defined pnetid SYZ2 [ 240.227078][ T7813] !: renamed from dummy0 (while UP) [ 240.539961][ T7838] bridge3: entered promiscuous mode [ 240.568132][ T7838] bridge3: entered allmulticast mode [ 240.829055][ T7856] __nla_validate_parse: 6 callbacks suppressed [ 240.829075][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 240.873223][ T7858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.882475][ T7859] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 240.937018][ T30] audit: type=1107 audit(1747637000.342:6): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-ê¶öt03»$ÒT^,ð§¶ÿŠ¸Ós{I}‚F­¹Y-îî@cZ«Óö T²OÊdª¦tFi÷ß(nY§¼íK?Â"jñŒ?azãmkîцÅKL@Ÿ”v›g`òv{j=.-V—ýÑ r¦ùßõûK¤XµÜ½¸¾òÏ–ÎM5gD²=õmÓ«Ø©±P7£°bÁŽª [C2Í„Æšb,¸M÷¼þJT„3¹ÝÏÌîÑ' [ 241.035287][ T7858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.077350][ T7869] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 241.087061][ T845] IPVS: starting estimator thread 0... [ 241.166625][ T7858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.181044][ T7874] IPVS: using max 32 ests per chain, 76800 per kthread [ 241.230334][ T7879] openvswitch: netlink: Tunnel attr 2 has unexpected len 7 expected 4 [ 241.310888][ T7858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.425398][ T7858] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.443784][ T7886] syzkaller1: entered promiscuous mode [ 241.449321][ T7886] syzkaller1: entered allmulticast mode [ 241.485942][ T7858] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.542792][ T7858] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.626437][ T7858] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.045497][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 242.154000][ T7924] openvswitch: netlink: Message has 8 unknown bytes. [ 242.479517][ T7939] veth1_macvtap: left promiscuous mode [ 242.578945][ T7945] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 242.587404][ T7945] netlink: 160 bytes leftover after parsing attributes in process `syz.3.546'. [ 242.750057][ T7959] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 242.789099][ T7959] netlink: 228 bytes leftover after parsing attributes in process `syz.1.552'. [ 242.825399][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 242.827515][ T7963] syzkaller1: entered promiscuous mode [ 242.853460][ T7963] syzkaller1: entered allmulticast mode [ 243.102770][ T7976] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 243.125784][ T7976] netlink: 224 bytes leftover after parsing attributes in process `syz.4.555'. [ 243.217286][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.557'. [ 243.226512][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.557'. [ 243.328468][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 243.584006][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 243.639493][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 243.767479][ T8021] netlink: 'syz.2.566': attribute type 11 has an invalid length. [ 244.328675][ T8044] sch_fq: defrate 4 ignored. [ 244.657875][ T8051] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 245.237224][ T8070] syz_tun: entered allmulticast mode [ 245.246452][ T8070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.308514][ T8070] syz_tun (unregistering): left allmulticast mode [ 245.621628][ T8079] netlink: 'syz.3.582': attribute type 3 has an invalid length. [ 245.648976][ T8085] netlink: 'syz.0.584': attribute type 2 has an invalid length. [ 245.668062][ T8085] netlink: 'syz.0.584': attribute type 2 has an invalid length. [ 245.912325][ T8101] __nla_validate_parse: 5 callbacks suppressed [ 245.912343][ T8101] netlink: 3 bytes leftover after parsing attributes in process `syz.4.590'. [ 245.946073][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.969334][ T8101] 0ªX¹¦À: renamed from caif0 [ 245.997421][ T8101] 0ªX¹¦À: entered allmulticast mode [ 246.027127][ T8108] netlink: 472 bytes leftover after parsing attributes in process `syz.4.590'. [ 246.036204][ T8101] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 246.468159][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 246.536504][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 246.763651][ T8145] netlink: 96 bytes leftover after parsing attributes in process `syz.4.602'. [ 246.855989][ T8148] netlink: 120 bytes leftover after parsing attributes in process `syz.1.604'. [ 246.884133][ T8148] sctp: [Deprecated]: syz.1.604 (pid 8148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.884133][ T8148] Use struct sctp_sack_info instead [ 246.884213][ T8152] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 246.974252][ T8150] wireguard0: entered promiscuous mode [ 246.993493][ T8150] wireguard0: entered allmulticast mode [ 247.052835][ T8152] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 247.384363][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 247.478401][ T8168] can: request_module (can-proto-4) failed. [ 247.567187][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 247.663197][ T8176] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 247.704316][ T8176] team0: Port device batadv1 added [ 247.895546][ T8187] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.613'. [ 247.910781][ T8187] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.613'. [ 247.930945][ T8187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 248.097919][ T8194] x_tables: duplicate underflow at hook 2 [ 248.127354][ T8194] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 248.265763][ T8192] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 248.305055][ T8194] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 248.425465][ T8194] team0: Port device veth1_macvtap added [ 248.444524][ T8200] netlink: 'syz.0.617': attribute type 2 has an invalid length. [ 248.462996][ T8200] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 248.492590][ T8207] SET target dimension over the limit! [ 248.503899][ T8205] vlan0: entered promiscuous mode [ 248.937525][ T8220] netlink: 'syz.4.623': attribute type 12 has an invalid length. [ 249.014422][ T8215] netlink: 'syz.0.622': attribute type 3 has an invalid length. [ 251.158181][ T8298] __nla_validate_parse: 8 callbacks suppressed [ 251.158202][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 251.360275][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 251.372614][ T8298] netlink: 2 bytes leftover after parsing attributes in process `syz.0.641'. [ 251.382181][ T8298] batadv_slave_1: entered promiscuous mode [ 252.239780][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 252.267051][ T8346] IPv6: Can't replace route, no match found [ 252.279678][ T8346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.296409][ T8349] IPv6: Can't replace route, no match found [ 252.333835][ T8347] team0: Device gtp0 is of different type [ 252.783384][ T8378] validate_nla: 2 callbacks suppressed [ 252.783402][ T8378] netlink: 'syz.1.664': attribute type 39 has an invalid length. [ 252.887609][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 253.097564][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.114844][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.134522][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.226676][ T8407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.671'. [ 253.251403][ T8407] netlink: 'syz.4.671': attribute type 6 has an invalid length. [ 253.315565][ T8416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.519081][ T8428] netlink: 52 bytes leftover after parsing attributes in process `syz.4.677'. [ 255.015518][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a334800: rx timeout, send abort [ 255.516578][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ebb800: rx timeout, send abort [ 255.525784][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a334800: abort rx timeout. Force session deactivation [ 255.532851][ T8531] bond1: entered promiscuous mode [ 255.541308][ T8531] bond1: entered allmulticast mode [ 255.546876][ T8531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.618846][ T8541] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 255.744813][ T8548] sctp: [Deprecated]: syz.1.718 (pid 8548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.744813][ T8548] Use struct sctp_sack_info instead [ 255.767070][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.849596][ T8550] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.921239][ T8554] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.992830][ T8564] nbd: must specify a size in bytes for the device [ 256.024882][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032ebb800: abort rx timeout. Force session deactivation [ 256.426914][ T8575] netlink: 'syz.4.723': attribute type 2 has an invalid length. [ 256.446566][ T8576] __nla_validate_parse: 3 callbacks suppressed [ 256.446585][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 256.450577][ T8575] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 256.716260][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 256.824522][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 257.897271][ T8581] »»»»»»: renamed from macvtap0 (while UP) [ 258.041152][ T8617] netlink: 'syz.1.730': attribute type 21 has an invalid length. [ 258.160766][ T8617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.730'. [ 258.358138][ T8636] netlink: 'syz.0.733': attribute type 23 has an invalid length. [ 258.596978][ T8646] sctp: [Deprecated]: syz.1.737 (pid 8646) Use of int in max_burst socket option deprecated. [ 258.596978][ T8646] Use struct sctp_assoc_value instead [ 258.690652][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.722550][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 259.403953][ T8674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.745'. [ 259.500334][ T8676] bridge4: entered promiscuous mode [ 259.542906][ T8676] bridge4: entered allmulticast mode [ 259.605593][ T8676] team0: Port device bridge4 added [ 259.845611][ T8682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.895902][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 260.119859][ T8696] netlink: 'syz.4.750': attribute type 2 has an invalid length. [ 260.128828][ T8696] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 260.142768][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'. [ 260.630108][ T8721] xt_CT: No such helper "snmp" [ 260.873420][ T8736] bridge0: entered promiscuous mode [ 260.938942][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.961346][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 260.976666][ T8733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.044780][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.104639][ T8736] bridge_slave_1 (unregistering): left allmulticast mode [ 261.123580][ T8736] bridge_slave_1 (unregistering): left promiscuous mode [ 261.131922][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.236135][ T8730] bridge0: left promiscuous mode [ 261.528536][ T8780] netlink: 'syz.3.769': attribute type 7 has an invalid length. [ 261.552637][ T8782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'. [ 261.564735][ T8783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.766'. [ 261.580765][ T8781] netlink: 'syz.3.769': attribute type 7 has an invalid length. [ 261.601367][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 261.611032][ T8783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.766'. [ 261.621774][ T8784] ip6t_REJECT: ECHOREPLY is not supported [ 261.712776][ T8778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 261.873875][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 262.454048][ T8818] x_tables: duplicate underflow at hook 1 [ 262.479410][ T8821] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 262.548702][ T8821] batman_adv: batadv0: Adding interface: ip6gretap1 [ 262.581166][ T8821] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.619463][ T8821] batman_adv: batadv0: Interface activated: ip6gretap1 [ 262.745305][ T8834] smc: net device bond0 erased user defined pnetid SYZ2 [ 262.933001][ T8842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.961440][ T8850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.790'. [ 263.226293][ T8864] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 263.229775][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 263.317090][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 263.396478][ T8867] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 263.459253][ T8867] netlink: 'syz.3.794': attribute type 2 has an invalid length. [ 263.647950][ T8872] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 263.666727][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.1.797 Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 PREEMPT(full) [ 263.666755][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.666777][ T8872] Call Trace: [ 263.666788][ T8872] [ 263.666796][ T8872] dump_stack_lvl+0x189/0x250 [ 263.666830][ T8872] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.666853][ T8872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.666887][ T8872] ? __pfx__printk+0x10/0x10 [ 263.666909][ T8872] ? kernfs_path_from_node+0x2b/0x260 [ 263.666938][ T8872] ? kernfs_path_from_node+0x216/0x260 [ 263.666967][ T8872] sysfs_warn_dup+0x8e/0xa0 [ 263.666992][ T8872] sysfs_do_create_link_sd+0xc0/0x110 [ 263.667021][ T8872] device_add_class_symlinks+0x1cf/0x240 [ 263.667049][ T8872] device_add+0x475/0xb50 [ 263.667077][ T8872] wiphy_register+0x199a/0x26b0 [ 263.667120][ T8872] ? __pfx_wiphy_register+0x10/0x10 [ 263.667143][ T8872] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 263.667178][ T8872] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 263.667210][ T8872] ieee80211_register_hw+0x33e1/0x4120 [ 263.667246][ T8872] ? ieee80211_register_hw+0x1491/0x4120 [ 263.667273][ T8872] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 263.667295][ T8872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 263.667321][ T8872] ? __hrtimer_setup+0x187/0x210 [ 263.667349][ T8872] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 263.667375][ T8872] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 263.667425][ T8872] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 263.667443][ T8872] ? trace_kmalloc+0x1f/0xd0 [ 263.667464][ T8872] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 263.667493][ T8872] ? kstrndup+0xbf/0x160 [ 263.667523][ T8872] hwsim_new_radio_nl+0xea4/0x1b10 [ 263.667545][ T8872] ? __pfx___nla_validate_parse+0x10/0x10 [ 263.667584][ T8872] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 263.667615][ T8872] ? __nla_parse+0x40/0x60 [ 263.667641][ T8872] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 263.667671][ T8872] genl_family_rcv_msg_doit+0x215/0x300 [ 263.667697][ T8872] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 263.667730][ T8872] ? bpf_lsm_capable+0x9/0x20 [ 263.667756][ T8872] ? security_capable+0x7e/0x2e0 [ 263.667783][ T8872] genl_rcv_msg+0x60e/0x790 [ 263.667808][ T8872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.667826][ T8872] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 263.667861][ T8872] netlink_rcv_skb+0x21c/0x490 [ 263.667914][ T8872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 263.667937][ T8872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.667990][ T8872] ? down_read+0x1ad/0x2e0 [ 263.668018][ T8872] genl_rcv+0x28/0x40 [ 263.668036][ T8872] netlink_unicast+0x758/0x8d0 [ 263.668073][ T8872] netlink_sendmsg+0x805/0xb30 [ 263.668111][ T8872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.668143][ T8872] ? aa_sock_msg_perm+0x94/0x160 [ 263.668170][ T8872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.668192][ T8872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.668221][ T8872] __sock_sendmsg+0x219/0x270 [ 263.668248][ T8872] ____sys_sendmsg+0x505/0x830 [ 263.668284][ T8872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.668323][ T8872] ? import_iovec+0x74/0xa0 [ 263.668356][ T8872] ___sys_sendmsg+0x21f/0x2a0 [ 263.668388][ T8872] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.668459][ T8872] ? __fget_files+0x2a/0x420 [ 263.668485][ T8872] ? __fget_files+0x3a0/0x420 [ 263.668523][ T8872] __x64_sys_sendmsg+0x19b/0x260 [ 263.668555][ T8872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.668603][ T8872] ? do_syscall_64+0xba/0x210 [ 263.668630][ T8872] do_syscall_64+0xf6/0x210 [ 263.668654][ T8872] ? clear_bhb_loop+0x60/0xb0 [ 263.668678][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.668697][ T8872] RIP: 0033:0x7f5ffad8e969 [ 263.668732][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.668750][ T8872] RSP: 002b:00007f5ffbc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.668772][ T8872] RAX: ffffffffffffffda RBX: 00007f5ffafb5fa0 RCX: 00007f5ffad8e969 [ 263.668786][ T8872] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 263.668798][ T8872] RBP: 00007f5ffae10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 263.668811][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.668822][ T8872] R13: 0000000000000000 R14: 00007f5ffafb5fa0 R15: 00007ffc0060ca38 [ 263.668855][ T8872] [ 264.375603][ T8882] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 264.385312][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 265.268382][ T8897] syz.0.802 (8897) used greatest stack depth: 18168 bytes left [ 265.281540][ T8932] syz.4.813: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.343038][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.4.813 Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 PREEMPT(full) [ 265.343068][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.343081][ T8932] Call Trace: [ 265.343088][ T8932] [ 265.343098][ T8932] dump_stack_lvl+0x189/0x250 [ 265.343139][ T8932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.343170][ T8932] ? __pfx__printk+0x10/0x10 [ 265.343192][ T8932] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.343216][ T8932] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.343242][ T8932] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 265.343268][ T8932] warn_alloc+0x214/0x310 [ 265.343307][ T8932] ? __pfx_warn_alloc+0x10/0x10 [ 265.343338][ T8932] ? kasan_save_track+0x4f/0x80 [ 265.343362][ T8932] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 265.343388][ T8932] ? xskq_create+0x56/0x170 [ 265.343411][ T8932] ? __x64_sys_setsockopt+0x18b/0x220 [ 265.343439][ T8932] ? do_syscall_64+0xf6/0x210 [ 265.343461][ T8932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.343502][ T8932] __vmalloc_node_range_noprof+0x125/0x12c0 [ 265.343569][ T8932] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.343604][ T8932] ? __kasan_kmalloc+0x93/0xb0 [ 265.343638][ T8932] vmalloc_user_noprof+0x74/0x80 [ 265.343669][ T8932] ? xskq_create+0xbf/0x170 [ 265.343690][ T8932] xskq_create+0xbf/0x170 [ 265.343716][ T8932] xsk_init_queue+0xb0/0x110 [ 265.343741][ T8932] xsk_setsockopt+0x43f/0x710 [ 265.343765][ T8932] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.343799][ T8932] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 265.343823][ T8932] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.343855][ T8932] do_sock_setsockopt+0x257/0x3e0 [ 265.343886][ T8932] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 265.343911][ T8932] ? __fget_files+0x2a/0x420 [ 265.343943][ T8932] ? __fget_files+0x3a0/0x420 [ 265.343969][ T8932] ? __fget_files+0x2a/0x420 [ 265.344008][ T8932] __x64_sys_setsockopt+0x18b/0x220 [ 265.344043][ T8932] do_syscall_64+0xf6/0x210 [ 265.344067][ T8932] ? clear_bhb_loop+0x60/0xb0 [ 265.344092][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.344111][ T8932] RIP: 0033:0x7ff4dfb8e969 [ 265.344128][ T8932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.344144][ T8932] RSP: 002b:00007ff4e0a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.344181][ T8932] RAX: ffffffffffffffda RBX: 00007ff4dfdb6080 RCX: 00007ff4dfb8e969 [ 265.344196][ T8932] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 265.344208][ T8932] RBP: 00007ff4dfc10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 265.344220][ T8932] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.344232][ T8932] R13: 0000000000000000 R14: 00007ff4dfdb6080 R15: 00007fffabc7e2a8 [ 265.344275][ T8932] [ 265.346581][ T8932] Mem-Info: [ 265.661727][ T8932] active_anon:5148 inactive_anon:0 isolated_anon:0 [ 265.661727][ T8932] active_file:1418 inactive_file:39885 isolated_file:0 [ 265.661727][ T8932] unevictable:768 dirty:176 writeback:0 [ 265.661727][ T8932] slab_reclaimable:11024 slab_unreclaimable:100181 [ 265.661727][ T8932] mapped:29057 shmem:1362 pagetables:837 [ 265.661727][ T8932] sec_pagetables:0 bounce:0 [ 265.661727][ T8932] kernel_misc_reclaimable:0 [ 265.661727][ T8932] free:1340783 free_pcp:1009 free_cma:0 [ 265.744552][ T8932] Node 0 active_anon:20592kB inactive_anon:0kB active_file:5672kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116228kB dirty:704kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11644kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.802218][ T8932] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.834602][ T8932] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.901232][ T8932] lowmem_reserve[]: 0 2503 2503 2503 2503 [ 265.911529][ T8932] Node 0 DMA32 free:1435344kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21684kB inactive_anon:0kB active_file:5672kB inactive_file:159248kB unevictable:1536kB writepending:704kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:2936kB local_pcp:1292kB free_cma:0kB [ 265.981089][ T8932] lowmem_reserve[]: 0 0 0 0 0 [ 265.985893][ T8932] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 266.061511][ T8932] lowmem_reserve[]: 0 0 0 0 0 [ 266.081096][ T8932] Node 1 Normal free:3912428kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.131237][ T8932] lowmem_reserve[]: 0 0 0 0 0 [ 266.136195][ T8932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.149632][ T8932] Node 0 DMA32: 267*4kB (UME) 66*8kB (UME) 99*16kB (UME) 110*32kB (UE) 383*64kB (UME) 368*128kB (UME) 170*256kB (UM) 51*512kB (UM) 23*1024kB (UME) 8*2048kB (UME) 304*4096kB (M) = 1433068kB [ 266.169732][ T8932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 266.181795][ T8932] Node 1 Normal: 198*4kB (UME) 49*8kB (UME) 42*16kB (UME) 182*32kB (UME) 88*64kB (UME) 32*128kB (UME) 15*256kB (UM) 8*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3912448kB [ 266.203595][ T8932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.214196][ T8932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.224110][ T8932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.234035][ T8932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.243836][ T8932] 43508 total pagecache pages [ 266.248604][ T8932] 0 pages in swap cache [ 266.253230][ T8932] Free swap = 124996kB [ 266.257619][ T8932] Total swap = 124996kB [ 266.262208][ T8932] 2097051 pages RAM [ 266.266142][ T8932] 0 pages HighMem/MovableOnly [ 266.272005][ T8932] 424397 pages reserved [ 266.276290][ T8932] 0 pages cma reserved [ 266.877913][ T8960] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 266.920299][ T8963] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 267.167749][ T8968] __nla_validate_parse: 4 callbacks suppressed [ 267.167770][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 267.186220][ T8968] netlink: 'syz.4.825': attribute type 5 has an invalid length. [ 267.214971][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.825'. [ 267.250352][ T8968] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 267.264151][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.828'. [ 267.299237][ T8968] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 267.332306][ T8968] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 267.357024][ T8968] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 267.367356][ T8968] geneve2: entered promiscuous mode [ 267.377996][ T8968] geneve2: entered allmulticast mode [ 267.438905][ T8983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'. [ 267.489035][ T8985] netlink: 'syz.3.830': attribute type 7 has an invalid length. [ 267.527636][ T8985] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 267.551821][ T8985] netlink: 784 bytes leftover after parsing attributes in process `syz.3.830'. [ 267.563352][ T8989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'. [ 268.084359][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 268.113394][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 268.264493][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 268.326423][ T9031] netlink: 'syz.3.844': attribute type 12 has an invalid length. [ 268.360353][ T9032] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 268.874831][ T9044] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 268.886022][ T9044] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 268.899272][ T9045] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 268.915394][ T9045] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 269.069129][ T9047] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 269.271698][ T9056] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 269.331767][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 269.575776][ T9080] delete_channel: no stack [ 269.596122][ T9079] delete_channel: no stack [ 269.629070][ T9082] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 269.676844][ T9086] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 269.711406][ T9093] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 269.729836][ T9092] tipc: Enabling of bearer rejected, failed to enable media [ 269.827507][ T9095] syzkaller1: entered promiscuous mode [ 269.833266][ T9095] syzkaller1: entered allmulticast mode [ 269.948244][ T9106] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 270.088566][ T9112] batadv_slave_0: entered promiscuous mode [ 270.097715][ T9112] batadv_slave_0: entered allmulticast mode [ 270.137107][ T9114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.151329][ T9114] bridge0: port 3(bond3) entered blocking state [ 270.158374][ T9114] bridge0: port 3(bond3) entered disabled state [ 270.170907][ T9114] bond3: entered allmulticast mode [ 270.178556][ T9114] bond3: entered promiscuous mode [ 270.185018][ T9114] bridge0: port 3(bond3) entered blocking state [ 270.192168][ T9114] bridge0: port 3(bond3) entered forwarding state [ 270.210331][ T13] bridge0: port 3(bond3) entered disabled state [ 270.351984][ T9123] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 270.608215][ T9132] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 272.283656][ T9182] __nla_validate_parse: 13 callbacks suppressed [ 272.283679][ T9182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.892'. [ 272.464103][ T9183] syzkaller0: entered promiscuous mode [ 272.476993][ T9183] syzkaller0: entered allmulticast mode [ 273.001917][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.895'. [ 274.466301][ T9198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.896'. [ 274.498437][ T9202] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 274.528785][ T9202] syzkaller0: linktype set to 774 [ 274.759369][ T9212] Cannot find del_set index 1 as target [ 275.438109][ T9231] veth1_virt_wifi: entered promiscuous mode [ 275.461827][ T9231] netlink: 'syz.1.907': attribute type 8 has an invalid length. [ 275.505551][ T9231] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 275.896131][ T9255] netlink: 192 bytes leftover after parsing attributes in process `syz.3.912'. [ 275.938743][ T9259] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 276.075946][ T9257] netlink: 'syz.0.913': attribute type 39 has an invalid length. [ 276.159221][ T9259] netlink: 80 bytes leftover after parsing attributes in process `syz.0.913'. [ 276.313240][ T9276] veth1_macvtap: left promiscuous mode [ 276.318869][ T9276] macsec0: entered allmulticast mode [ 276.416218][ T9276] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 276.425142][ T9276] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 276.466753][ T9277] veth1_macvtap: entered promiscuous mode [ 276.476866][ T9277] veth1_macvtap: entered allmulticast mode [ 276.488159][ T9277] macsec0: left allmulticast mode [ 276.499108][ T9277] veth1_macvtap: left allmulticast mode [ 276.544919][ T9287] SET target dimension over the limit! [ 277.025369][ T9314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'. [ 277.089327][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'. [ 277.192903][ T9310] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 277.210482][ T9310] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 277.214184][ T9318] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 277.218431][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 277.327842][ T9318] bond2: entered promiscuous mode [ 277.346481][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 277.357103][ T9318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.536114][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 277.635859][ T9340] bond3: left allmulticast mode [ 277.648687][ T9340] bond3: left promiscuous mode [ 277.658256][ T9340] bridge0: port 3(bond3) entered disabled state [ 277.671228][ T9340] bridge_slave_1: left allmulticast mode [ 277.676907][ T9340] bridge_slave_1: left promiscuous mode [ 277.688855][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.701069][ T9340] bridge_slave_0: left allmulticast mode [ 277.706749][ T9340] bridge_slave_0: left promiscuous mode [ 277.715709][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.838131][ T9346] netlink: 256 bytes leftover after parsing attributes in process `syz.2.934'. [ 278.127614][ T9371] netlink: 'syz.2.942': attribute type 4 has an invalid length. [ 278.179251][ T9374] netlink: 'syz.2.942': attribute type 4 has an invalid length. [ 278.380172][ T9385] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 278.389890][ T9385] veth1_macvtap: left promiscuous mode [ 278.412697][ T9385] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 278.539192][ T9394] syz.0.950 (9394) used obsolete PPPIOCDETACH ioctl [ 278.574842][ T9394] ip6tnl1: entered promiscuous mode [ 278.583228][ T9394] ip6tnl1: entered allmulticast mode [ 278.997155][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 279.017965][ T9420] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 279.028080][ T9420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.031652][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 279.058723][ T9420] openvswitch: netlink: IPv4 tun info is not correct [ 279.078030][ T9420] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 279.088355][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 279.177180][ T9426] netlink: 100 bytes leftover after parsing attributes in process `syz.4.961'. [ 279.188388][ T9429] netlink: 228 bytes leftover after parsing attributes in process `syz.2.962'. [ 279.198208][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 279.467020][ T9440] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 279.623856][ T8766] IPVS: starting estimator thread 0... [ 279.648543][ T9457] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 279.661858][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'. [ 279.725093][ T9455] IPVS: using max 30 ests per chain, 72000 per kthread [ 280.099586][ T9484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.139682][ T9484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.591369][ T9513] tipc: Can't bind to reserved service type 2 [ 280.610028][ T9511] lo: entered promiscuous mode [ 281.016267][ T9505] validate_nla: 1 callbacks suppressed [ 281.016287][ T9505] netlink: 'syz.3.982': attribute type 4 has an invalid length. [ 281.652574][ T9537] gretap0: entered promiscuous mode [ 281.798150][ T9542] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 281.966409][ T9553] ip6gretap0: entered promiscuous mode [ 281.993594][ T9553] ip6gretap0: left promiscuous mode [ 282.384241][ T9580] __nla_validate_parse: 12 callbacks suppressed [ 282.384261][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1002'. [ 282.587317][ T5828] Bluetooth: hci4: link tx timeout [ 282.593427][ T5828] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.769806][ T9569] x_tables: ip_tables: osf match: only valid for protocol 6 [ 283.076450][ T9610] tun0: tun_chr_ioctl cmd 1074025677 [ 283.105724][ T9610] tun0: linktype set to 773 [ 283.649551][ T9640] xt_connbytes: Forcing CT accounting to be enabled [ 283.682612][ T9640] xt_bpf: check failed: parse error [ 283.898409][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 283.922434][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1022'. [ 283.965926][ T9657] tun0: tun_chr_ioctl cmd 1074025677 [ 283.985596][ T9657] tun0: linktype set to 5 [ 283.993628][ T9655] tun0: tun_chr_ioctl cmd 1074025673 [ 284.640925][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 284.665649][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 285.163873][ T9710] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1038'. [ 285.291196][ T9710] netlink: 'syz.1.1038': attribute type 32 has an invalid length. [ 285.305930][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 285.359026][ T9710] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 285.642883][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1041'. [ 285.899773][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'. [ 285.937021][ T9737] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 285.939793][ T9739] netlink: 'syz.0.1043': attribute type 3 has an invalid length. [ 285.962371][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.019068][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 286.074675][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 286.523177][ T9770] netlink: 'syz.1.1052': attribute type 5 has an invalid length. [ 287.115250][ T9800] tap0: tun_chr_ioctl cmd 2148553947 [ 287.204731][ T9800] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.214530][ T9800] team0: Port device bond5 added [ 287.284986][ T9812] dvmrp8: entered allmulticast mode [ 287.499056][ T9801] dvmrp8: left allmulticast mode [ 287.683382][ T9831] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 287.704152][ T9831] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 288.264921][ T9872] __nla_validate_parse: 5 callbacks suppressed [ 288.264939][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 288.281844][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 288.291557][ T9872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1076'. [ 288.356681][ T5828] block nbd0: Receive control failed (result -107) [ 288.384619][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 288.432063][ T9872] nbd0: detected capacity change from 0 to 256 [ 288.443655][ T9873] 8021q: VLANs not supported on vcan0 [ 288.697285][ T9891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.755497][ T9879] syzkaller0: entered promiscuous mode [ 288.758493][ T9894] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 288.769998][ T9879] syzkaller0: entered allmulticast mode [ 289.315012][ T9917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1085'. [ 289.382929][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 291.744523][ T4841] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.853143][ T4841] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.999505][ T4841] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.213608][ T4841] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.262692][ T9975] batman_adv: batadv0: Adding interface: wlan0 [ 292.268914][ T9975] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.360616][ T9975] batman_adv: batadv0: Interface activated: wlan0 [ 292.528003][ T9988] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 292.796105][ T4841] bridge_slave_0: left allmulticast mode [ 292.839961][ T4841] bridge_slave_0: left promiscuous mode [ 292.848167][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.857846][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.867801][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.876611][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.886693][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.896781][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.769681][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.783678][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.794451][ T4841] bond0 (unregistering): Released all slaves [ 293.810069][ T4841] bond1 (unregistering): Released all slaves [ 293.902069][ T4841] bond2 (unregistering): Released all slaves [ 294.257817][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 294.288807][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 294.614631][T10046] Cannot find del_set index 16386 as target [ 294.635697][T10046] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1118'. [ 294.648046][T10046] netlink: 14152 bytes leftover after parsing attributes in process `syz.2.1118'. [ 294.691406][T10042] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 294.715935][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1118'. [ 294.876171][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 294.931689][T10053] x_tables: duplicate underflow at hook 3 [ 294.961194][ T5828] Bluetooth: hci2: command tx timeout [ 295.012633][T10003] chnl_net:caif_netlink_parms(): no params data found [ 295.133296][ T4841] hsr_slave_0: left promiscuous mode [ 295.148514][ T4841] hsr_slave_1: left promiscuous mode [ 295.162071][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.180298][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.188938][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.202277][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.261039][ T4841] veth0_macvtap: left promiscuous mode [ 295.267197][ T4841] veth1_vlan: left promiscuous mode [ 295.276972][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 295.293861][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1124'. [ 295.759176][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 295.805235][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 296.302714][T10077] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 296.476833][T10088] Bluetooth: MGMT ver 1.23 [ 296.535383][T10088] geneve2: entered promiscuous mode [ 296.544804][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.559950][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.577864][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 296.590220][T10003] bridge_slave_0: entered allmulticast mode [ 296.600822][T10003] bridge_slave_0: entered promiscuous mode [ 296.611252][T10003] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.625862][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.633441][T10003] bridge_slave_1: entered allmulticast mode [ 296.642912][T10003] bridge_slave_1: entered promiscuous mode [ 296.780085][T10003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.815672][T10003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.909085][T10003] team0: Port device team_slave_0 added [ 296.921442][T10003] team0: Port device team_slave_1 added [ 296.949281][ T4841] IPVS: stop unused estimator thread 0... [ 296.984226][T10003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.997339][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.026927][T10003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.041112][ T5828] Bluetooth: hci2: command tx timeout [ 297.052917][T10003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.059889][T10003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.088959][T10003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.232254][T10003] hsr_slave_0: entered promiscuous mode [ 297.239196][T10003] hsr_slave_1: entered promiscuous mode [ 297.417529][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1135'. [ 297.794909][T10101] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 298.149209][T10149] lo speed is unknown, defaulting to 1000 [ 298.158896][T10149] lo speed is unknown, defaulting to 1000 [ 298.177427][T10149] lo speed is unknown, defaulting to 1000 [ 298.286910][T10149] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.303487][T10163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 298.375966][T10149] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 298.411262][T10163] gtp0: entered promiscuous mode [ 298.416284][T10163] gtp0: entered allmulticast mode [ 298.448475][T10003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.489264][T10003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.504449][T10003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.504706][T10149] lo speed is unknown, defaulting to 1000 [ 298.535394][T10149] lo speed is unknown, defaulting to 1000 [ 298.542288][T10003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.578110][T10149] lo speed is unknown, defaulting to 1000 [ 298.605052][T10149] lo speed is unknown, defaulting to 1000 [ 298.613444][T10149] lo speed is unknown, defaulting to 1000 [ 298.755290][T10003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.795351][T10003] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.820396][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.828260][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.876859][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.884119][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.041175][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 299.121359][ T5828] Bluetooth: hci2: command tx timeout [ 299.186713][T10188] vlan0: entered promiscuous mode [ 299.192277][T10188] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 299.199529][T10188] vlan0: entered allmulticast mode [ 299.205036][T10188] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 299.217757][T10003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.445047][T10191] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 299.975617][T10003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.012702][T10218] xt_bpf: check failed: parse error [ 300.091672][T10221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.124248][T10223] vlan1: entered allmulticast mode [ 300.129439][T10223] bond0: entered allmulticast mode [ 300.137545][T10223] bond_slave_0: entered allmulticast mode [ 300.144860][T10223] bond_slave_1: entered allmulticast mode [ 300.223641][T10003] veth0_vlan: entered promiscuous mode [ 300.334801][T10003] veth1_vlan: entered promiscuous mode [ 300.358074][T10235] __nla_validate_parse: 4 callbacks suppressed [ 300.358092][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 300.405846][T10237] netlink: 'syz.1.1171': attribute type 29 has an invalid length. [ 300.430444][T10237] netlink: 'syz.1.1171': attribute type 29 has an invalid length. [ 300.442656][T10237] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1171'. [ 300.546752][T10003] veth0_macvtap: entered promiscuous mode [ 300.565104][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 300.595099][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 300.633965][T10248] C: renamed from team_slave_0 [ 300.647395][T10248] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1172'. [ 300.664607][T10248] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.687476][T10003] veth1_macvtap: entered promiscuous mode [ 300.715046][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 300.920081][T10003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.986645][T10003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.002277][T10275] xt_l2tp: missing protocol rule (udp|l2tpip) [ 301.129582][T10278] lo speed is unknown, defaulting to 1000 [ 301.190219][T10003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.201992][ T5828] Bluetooth: hci2: command tx timeout [ 301.231971][T10003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.253713][T10003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.269567][T10003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.513351][T10293] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 301.909156][T10293] bond2: entered promiscuous mode [ 301.924299][T10293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.103663][T10302] lo speed is unknown, defaulting to 1000 [ 302.479382][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 303.051244][T10345] netlink: 'syz.4.1197': attribute type 32 has an invalid length. [ 303.066389][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 303.099820][T10345] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 303.180505][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.206915][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.237665][ T4841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.254160][ T4841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.433970][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 303.538462][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 304.026984][ T4841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.158327][ T4841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.325138][ T4841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.365686][T10391] tipc: Enabling of bearer rejected, failed to enable media [ 304.386179][T10391] tipc: Enabling of bearer rejected, failed to enable media [ 304.436747][T10392] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004 [ 304.455463][ T4841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.650142][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.659350][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.668489][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.677326][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.692051][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.726414][T10398] pim6reg1: entered promiscuous mode [ 304.761388][T10398] pim6reg1: entered allmulticast mode [ 304.847245][T10414] netlink: 'syz.3.1215': attribute type 15 has an invalid length. [ 304.883765][T10403] lo speed is unknown, defaulting to 1000 [ 305.096187][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 305.136864][T10429] netlink: 'syz.4.1219': attribute type 21 has an invalid length. [ 305.141704][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 305.180930][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 305.189082][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 305.200653][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 305.208656][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 305.218386][ T8759] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 305.226875][ T8759] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 17/19 [ 305.236478][ T8759] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 305.257276][ T4841] bridge_slave_1: left allmulticast mode [ 305.286958][ T4841] bridge_slave_1: left promiscuous mode [ 305.313707][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.455666][ T4841] bridge_slave_0: left allmulticast mode [ 305.466364][ T4841] bridge_slave_0: left promiscuous mode [ 305.486817][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.629386][T10450] __nla_validate_parse: 10 callbacks suppressed [ 305.629407][T10450] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1225'. [ 306.439880][T10479] IPVS: set_ctl: invalid protocol: 44 172.30.0.5:20004 [ 306.472096][T10482] netlink: 'syz.1.1235': attribute type 4 has an invalid length. [ 306.705027][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.721937][ T5828] Bluetooth: hci2: command tx timeout [ 306.736233][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.798998][ T4841] bond0 (unregistering): Released all slaves [ 306.946488][T10449] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 306.981201][T10449] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 308.800551][ T5828] Bluetooth: hci2: command tx timeout [ 309.815065][T10497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.824747][T10497] bond_slave_0: left allmulticast mode [ 309.837508][T10497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.846764][T10497] bond_slave_1: left allmulticast mode [ 309.854266][T10497] bond0 (unregistering): Released all slaves [ 309.993834][T10511] smc: net device bond0 applied user defined pnetid SYZ2 [ 310.274284][T10526] tipc: Enabling of bearer rejected, failed to enable media [ 310.437034][T10534] netlink: 'syz.1.1248': attribute type 33 has an invalid length. [ 310.455294][T10534] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1248'. [ 310.531097][ T4841] hsr_slave_0: left promiscuous mode [ 310.545883][ T4841] hsr_slave_1: left promiscuous mode [ 310.564919][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.621088][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.738883][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.749393][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.803338][T10537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1247'. [ 310.812780][ T4841] veth1_macvtap: left promiscuous mode [ 310.812878][ T4841] veth0_macvtap: left promiscuous mode [ 310.813075][ T4841] veth1_vlan: left promiscuous mode [ 310.833291][ T4841] veth0_vlan: left promiscuous mode [ 310.884142][ T5828] Bluetooth: hci2: command tx timeout [ 311.118755][T10553] sctp: [Deprecated]: syz.2.1252 (pid 10553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.118755][T10553] Use struct sctp_sack_info instead [ 311.343276][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 311.386322][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 311.726040][T10403] chnl_net:caif_netlink_parms(): no params data found [ 311.750153][T10525] lo speed is unknown, defaulting to 1000 [ 311.830798][T10561] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 312.188480][T10579] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1258'. [ 312.286187][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.306749][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.328324][T10403] bridge_slave_0: entered allmulticast mode [ 312.337094][T10403] bridge_slave_0: entered promiscuous mode [ 312.346760][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.354935][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.365411][T10403] bridge_slave_1: entered allmulticast mode [ 312.373715][T10403] bridge_slave_1: entered promiscuous mode [ 312.381746][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 312.427915][T10587] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 312.438685][T10587] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 312.486813][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.537012][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.624520][T10403] team0: Port device team_slave_0 added [ 312.638749][T10403] team0: Port device team_slave_1 added [ 312.771231][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.785669][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.851407][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.860345][T10602] netlink: 'syz.3.1267': attribute type 11 has an invalid length. [ 312.886397][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.893958][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.922401][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.960753][ T5828] Bluetooth: hci2: command tx timeout [ 313.136635][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 313.168806][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1270'. [ 313.220986][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 313.316438][T10403] hsr_slave_0: entered promiscuous mode [ 313.412106][T10403] hsr_slave_1: entered promiscuous mode [ 313.474570][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1271'. [ 313.498500][T10612] lo speed is unknown, defaulting to 1000 [ 313.519505][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 314.091727][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 314.187105][T10644] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.367334][T10644] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.661935][T10644] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.742161][T10644] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.817079][T10674] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 314.828072][T10672] syzkaller1: entered promiscuous mode [ 314.834140][T10672] syzkaller1: entered allmulticast mode [ 314.875875][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 314.907968][T10674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.925478][T10671] lo speed is unknown, defaulting to 1000 [ 315.047018][T10644] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.104579][T10644] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.183970][T10644] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.286127][T10644] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.925844][T10717] netlink: 'syz.4.1292': attribute type 5 has an invalid length. [ 316.109555][T10717] ip6erspan0: entered allmulticast mode [ 316.168001][T10403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.230946][T10728] xt_TPROXY: Can be used only with -p tcp or -p udp [ 316.292947][T10712] lo speed is unknown, defaulting to 1000 [ 316.329422][T10403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.450245][T10720] lo speed is unknown, defaulting to 1000 [ 316.484207][T10403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.508976][T10403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.649747][T10717] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 317.207504][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.216804][T10750] __nla_validate_parse: 2 callbacks suppressed [ 317.216822][T10750] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1298'. [ 317.457254][T10760] lo speed is unknown, defaulting to 1000 [ 317.584560][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.635091][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.698762][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.706078][ T4841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.740010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.747228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.040188][T10786] lo speed is unknown, defaulting to 1000 [ 318.308308][T10786] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 318.406896][T10772] syzkaller0: entered allmulticast mode [ 318.519479][T10799] netlink: 'syz.4.1304': attribute type 3 has an invalid length. [ 318.574231][T10803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1305'. [ 318.898158][T10803] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 320.402562][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.483280][T10819] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1310'. [ 320.544788][T10403] veth0_vlan: entered promiscuous mode [ 320.586027][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 320.655086][T10403] veth1_vlan: entered promiscuous mode [ 320.773587][T10403] veth0_macvtap: entered promiscuous mode [ 320.808154][T10403] veth1_macvtap: entered promiscuous mode [ 320.857967][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.877969][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.923891][T10403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.935387][T10403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.947308][T10403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.958574][T10403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.015742][T10846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1318'. [ 321.038291][T10846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1318'. [ 321.103714][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.145196][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.176614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.190310][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.215228][ T30] audit: type=1800 audit(1747637080.622:7): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1319" name="memory.events" dev="tmpfs" ino=1258 res=0 errno=0 [ 321.280288][ T30] audit: type=1804 audit(1747637080.682:8): pid=10850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1319" name="memory.events" dev="tmpfs" ino=1258 res=1 errno=0 [ 321.330156][T10852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 321.333756][T10850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.339501][T10852] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1320'. [ 321.377852][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 321.387561][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 321.438936][T10850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.508172][T10850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.575996][T10850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.597423][T10860] openvswitch: netlink: IPv6 tunnel dst address is zero [ 321.623172][T10862] tipc: Enabling of bearer rejected, failed to enable media [ 321.712850][T10850] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.744900][T10850] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.809142][T10850] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.928976][T10850] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.064550][T10871] xt_CT: No such helper "pptp" [ 322.336256][ T4841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.597672][ T4841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.627049][T10903] __nla_validate_parse: 4 callbacks suppressed [ 322.627067][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 322.667124][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 322.701205][T10904] sch_tbf: peakrate 2 is lower than or equals to rate 6 ! [ 322.706850][T10910] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1334'. [ 322.740879][T10910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1334'. [ 322.753595][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 322.807469][T10912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1335'. [ 322.819812][T10912] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1335'. [ 322.830688][T10912] netlink: 'syz.1.1335': attribute type 5 has an invalid length. [ 322.839874][T10912] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1335'. [ 322.905060][ T4841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.074873][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.094539][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.104653][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.113834][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.121818][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.139138][ T4841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.206374][T10924] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 323.467369][T10942] netlink: 'syz.1.1343': attribute type 11 has an invalid length. [ 323.675586][T10920] lo speed is unknown, defaulting to 1000 [ 323.728782][ T4841] bridge_slave_1: left allmulticast mode [ 323.754418][ T4841] bridge_slave_1: left promiscuous mode [ 323.769221][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.793236][ T4841] bridge_slave_0: left allmulticast mode [ 323.802322][ T4841] bridge_slave_0: left promiscuous mode [ 323.808247][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.178493][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.205666][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.218813][ T4841] bond0 (unregistering): Released all slaves [ 324.270503][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1347'. [ 324.327307][T10962] geneve1: entered promiscuous mode [ 324.372214][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1347'. [ 324.625030][T10975] netlink: 'syz.1.1350': attribute type 29 has an invalid length. [ 324.778309][T10987] sctp: [Deprecated]: syz.1.1352 (pid 10987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.778309][T10987] Use struct sctp_sack_info instead [ 324.783425][T10966] lo speed is unknown, defaulting to 1000 [ 324.795619][T10987] sctp: [Deprecated]: syz.1.1352 (pid 10987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.795619][T10987] Use struct sctp_sack_info instead [ 325.146198][ T4841] hsr_slave_0: left promiscuous mode [ 325.154813][ T4841] hsr_slave_1: left promiscuous mode [ 325.178370][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.188266][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.199509][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.201460][ T5828] Bluetooth: hci2: command tx timeout [ 325.224510][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.257064][ T4841] veth1_macvtap: left promiscuous mode [ 325.265793][ T4841] veth0_macvtap: left promiscuous mode [ 325.284414][ T4841] veth1_vlan: left promiscuous mode [ 325.297819][ T4841] veth0_vlan: left promiscuous mode [ 325.953239][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 325.993957][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 326.445883][T11004] lo speed is unknown, defaulting to 1000 [ 326.896328][T10920] chnl_net:caif_netlink_parms(): no params data found [ 327.228307][T10920] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.243824][T10920] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.278570][T10920] bridge_slave_0: entered allmulticast mode [ 327.281204][ T5828] Bluetooth: hci2: command tx timeout [ 327.286903][T10920] bridge_slave_0: entered promiscuous mode [ 327.325288][T10920] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.338565][T10920] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.346463][T10920] bridge_slave_1: entered allmulticast mode [ 327.359866][T10920] bridge_slave_1: entered promiscuous mode [ 327.367850][T11043] lo speed is unknown, defaulting to 1000 [ 327.563280][T10920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.595517][T10920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.887056][T10920] team0: Port device team_slave_0 added [ 328.092137][T10920] team0: Port device team_slave_1 added [ 328.232950][T11092] __nla_validate_parse: 43 callbacks suppressed [ 328.232968][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 328.248646][T11092] netlink: 'syz.1.1375': attribute type 9 has an invalid length. [ 328.306140][T11093] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 328.337656][T11092] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 328.346890][T11092] macvlan0: entered allmulticast mode [ 328.352406][T11092] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 328.386210][T10920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.426505][T10920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.458993][T10920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.523078][T10920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.532860][T10920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.559816][T10920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.785825][T10920] hsr_slave_0: entered promiscuous mode [ 328.829603][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 328.851681][T10920] hsr_slave_1: entered promiscuous mode [ 328.875767][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 329.361180][ T5828] Bluetooth: hci2: command tx timeout [ 329.887333][T11117] veth0_to_batadv: left promiscuous mode [ 329.898731][T11117] veth0_to_batadv: left allmulticast mode [ 329.943212][T11117] veth1_virt_wifi: left promiscuous mode [ 330.164019][T11117] ip6tnl1: left promiscuous mode [ 330.169247][T11117] ip6tnl1: left allmulticast mode [ 330.193648][T11117] vxcan3: left allmulticast mode [ 330.216219][T11117] bond1: left promiscuous mode [ 330.221180][T11117] bond1: left allmulticast mode [ 330.236473][T11117] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.245056][T11117] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.253788][T11117] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.262265][T11117] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.271602][T11117] geneve2: left promiscuous mode [ 330.287419][T11117] gtp0: left promiscuous mode [ 330.292681][T11117] gtp0: left allmulticast mode [ 330.315578][T11117] vlan0: left promiscuous mode [ 330.320825][T11117] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 330.327758][T11117] vlan0: left allmulticast mode [ 330.333215][T11117] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 330.341318][T11117] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 330.348284][T11117] macvlan0: left allmulticast mode [ 330.467138][T11127] openvswitch: netlink: Flow key attr not present in new flow. [ 330.835022][T11122] hid-generic 0005:0B57:0401.0002: collection stack underflow [ 330.842914][T11122] hid-generic 0005:0B57:0401.0002: item 0 0 0 12 parsing failed [ 330.857896][T11122] hid-generic 0005:0B57:0401.0002: probe with driver hid-generic failed with error -22 [ 330.886854][T11137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.206332][T11153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1396'. [ 331.442194][ T5828] Bluetooth: hci2: command tx timeout [ 331.593093][T10920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.661312][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1401'. [ 331.672079][T10920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.739520][T10920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.767047][T10920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.882035][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 331.952469][T10920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.036192][T10920] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.074690][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 332.115177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.122510][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.205514][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.212841][ T7258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.357525][T11200] Cannot find add_set index 0 as target [ 332.493422][T11209] lo speed is unknown, defaulting to 1000 [ 332.518975][T11210] lo speed is unknown, defaulting to 1000 [ 333.404250][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 333.627286][T10920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.733025][T11249] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 333.864427][T11260] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 333.919963][T10920] veth0_vlan: entered promiscuous mode [ 333.966708][T10920] veth1_vlan: entered promiscuous mode [ 334.025031][T10920] veth0_macvtap: entered promiscuous mode [ 334.047430][T10920] veth1_macvtap: entered promiscuous mode [ 334.069264][T10920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.104345][T10920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.143169][T10920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.168967][T10920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.183838][T10920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.193049][T10920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.210008][T11277] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 334.327180][T11278] lo speed is unknown, defaulting to 1000 [ 334.354096][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 334.364518][T11277] lo speed is unknown, defaulting to 1000 [ 334.384235][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 334.415507][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.424543][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.551262][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.578855][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.704431][T11289] lo speed is unknown, defaulting to 1000 [ 334.969968][T11297] lo speed is unknown, defaulting to 1000 [ 334.993103][T11301] x_tables: duplicate underflow at hook 2 [ 335.293732][T11312] x_tables: duplicate underflow at hook 1 [ 335.539355][T11326] netlink: 'syz.4.1443': attribute type 1 has an invalid length. [ 335.549661][T11326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1443'. [ 335.733630][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1447'. [ 335.922548][ T12] wlan1: Trigger new scan to find an IBSS to join [ 335.968005][T11350] bond6: entered promiscuous mode [ 335.978949][T11350] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.998763][T11341] tipc: Enabling of bearer rejected, failed to enable media [ 336.148769][T11362] lo speed is unknown, defaulting to 1000 [ 336.251072][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 336.317784][T11372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 336.650988][ T7258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.820170][ T7258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.884426][ T7258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.004571][ T7258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.125952][ T7258] bridge_slave_1: left allmulticast mode [ 337.133577][ T7258] bridge_slave_1: left promiscuous mode [ 337.139962][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.149901][ T7258] bridge_slave_0: left allmulticast mode [ 337.156158][ T7258] bridge_slave_0: left promiscuous mode [ 337.162438][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.866526][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.887685][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.895559][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.918056][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.933881][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.117253][ T7258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.149752][ T7258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.178480][ T7258] bond0 (unregistering): Released all slaves [ 338.319568][T11414] lo speed is unknown, defaulting to 1000 [ 338.758960][T11436] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1468'. [ 338.870321][ T7258] hsr_slave_0: left promiscuous mode [ 338.881361][ T7258] hsr_slave_1: left promiscuous mode [ 338.891832][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.902799][ T7258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.912247][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.920003][ T7258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.962293][ T7258] veth1_macvtap: left promiscuous mode [ 338.963933][ T12] wlan1: Trigger new scan to find an IBSS to join [ 338.975390][ T7258] veth0_macvtap: left promiscuous mode [ 338.991064][ T7258] veth1_vlan: left promiscuous mode [ 338.999136][ T7258] veth0_vlan: left promiscuous mode [ 339.856528][ T7258] team0 (unregistering): Port device team_slave_1 removed [ 339.906314][ T7258] team0 (unregistering): Port device team_slave_0 removed [ 340.012471][ T5835] Bluetooth: hci2: command tx timeout [ 340.473154][T11472] sctp: [Deprecated]: syz.1.1476 (pid 11472) Use of int in max_burst socket option. [ 340.473154][T11472] Use struct sctp_assoc_value instead [ 340.473892][T11414] chnl_net:caif_netlink_parms(): no params data found [ 340.697122][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.705755][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.724701][T11414] bridge_slave_0: entered allmulticast mode [ 340.734493][T11414] bridge_slave_0: entered promiscuous mode [ 340.744740][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.754449][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.770296][T11414] bridge_slave_1: entered allmulticast mode [ 340.779371][T11414] bridge_slave_1: entered promiscuous mode [ 340.861543][T11494] netlink: 'syz.4.1482': attribute type 5 has an invalid length. [ 340.876500][T11495] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 340.883363][T11495] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 340.900083][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.926829][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.034126][T11491] lo speed is unknown, defaulting to 1000 [ 341.055589][T11414] team0: Port device team_slave_0 added [ 341.100284][T11414] team0: Port device team_slave_1 added [ 341.115247][T11510] netem: change failed [ 341.214943][T11511] tipc: Enabled bearer , priority 0 [ 341.317633][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.326815][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.356928][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.385068][T11523] tipc: Resetting bearer [ 341.408377][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.416298][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.444815][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.551617][T11522] syzkaller0: entered promiscuous mode [ 341.557226][T11522] syzkaller0: entered allmulticast mode [ 341.590163][T11414] hsr_slave_0: entered promiscuous mode [ 341.597688][T11414] hsr_slave_1: entered promiscuous mode [ 341.922405][ T7255] wlan1: Creating new IBSS network, BSSID 2e:90:f1:e8:9f:32 [ 342.081649][ T5835] Bluetooth: hci2: command tx timeout [ 343.215246][T11546] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 343.477472][T11566] openvswitch: netlink: Actions may not be safe on all matching packets [ 343.490225][T11566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1503'. [ 343.528587][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 343.684331][T11577] netlink: 'syz.3.1504': attribute type 5 has an invalid length. [ 343.777301][T11581] netlink: 'syz.1.1507': attribute type 9 has an invalid length. [ 343.785707][T11581] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.1507'. [ 343.786706][T11579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1506'. [ 343.816276][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1507'. [ 343.879036][T11572] lo speed is unknown, defaulting to 1000 [ 344.160953][ T5835] Bluetooth: hci2: command tx timeout [ 344.360770][T11602] sctp: [Deprecated]: syz.1.1512 (pid 11602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.360770][T11602] Use struct sctp_sack_info instead [ 344.745424][T11619] netlink: 'syz.1.1516': attribute type 6 has an invalid length. [ 344.811701][T11616] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 344.874012][T11414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.933829][T11414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.963540][T11414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.978428][T11414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.984180][T11623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1517'. [ 345.120037][T11414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.155678][T11414] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.166813][T11628] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 345.189079][T11630] SET target dimension over the limit! [ 345.220284][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.227613][ T7255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.244018][T11626] lo speed is unknown, defaulting to 1000 [ 345.246592][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.256916][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.352734][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 345.367443][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1522'. [ 345.660066][T11650] netlink: 'syz.3.1524': attribute type 3 has an invalid length. [ 345.741360][T11414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.915110][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1526'. [ 345.926441][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1526'. [ 346.034499][T11414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.068966][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 346.109034][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 346.241569][ T5835] Bluetooth: hci2: command tx timeout [ 346.313606][T11414] veth0_vlan: entered promiscuous mode [ 346.337783][T11414] veth1_vlan: entered promiscuous mode [ 346.404773][T11414] veth0_macvtap: entered promiscuous mode [ 346.424677][T11414] veth1_macvtap: entered promiscuous mode [ 346.486686][T11682] hsr0: entered promiscuous mode [ 346.503547][T11682] macvtap1: entered promiscuous mode [ 346.517697][T11682] macvtap1: entered allmulticast mode [ 346.523893][T11682] hsr0: entered allmulticast mode [ 346.529026][T11682] hsr_slave_0: entered allmulticast mode [ 346.553485][T11682] hsr_slave_1: entered allmulticast mode [ 346.622866][T11682] hsr0: left allmulticast mode [ 346.627698][T11682] hsr_slave_0: left allmulticast mode [ 346.684492][T11682] hsr_slave_1: left allmulticast mode [ 346.756355][T11414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.839110][T11414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.893165][T11414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.915712][T11414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.937578][T11414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.966862][T11414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.187505][T11726] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 347.197985][T11726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.223450][ T8768] lo speed is unknown, defaulting to 1000 [ 347.309961][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.327898][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.374131][ T7258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.383836][ T7258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.563473][T11741] veth0_to_bond: entered promiscuous mode [ 347.595474][T11741] veth0_to_bond (unregistering): left promiscuous mode [ 348.162309][T11759] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 348.481929][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.493116][T11768] netlink: 'syz.4.1556': attribute type 27 has an invalid length. [ 348.514497][T11768] lo: left promiscuous mode [ 349.026902][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.138219][T11768] 0ªX¹¦À: left allmulticast mode [ 349.407188][T11775] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 349.435783][T11775] __nla_validate_parse: 191 callbacks suppressed [ 349.435803][T11775] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1558'. [ 349.545433][T11768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.581098][T11768] batadv_slave_0: left promiscuous mode [ 349.586802][T11768] batadv_slave_0: left allmulticast mode [ 349.705352][T11768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.799303][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.808394][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.816375][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.824921][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.836480][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.149444][T11768] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.162516][T11768] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.180682][T11768] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.189292][T11768] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.231459][T11768] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 350.249635][T11768] macvtap1: left promiscuous mode [ 350.267924][T11768] macvtap1: left allmulticast mode [ 350.274413][T11768] bridge4: left promiscuous mode [ 350.279391][T11768] bridge4: left allmulticast mode [ 350.292435][T11768] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.308698][T11768] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.317064][T11768] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.328459][T11768] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 350.338084][T11768] geneve2: left promiscuous mode [ 350.343428][T11768] geneve2: left allmulticast mode [ 350.374821][T11768] bond2: left promiscuous mode [ 350.388873][T11768] ip6erspan0: left allmulticast mode [ 350.459416][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.471414][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.493513][T11767] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 350.525740][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.554481][ T24] syz0: Port: 1 Link DOWN [ 350.586826][T11786] lo speed is unknown, defaulting to 1000 [ 350.662252][T11783] lo speed is unknown, defaulting to 1000 [ 350.719858][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.934268][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.189292][T11814] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1566'. [ 351.367910][T11827] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 351.379206][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'. [ 351.388638][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1570'. [ 351.421926][ T36] bridge_slave_1: left allmulticast mode [ 351.451426][ T36] bridge_slave_1: left promiscuous mode [ 351.457238][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.494664][ T36] bridge_slave_0: left allmulticast mode [ 351.516232][ T36] bridge_slave_0: left promiscuous mode [ 351.529480][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.549170][T11838] blkio.reset_stats is deprecated [ 351.831081][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 351.921224][ T5828] Bluetooth: hci2: command tx timeout [ 352.134799][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.149242][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.167863][ T36] bond0 (unregistering): Released all slaves [ 352.200118][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.217164][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.227130][T11846] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.239715][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.252333][T11847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1576'. [ 352.342892][T11864] ipvlan0: entered promiscuous mode [ 352.352234][T11864] bridge0: port 1(ipvlan0) entered blocking state [ 352.360446][T11864] bridge0: port 1(ipvlan0) entered disabled state [ 352.367114][T11864] ipvlan0: entered allmulticast mode [ 352.372600][T11864] bridge0: entered allmulticast mode [ 352.379537][T11864] ipvlan0: left allmulticast mode [ 352.384708][T11864] bridge0: left allmulticast mode [ 352.508550][T11837] lo speed is unknown, defaulting to 1000 [ 352.517823][T11870] tipc: Invalid UDP bearer configuration [ 352.517873][T11870] tipc: Enabling of bearer rejected, failed to enable media [ 352.667425][T11878] netlink: 'syz.1.1583': attribute type 4 has an invalid length. [ 352.880018][T11783] chnl_net:caif_netlink_parms(): no params data found [ 352.924137][ T36] hsr_slave_0: left promiscuous mode [ 352.937120][ T36] hsr_slave_1: left promiscuous mode [ 352.949534][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.957287][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.971366][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.978814][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.019708][ T36] veth1_macvtap: left promiscuous mode [ 353.034559][ T36] veth0_macvtap: left promiscuous mode [ 353.049583][ T36] veth1_vlan: left promiscuous mode [ 353.057942][ T36] veth0_vlan: left promiscuous mode [ 353.496759][ T36] team0 (unregistering): Port device team_slave_1 removed [ 353.536067][ T36] team0 (unregistering): Port device team_slave_0 removed [ 354.000950][ T5828] Bluetooth: hci2: command 0x041b tx timeout [ 354.260094][T11912] gretap0: left promiscuous mode [ 354.336154][T11926] netlink: 'syz.3.1592': attribute type 10 has an invalid length. [ 354.386506][T11912] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.478465][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.494691][T11912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.539130][T11912] vlan0: left promiscuous mode [ 354.558438][T11912] geneve1: left promiscuous mode [ 354.580862][T11912] geneve2: left promiscuous mode [ 354.587548][T11912] vlan2: left promiscuous mode [ 354.592481][T11912] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 354.599434][T11912] vlan2: left allmulticast mode [ 354.605636][T11912] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 354.614967][T11912] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.624159][T11912] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.632773][T11912] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.642695][T11912] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.759962][T11923] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (39785) ! [ 354.822313][ T8769] lo speed is unknown, defaulting to 1000 [ 354.828122][ T8769] s›z0: Port: 1 Link DOWN [ 354.845340][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.859872][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.906059][T11937] __nla_validate_parse: 8 callbacks suppressed [ 354.906082][T11937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1595'. [ 354.945683][T11783] bridge_slave_0: entered allmulticast mode [ 354.972375][T11783] bridge_slave_0: entered promiscuous mode [ 355.031968][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.077039][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.098144][T11783] bridge_slave_1: entered allmulticast mode [ 355.132105][T11783] bridge_slave_1: entered promiscuous mode [ 355.231174][T11938] lo speed is unknown, defaulting to 1000 [ 355.368828][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 355.451175][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 355.468205][T11943] lo speed is unknown, defaulting to 1000 [ 355.494501][T11947] bridge_slave_0: left allmulticast mode [ 355.500197][T11947] bridge_slave_0: left promiscuous mode [ 355.508647][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.619089][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.643435][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.723923][T11783] team0: Port device team_slave_0 added [ 355.745124][T11783] team0: Port device team_slave_1 added [ 355.848353][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.857157][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.885717][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.900306][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.909299][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.945926][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.030016][T11783] hsr_slave_0: entered promiscuous mode [ 356.037449][T11783] hsr_slave_1: entered promiscuous mode [ 356.081289][ T5835] Bluetooth: hci2: command 0x041b tx timeout [ 356.630488][T11960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.827118][T11783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.838262][T11783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.848778][T11783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.858910][T11783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.002311][ T30] audit: type=1800 audit(1747637116.412:9): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1609" name="memory.events" dev="tmpfs" ino=1631 res=0 errno=0 [ 357.031680][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.068510][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.092101][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.099314][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.115939][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.123195][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.370938][T12015] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 357.378729][T12015] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1612'. [ 357.418104][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 357.483400][T12020] pimreg: entered allmulticast mode [ 357.494705][T12021] 8021q: VLANs not supported on pimreg [ 357.505929][T12020] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 357.520634][T12021] pimreg: left allmulticast mode [ 357.526762][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 357.619054][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.691440][T11783] veth0_vlan: entered promiscuous mode [ 357.705727][T11783] veth1_vlan: entered promiscuous mode [ 357.784261][T12037] wg2: entered promiscuous mode [ 357.789174][T12037] wg2: entered allmulticast mode [ 357.831368][T11783] veth0_macvtap: entered promiscuous mode [ 357.857106][T11783] veth1_macvtap: entered promiscuous mode [ 357.908920][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.927835][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.940059][T11783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.953055][T11783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.962203][T11783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.971215][T11783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.164313][ T5828] Bluetooth: hci2: command 0x041b tx timeout [ 358.202409][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.223537][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.297994][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.348336][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.445971][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.463386][T12065] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1626'. [ 358.922486][T12084] netlink: 'syz.4.1632': attribute type 8 has an invalid length. [ 359.274254][T12100] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1636'. [ 359.403298][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.279283][T12117] netlink: 'syz.1.1644': attribute type 10 has an invalid length. [ 360.289341][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1644'. [ 360.300785][T12117] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.309142][T12117] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.317468][T12117] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.326215][T12117] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.339825][T12117] team0: Port device geneve0 added [ 360.413327][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.533744][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 360.579266][T12121] lo speed is unknown, defaulting to 1000 [ 361.324536][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.583620][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.040034][ T36] bridge_slave_1: left allmulticast mode [ 369.230504][ T36] bridge_slave_1: left promiscuous mode [ 369.236347][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.731713][ T36] bridge_slave_0: left allmulticast mode [ 369.737423][ T36] bridge_slave_0: left promiscuous mode [ 370.140652][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.656314][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.914879][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.341132][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.683186][ T36] bond0 (unregistering): Released all slaves [ 393.210676][ T36] hsr_slave_0: left promiscuous mode [ 393.390424][ T36] hsr_slave_1: left promiscuous mode [ 393.397656][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.880417][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.124445][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.490495][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.542842][ T36] veth1_macvtap: left promiscuous mode [ 396.548427][ T36] veth0_macvtap: left promiscuous mode [ 396.980656][ T36] veth1_vlan: left promiscuous mode [ 396.986094][ T36] veth0_vlan: left promiscuous mode [ 440.111021][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.570757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.690361][ T36] team0 (unregistering): Port device team_slave_1 removed [ 548.453734][ T36] team0 (unregistering): Port device team_slave_0 removed [ 552.720796][ T31] INFO: task kworker/u8:5:83 blocked for more than 143 seconds. [ 552.728505][ T31] Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 [ 553.150303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.159037][ T31] task:kworker/u8:5 state:D stack:22376 pid:83 tgid:83 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 553.840358][ T31] Workqueue: events_unbound linkwatch_event [ 553.846351][ T31] Call Trace: [ 553.849662][ T31] [ 554.240338][ T31] __schedule+0x16e2/0x4cd0 [ 554.244917][ T31] ? __lock_acquire+0xaac/0xd20 [ 554.249816][ T31] ? __lock_acquire+0xaac/0xd20 [ 554.730309][ T31] ? schedule+0x165/0x360 [ 554.734727][ T31] ? __pfx___schedule+0x10/0x10 [ 554.739634][ T31] ? schedule+0x91/0x360 [ 555.190346][ T31] schedule+0x165/0x360 [ 555.194597][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.200083][ T31] __mutex_lock+0x724/0xe80 [ 555.650454][ T31] ? __mutex_lock+0x51b/0xe80 [ 555.655443][ T31] ? linkwatch_event+0xe/0x60 [ 555.660155][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.150449][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.155722][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 556.520350][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 556.526152][ T31] linkwatch_event+0xe/0x60 [ 556.870430][ T31] process_scheduled_works+0xade/0x17a0 [ 556.876189][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.260402][ T31] worker_thread+0x8a0/0xda0 [ 557.265108][ T31] kthread+0x711/0x8a0 [ 557.269224][ T31] ? __pfx_worker_thread+0x10/0x10 [ 557.720304][ T31] ? __pfx_kthread+0x10/0x10 [ 557.724979][ T31] ? __pfx_kthread+0x10/0x10 [ 557.729598][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.200351][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.205643][ T31] ? __pfx_kthread+0x10/0x10 [ 558.540381][ T31] ret_from_fork+0x4b/0x80 [ 558.544961][ T31] ? __pfx_kthread+0x10/0x10 [ 558.549584][ T31] ret_from_fork_asm+0x1a/0x30 [ 558.970467][ T31] [ 559.080591][ T31] INFO: task syz.4.1642:12121 blocked for more than 149 seconds. [ 559.088392][ T31] Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 [ 559.630444][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.639185][ T31] task:syz.4.1642 state:D stack:26152 pid:12121 tgid:12111 ppid:5829 task_flags:0x400140 flags:0x00004006 [ 560.310538][ T31] Call Trace: [ 560.313898][ T31] [ 560.316854][ T31] __schedule+0x16e2/0x4cd0 [ 560.670433][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 560.676309][ T31] ? __lock_acquire+0xaac/0xd20 [ 561.020322][ T31] ? schedule+0x165/0x360 [ 561.024739][ T31] ? __pfx___schedule+0x10/0x10 [ 561.029720][ T31] ? schedule+0x91/0x360 [ 561.480400][ T31] schedule+0x165/0x360 [ 561.484641][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.490119][ T31] __mutex_lock+0x724/0xe80 [ 561.950525][ T31] ? __mutex_lock+0x51b/0xe80 [ 561.955301][ T31] ? ops_undo_list+0x2a4/0x990 [ 561.960102][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.460327][ T31] ? synchronize_rcu+0x11a/0x310 [ 562.465384][ T31] ? netns_bpf_run_array_detach+0x88/0x1a0