last executing test programs: 1m1.192813873s ago: executing program 0 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000053fe5fe9dba625a4d0a1cde0ba8d27656dec582091e7ea16f6fb333be6aad78f2f50459c91bb7748cc506a77d010e9f80bb501b6a7a1dfb17c4628a524a13a399f2a0136d63d23fc8959139db26779f041c4fea0fb0b80831c4181acbb5404510eaf80963669308b5a8de58600000000000000003e1cad4e10b139388496abac0260547bab6c790b121db49860b11ce7403eb0ba85724aae6adb32854b0fa3"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000040000000000000000fba70095000000000000001837000005000000000000000000000018000000040000000000000000000000180000000700000000000000010000003f562000000000009500000000000000214a0000ffffffff0000000000000000183300000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800a99075943d0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x303, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 48.690142115s ago: executing program 0 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000053fe5fe9dba625a4d0a1cde0ba8d27656dec582091e7ea16f6fb333be6aad78f2f50459c91bb7748cc506a77d010e9f80bb501b6a7a1dfb17c4628a524a13a399f2a0136d63d23fc8959139db26779f041c4fea0fb0b80831c4181acbb5404510eaf80963669308b5a8de58600000000000000003e1cad4e10b139388496abac0260547bab6c790b121db49860b11ce7403eb0ba85724aae6adb32854b0fa3"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000040000000000000000fba70095000000000000001837000005000000000000000000000018000000040000000000000000000000180000000700000000000000010000003f562000000000009500000000000000214a0000ffffffff0000000000000000183300000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800a99075943d0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x303, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 35.455091752s ago: executing program 0 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000053fe5fe9dba625a4d0a1cde0ba8d27656dec582091e7ea16f6fb333be6aad78f2f50459c91bb7748cc506a77d010e9f80bb501b6a7a1dfb17c4628a524a13a399f2a0136d63d23fc8959139db26779f041c4fea0fb0b80831c4181acbb5404510eaf80963669308b5a8de58600000000000000003e1cad4e10b139388496abac0260547bab6c790b121db49860b11ce7403eb0ba85724aae6adb32854b0fa3"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000040000000000000000fba70095000000000000001837000005000000000000000000000018000000040000000000000000000000180000000700000000000000010000003f562000000000009500000000000000214a0000ffffffff0000000000000000183300000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800a99075943d0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x303, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 24.973222834s ago: executing program 0 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000053fe5fe9dba625a4d0a1cde0ba8d27656dec582091e7ea16f6fb333be6aad78f2f50459c91bb7748cc506a77d010e9f80bb501b6a7a1dfb17c4628a524a13a399f2a0136d63d23fc8959139db26779f041c4fea0fb0b80831c4181acbb5404510eaf80963669308b5a8de58600000000000000003e1cad4e10b139388496abac0260547bab6c790b121db49860b11ce7403eb0ba85724aae6adb32854b0fa3"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000040000000000000000fba70095000000000000001837000005000000000000000000000018000000040000000000000000000000180000000700000000000000010000003f562000000000009500000000000000214a0000ffffffff0000000000000000183300000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800a99075943d0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x303, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15.727585628s ago: executing program 0 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000053fe5fe9dba625a4d0a1cde0ba8d27656dec582091e7ea16f6fb333be6aad78f2f50459c91bb7748cc506a77d010e9f80bb501b6a7a1dfb17c4628a524a13a399f2a0136d63d23fc8959139db26779f041c4fea0fb0b80831c4181acbb5404510eaf80963669308b5a8de58600000000000000003e1cad4e10b139388496abac0260547bab6c790b121db49860b11ce7403eb0ba85724aae6adb32854b0fa3"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000040000000000000000fba70095000000000000001837000005000000000000000000000018000000040000000000000000000000180000000700000000000000010000003f562000000000009500000000000000214a0000ffffffff0000000000000000183300000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800a99075943d0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x303, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.356321867s ago: executing program 2 (id=674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='sctp_probe\x00', r0, 0x0, 0x2}, 0xffffff07) r1 = socket$inet6(0xa, 0xa, 0xaf5) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xe}}}, 0x88) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0102000000000000000000000000fe65f57a51000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x2, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x5abaab574fef4f14, 0x1, 0x0, 0x7, 0x6, 0x30, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}]}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000740)=""/4096, 0x60880, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r4, r5, r6], &(0x7f0000001c40)=[{0x0, 0x2, 0x0, 0x3}, {0x1, 0x1, 0xd, 0xc}, {0x5, 0x5, 0x2}, {0x1, 0x6, 0x0, 0xb}], 0x10, 0x3, @void, @value}, 0x94) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES16=r7, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="08000800000000000800020001000000"], 0x2c}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) (async) close(r11) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) (async) sendmsg$tipc(r13, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40805}, 0x20004004) (async) close(r14) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[@ANYBLOB="9b059a45e1e69f303b84dac7b6ee654ce7343e0c12790400003c41cd0742dd1208f3", @ANYRES16=r10, @ANYBLOB="080025bd7000fcdbdf250100000008000700", @ANYRES32=r11, @ANYBLOB="14000c00fe8000000000000000000000000000aa080002000100000014000c00fe8000000000000000000000000000aa"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) clock_gettime(0xfffffffb, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.01189785s ago: executing program 2 (id=679): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000048000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x3e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0) r5 = socket(0x1, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20002500, 0x0, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r8, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.84828557s ago: executing program 3 (id=681): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xd}]}, 0x38}}, 0xc000) 6.595174044s ago: executing program 3 (id=684): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000440)="e6fccff78cb5050531e26dcb5dea85745016f060e80ec2942b831cb74376328b7feb6c8db93aa8c17115e439a971365af2b1faa5f4cb89cf56adc36e60ca449e5e0fa06f18a0e74ec4a8353354e0bb3a6399a5c9985daee8a716b19bbf6d245da3f71cef918d0e9a982108e6075c401d2c4fdfd97117ac8faa2528d3af5c30130de93d99c59a005d4b788363324e849643bdf34521e46eafc1d0d71b6c4fb18bc56ff7b1efab3dfd020800000000000000a38a7202d0e6cf29120e9c15460b58398944c7951425825a945e4391", 0xcd}], 0x2) socket(0x2a, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r4, @ANYBLOB="bb4640064238887933b3d34b273b3830df148bc7cf467966b8ba540d923b65b0d0a71c1616132e51954f07e9bbcf2859a0a923eeeba1bd"], 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES32=r6, @ANYRES8=r6, @ANYRES16=r7, @ANYRESOCT, @ANYRES8=r5], 0x50) r10 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='jbd2_handle_extend\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200)=0x10001, 0x12) sendfile(r12, r8, 0x0, 0xf03a0005) sendfile(r12, r8, 0x0, 0x8000000000002) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080), 0x4) 4.934759972s ago: executing program 2 (id=692): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000040)='\b', 0x1, 0x2000c850, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x34}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x62040200) 4.175502807s ago: executing program 2 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) 4.023272542s ago: executing program 3 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba80000012", 0x2d}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000280)=0x6, 0x4) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6(0xa, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000003a40)=[{{&(0x7f00000001c0)=@phonet={0x23, 0x8, 0xd, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)="961eaf462aad5002ffb354aae88f67230f886a3318a5dfdfc9a49bd95cadf4854e49135d8dbd79586f848a9c9dceced882dd97650f855853ba9c140b0e7aac1060eab42739e171069c70149910ad4c8f40c184f6887e6fb760e19d7367a025fdaa3b16eabae66ba27d3ac21dd37b7262c812c3b8efd9b45da3d6a38fd6a78e68188ee3c69f7b46841f684f", 0x8b}, {&(0x7f0000000600)="f1b3e18bfaed0f1a6df5d7705e67c6388b2d67616ef4e9d4213ba0330f7190e0046a5d3952c26ed71fdb15e9837e7fb359fe6adaf34067fb79f33b8d36a32102a21da4c70bc4f8849d6d8ada8ad6dbad64048d17daef3c2f17ad6f30ef6f4858af21da8fbf6184158e10189b25ad241bc77cb2bbc6356d318746e991c5f5245c6847b3d0aa3be4a6b9d708982c29fbe35f5c6d6f01dfe0e758c24284341212ec3efa60c82614a65884b8af0cece41985286a96e5258f", 0xb6}, {&(0x7f00000002c0)="f22b0dc8a3c30ba69fe948663de1d845395995465053902524f1884b07358d590c0d5722ab6e13531726e9fa48a0d9d4c1dae981b73fd649b81e227d1d90d2eed826d76010dfad46dd9daaa67e6e7ae33707b92d6eadbc123e46ba323024a73fd1245bd56a41c538e2", 0x69}, {&(0x7f00000003c0)="a3abb962693e070769363280fecc509baca6b3483cd2d5386ab37b3a6ee47a75f5a40eb9c6eb4b82b68fba2d3b3ea9e80f774c8fdd99b0c91557997b563b5606e3c5c6ce2e0ba59bfd9a98d8687c914df1a11e61617e3fbc1191d5468256d357b53e43e54560f711c3c1def14c0496779657335ed0caf8040812", 0x7a}, {&(0x7f0000002a40)="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", 0xdd3}], 0x5, &(0x7f0000000940)=[{0xa8, 0x111, 0x1, "60e9cb68d325a2a7e182f8dfbe92f55c98d21e046f7f732dee6df1ea9b21fc3eb53e06447ff4983946bbf2ff185bb008f94f80586688c14210b6f52751e68915e347e68f81338f9a051a78d2dc8b3ed8ec2452436072b8f82b3a33e6685e00534c3efded1215d2f8e1429a9a6426b6ec8b565577a324fa3c9b2418da2e244f08a60dc3d208e7f82582cb986639c068d31888487394"}], 0xa8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) 3.861619277s ago: executing program 0 (id=15): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000053fe5fe9dba625a4d0a1cde0ba8d27656dec582091e7ea16f6fb333be6aad78f2f50459c91bb7748cc506a77d010e9f80bb501b6a7a1dfb17c4628a524a13a399f2a0136d63d23fc8959139db26779f041c4fea0fb0b80831c4181acbb5404510eaf80963669308b5a8de58600000000000000003e1cad4e10b139388496abac0260547bab6c790b121db49860b11ce7403eb0ba85724aae6adb32854b0fa3"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x8, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000040000000000000000fba70095000000000000001837000005000000000000000000000018000000040000000000000000000000180000000700000000000000010000003f562000000000009500000000000000214a0000ffffffff0000000000000000183300000200000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800a99075943d0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1030000, 0x1000, 0x5, 0x4}, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x6a040000) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@raw=[@generic={0x2, 0x2, 0x4, 0x9, 0x2a6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x303, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.561514744s ago: executing program 2 (id=700): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xc0, 0xb, 0x9, 0x19, @loopback, @private0, 0x1, 0x1, 0x9, 0xa}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@private1, 0x4e20, 0x1, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x57, r1, r2}, {0x8, 0x2000000000000000, 0x6, 0x40, 0x10, 0x0, 0x100, 0x625}, {0x9, 0x9, 0x8000, 0x7}, 0x5, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x0, 0x0, 0x2, 0x27, 0x2, 0xfffffffe, 0x2c2eefc9}}, 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x96, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0xc, 0x0, 0x0, 0xa, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x3}}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/134, 0x4b, 0x86, 0x1, 0x8, 0x0, @void, @value}, 0x28) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x80000000, 0x0}, 0x8) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x15, 0xc, 0x7, 0x9da, 0x12, 0xffffffffffffffff, 0x1, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x3, 0x1, 0x1, 0x6, 0x9, 0x6, 0x130dacdfb9c79ed9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xa, 0x0, 0x0, 0x100, 0x20, '\x00', r1, @fallback=0x10, r4, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[r6], &(0x7f0000000780)=[{0x3, 0x3, 0xd, 0x3}, {0x1, 0x1, 0x6, 0x6}, {0x2, 0x2, 0x8, 0xa}, {0x0, 0x1, 0xc, 0x9}, {0x1, 0x3, 0xa, 0x4}, {0x3, 0x2, 0x3, 0x2}, {0x2, 0x4, 0xa, 0xc}], 0x10, 0xd, @void, @value}, 0x94) read(r0, &(0x7f00000008c0)=""/239, 0xef) r8 = socket(0x22, 0x3, 0xbef) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f00000009c0)=""/98, &(0x7f0000000a40)=0x62) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b40)={r6, &(0x7f0000000a80)="7229e6c0ad0310ff833747834e00ece4c5d2956bc1421c51c9f7c61ab1c1242189abbf6be3a0f69e87893a8acc349781763fb178f207dd65c80869ce9286b4fdfb2a5abf52b1a14a8342a933dce2b7b18917ceb9a14e73d178bb7fdc7616939bc20d1c86ab0733019f63cab3a84213f67f454bb543489b0d96944ce83087db1499d87826f63426466284ec45d9bf6f2fd3d7f023d201336c7e5d6348287cd4b1c05988708683a58b497473"}, 0x20) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000b80)="850c29267f5366823d6ae9f76bb82090bf2bd84bb76e71c8205db8cb262936f567b1ad3f59b9ddc5fe8095619a8522a96bc1a20173e8aea93d23c40ffd81c92a13a53ded2febcd0a4641b3a7dcb77b8d70bbc294140d9768", 0x58) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000c00)={0x0, @broadcast, 0x4e21, 0x1, 'sed\x00', 0x0, 0x800, 0xd}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r6, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r7}, 0x20) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, r6, 0xa568, '\x00', r1, r4, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xa, 0x15, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000d00)='syzkaller\x00', 0x9, 0x26, &(0x7f0000000d40)=""/38, 0x40f00, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x2, 0x7, 0x8, 0xc}, 0x10, 0xffffffffffffffff, r7, 0x5, &(0x7f0000000f40)=[r6, r9, r6, r6, r10, r6], &(0x7f0000000f80)=[{0x4, 0x4, 0x7, 0xb}, {0x2, 0x1, 0xd, 0x9}, {0x5, 0x2, 0x5, 0x3}, {0x1, 0x1, 0xb, 0xa}, {0x1, 0x2, 0xf, 0x3}], 0x10, 0x61, @void, @value}, 0x94) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001180)={'veth1_virt_wifi\x00', &(0x7f00000010c0)=@ethtool_eeprom={0xb, 0x7fffffff, 0x80000001, 0xa8, "e6adb531fd866304aaf00eefee64b52484faed5bb556b4a81168d3ea3cf6a6c691ed34588d6c3960ee67e0bfd7affe716ce8ec9ae6bf6868d9754a8c7019d797bb0de00b795631976e6ed44e1d9a79be714f9ee46f2ee9afb82a6f1e57cdbd5e5bbe821f6a72fe959c80089a59219ca6f217292052b5e7bdca97a715791ef3f4c4cc78eeb9c411a41d312087ef85ab6df8a7c54145564ae188c4d97ba9ead09143192d036a322400"}}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000011c0), r11) (async) socket$unix(0x1, 0x2, 0x0) r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000001240)=0x12, 0x80000) setsockopt$X25_QBITINCL(r12, 0x106, 0x1, &(0x7f0000001280)=0x1, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f00000012c0)={0x0, @adiantum}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000015c0)={'syztnl0\x00', &(0x7f0000001540)={'ip_vti0\x00', r1, 0x40, 0x40, 0x7, 0xf, {{0x11, 0x4, 0x0, 0x3, 0x44, 0x66, 0x0, 0x1, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x13, 0x50, [@local, @multicast2, @private=0xa010100, @remote]}, @timestamp_addr={0x44, 0x1c, 0x3, 0x1, 0x8, [{@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@loopback, 0xf}]}]}}}}}) sendmsg$inet6(r8, &(0x7f0000001640)={&(0x7f0000001300)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001340)="942801a1fbb0d9d880f82a92e9b4f6f079a32795ff2598d43119abd204a5b4f89d0192906fb1f2d64e578559ba2f244743e15edca3a2a799510261435297a457a3d96543a1b51fdce0689fa6b16b9b75976c151505f1edd709051c4126f4a781c6a094e9027f40ceab630f1b822472a2fdadb7", 0x73}, {&(0x7f00000013c0)="5b597405dbdf44c1fad9f8185e086ffa2745d446fa36c4f77d40b7aaeab78f56e42ae7822945d83181e13a6341c5655204c87c348f739fab4bcd264b9a2cfdcb8dfd8e3b78c164ef776889a540590168b59a8184d28776c07c9375149e5bd114772da8e44443deab462d6f6cdd4a14ef33278cc8cd", 0x75}, {&(0x7f0000001440)="9110650d7926d53bc10b250e4a420f7b74fb0b8f713b8611d812ea47855e16b555660f28b529012f9406542d844943c736dec720699f2e0883c4b18552aae6f6fb3a9f43626d094ca19bbdfb0cb657419328f133ef4ecb0757cb1d4bf0bdf8a84b4c680bad4f7f975be66dce9cf7341da4fb63ff4dd4ecb5ef5e44f2f1b627e65c105a3bea21591c57d88ab8431a95d9550a106b81051f43ef1acac3a4bf4e73aaa99123877d603cb785a092c91aa137f613dd37b384", 0xb6}], 0x3, &(0x7f0000001600)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r13}}}], 0x28}, 0x1000) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001680), &(0x7f00000016c0)=0x8) 2.558500552s ago: executing program 3 (id=701): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="77690addcfbe1f", 0x7}, {&(0x7f0000000100)="2492c6", 0x3}], 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000070000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r7 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x0, 0x4, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0xcb4, 0x800000}}) r8 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r8, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.324070244s ago: executing program 4 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a820000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060106003901000d0000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e205007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000008942f335a14f8d", 0xc0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 2.313317309s ago: executing program 2 (id=704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x100800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000180)={0x0, @aes128, 0x0, @desc3}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000000240)=""/117, 0x75}], 0x6}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x197, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x52f, 0x7, {0x3, 0xfffffffc}}, {0x8, 0x7, {0x0, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x0, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x0, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x4, 0x101, {0x3, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0xb79, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000a03afffe80000fba219991b0b8e2c152255b257337000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000180100d414ce8ad4000aa78de54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020501005ff92900ddab49920209001805aace49d3309292c341ace5b1886d5602c075176b808ba538f4172998fc01f94be1886976a3e7"], 0x0) 2.293776943s ago: executing program 1 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r4, &(0x7f0000000300)="843b83b7f0d4aed6e0a70952c2ccc9ede28509ae5ba97a4d846d594fec5056cf3a6328498704076e43e47a6665e29de7794b64b2bc60ea04778f03cfede4b8beebd490a0996785b824bfc52ce2d760b476f990be1a", 0x55) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000020a0103000000000300000000000000140000001100010000000000000000000000000a336428e7a4726b1fb664b1c369d72265411e28812e869941ed76a3d991ed777601b8e09188a31e846b5ea2f984246ab2deb28948463e4b3a789709ffdcaa69fba2ec2b8be47c63955a0bb471f68f3752f7e0ed61b83bb8991c46794fb044fb94c5eab36dce571506dd7e6b1e3a3f53055991c21897ad3f4e1f4cdca4d8cd0b9b192e51df7971e7596c0ef06e30bea38d9b8322553b31ca4947646742945bd9ad6c9fa31808def35ddd2a0cb420eedbbbc3fad713a304950a86b7d815ac65ea95d6e0ce49e26d1c5af7a8b2b266b4ca9c9992ac2906a010303228214d664c10062997f53c5b495f6b9c37f6822bd6c4ebd9e61b0f8a5efdb053ea06243e35fce8eb445c4ca046ef48b07f8fe513c03c86c08abf124f10fbf0f990595bea4e3c3f538c4f7601d57e4a06"], 0x88}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0x100, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000380)=0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 2.078712816s ago: executing program 4 (id=706): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = accept(r0, &(0x7f00000003c0)=@tipc=@id, &(0x7f0000000440)=0x80) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e20, 0x4, @local, 0x1}, {0xa, 0x4e20, 0x10, @mcast1, 0x3}, 0x1, {[0x10, 0x7, 0x10001, 0x1000, 0x6, 0x3, 0x5ca, 0x2]}}, 0x5c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x1c, &(0x7f0000000140)=""/28, 0x41000, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x10, 0x2, 0xff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r2, r2, r2, r2, r2], &(0x7f0000000280)=[{0x4, 0x4, 0x10}], 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r3, r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.912166614s ago: executing program 1 (id=707): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00090000000000000000000000000000000000400000000000000000cf532a9270ba822ed1240a6fb824be98a4e451cbdd7287d601ed0818e843502d5dc121a2ec12569b1939ed2a87e82b27154272bff182aba3e075bf563bc8ea4e71d0957107da5183e00bca324abb63d6af2bd6fd2fbe10b55450773e4210acd3e0c7d743df235d6dd382f253325668eec407870b153cc300000000000000e158a16f4b820988eb70e65d9dfc6dfccad2f4109d93e28b5fcc93faee312e289592b1220932a4c8fa89783700"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.769020469s ago: executing program 1 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x37c2}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0xa, [@enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0x4, 0x3ff}, {0x10}, {0x0, 0xcb}, {0xa}, {0xb, 0x1000}]}, @var={0xb, 0x0, 0x0, 0xe, 0x3}, @datasec={0x1, 0x7, 0x0, 0xf, 0x1, [{0x5, 0x1, 0x4}, {0x4, 0x80000000, 0xb9a}, {0x3, 0x3, 0xf}, {0x1, 0x6, 0xde702a0}, {0x3, 0x3, 0xffff}, {0x5, 0x9, 0x3}, {0x5, 0x0, 0x10001}], 'H'}, @fwd={0x9}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x31, 0x6}]}, {0x0, [0x0, 0x5f, 0x61, 0x61, 0x61, 0x0, 0x30, 0x30]}}, &(0x7f0000000280)=""/251, 0xf6, 0xfb, 0x1, 0xa3e, 0x10000, @value=r2}, 0x28) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f0000000480)={0x1398, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x108, 0x80, [@perr={0x84, 0x102, {0x3, 0x10, [{{}, @broadcast, 0xd, @void, 0xb}, {{}, @device_a, 0x80000000, @void, 0x1b}, {{}, @device_b, 0x0, @void, 0x1e}, {{}, @device_b, 0x5, @void, 0x14}, {{}, @device_b, 0x3, @void, 0x18}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x32}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x1b}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x37}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x3}, {{}, @device_a, 0x7, @void, 0x18}, {{}, @broadcast, 0x2, @void, 0x3f}, {{0x0, 0x1}, @broadcast, 0x10001, @value, 0x4}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_a, 0xd, @value, 0x2f}, {{0x0, 0x1}, @device_b, 0x7fff, @value, 0x35}, {{}, @broadcast, 0x7, @void, 0x1f}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x178, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd2, 0x2, "29198e3a7dd1710d2b4762ce70394e94f8ee5839111ce33d52694b14491296fa8d369041e0aa10c49c6c32fa06330a5768083b1c4c4b7e332f1ffb1a8ba78725dde464a03c173dd04e5991d40a6338259afd1229b78785d24783beff855f8e952cccaa5773e8020322627f0d2845fb2ed043eb5d0551c6b0dc0598031fcd4d22f7d2e7bc73feaca218ffb8c205f35593f20c7d5d1c9dd6f2f4ad0669365fde7a3f6d748d214d8ccf18d01e6a35880436165773b4e638ef884f34ed30fc5cd2feffda06a631b6c2804d072033d53b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x98, 0x3, "dff3f12af68a2687f1931d364f424a42ab582baa410b411aacb863ce8b6e81cc448e10ebbfb555af8091eb653846c6af8a099d1755b7d5d9b8c04f7b813acf986bc8a62f3a3726fa8d40c6729fabb63c1a5b30ea122e6ec773f23b64e39a377581c810c702edb566710d7dc821a6e8847216bbb0746ca4abf0b233e8779f033047084f5ab033084e15f4d1e2962db2d35ba3f294"}]}, @NL80211_ATTR_PROBE_RESP={0x85d, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x198, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0x8, 0x80}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x1, 0x0, 0x1}}, 0xb, @default, 0xc550, @void, @val={0x1, 0x1, [{0x12}]}, @void, @void, @val={0x6, 0x2, 0x7f}, @val={0x5, 0xdb, {0x8, 0x60, 0x2, "e3ff9456054ea77ae9875bb7b6e787f2d37dea76c71d95d3e435e11de2549f588187d3c1320a8597621ca80659334a315991eb9bcf82706b3cbc606a51255b473a165ce86812e12be763520efac43ddc983a9113a10ea1571ce4d38bfed950ddfb7a0dd813105cc6334a7ef59377e523622ea485cc9929019e29c542691d1780c5c7dcfb0312fb98daf24c52bd5278477de1b50e2cb1d820ab85e429f751dd6ba9b34e94f03857073d75c20fb4dbaffbc93e6b8b49a06e786251f03df47395fe63e7201d55c63bd602d496ead135705441dbea7148b191e3"}}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x86, "735ea0a45a2d2fd5e5f4329fd85d0f0de6cc9bf233d2f139a43c48cea6345ef1a439bcddb05a92aa8497cf46704860a03370665ac61c4ae197068aa06957b1c14607378433cb4203632023d617d1f6bca0ec8445a67c611597e12b09ebfce0c306c06dc2e8811e5744d9cbffd13e8575a19d56d8ecad20d62ffd24dc42bb129226dcd858fb15"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x22f, 0x80, [@fast_bss_trans={0x37, 0x80, {0x2, 0x2, "7e4d4333799ceb28658d6cc58dfde3b2", "65d6706282110e4b009e8d1dd3a4789d7db68421ee79ec7af3e6d901e8bd7501", "74544dbb03acab7a9b2614a20af78abe294f248064f71f1e4c2b469cc2020431", [{0x3, 0x3, "cd608e"}, {0x2, 0x27, "c7487a0629990dd890648892be56f7c02b7440a0fbdb6fc085d4e535d59ad4bef5815016fdaa67"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x41}}, @chsw_timing={0x68, 0x4, {0x1, 0x101}}, @random={0xfa, 0xba, "126aab83ba382c8c06a15e02bf56e6c85274afcee3328b45461477edc9ca81633dc5e64a68cca4a98b6d90f9d490786e98acf14ff2ac2aa366fd1102762420b0a31c8361a8d27ec97a783191fa018a4841263057f67c345a25617bf1fa21e7e4054ad43fde8f31b98abd519b2553367cfdd1126a9ee898150a80e5e7ea1c96db388b7cbe98ba1e3efa5513a7086ad4796d85df9bd6fd56b624634b431bae280037b849b16969b335f93e56e0a22aab71ac9ca955e053858752eb"}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x64, {0x0, 0x1, "d075b4ccbe419a532a0f3d51bda1813f", "a5473aad7c1f165454136ed35391c761b8bbf1461e6e3f6b4eda022ac5805dfa", "841b03073f277d3c1af989a475c0db7d0746db12dd8155776e9da8e8a328ad98", [{0x2, 0x10, "359ac3e09c781fddb16b900e4906be22"}]}}, @random={0xe, 0x64, "12da2e48fbaad7dc014762a62645bad93a957f9f9faa76566d3cbd9cdb670309aff191ef40278f75f1edf2700fef484fbe2cd3653326a97a00b3c0fb0afab5c4d00472feeb7be368f9f867967ac6a8506310579cf47e770220f4e5c75f4786c8584bff55"}, @challenge={0x10, 0x1, 0xfb}, @dsss={0x3, 0x1, 0xb7}]}, @NL80211_ATTR_PROBE_RESP={0x412, 0x91, "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"}, @NL80211_ATTR_IE={0xc6, 0x2a, [@gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfb, 0x60}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x40}}, @preq={0x82, 0x72, {{0x1, 0x1}, 0x8, 0x2, 0xfffffff8, @broadcast, 0x6, @void, 0x5e9, 0x0, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0xf}, {{}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x7fff}, {{}, @broadcast, 0x4af864a6}, {{0x0, 0x0, 0x1}, @device_b, 0x10}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{}, @device_a, 0x7}]}}, @sec_chan_ofs={0x3e, 0x1}, @random={0x4, 0x1e, "bbb357baf9179b22333182faa7e25ecd9188ffecde481fbdc04becfc9e36"}, @chsw_timing={0x68, 0x4, {0xcc9, 0x3}}, @erp={0x2a, 0x1, {0x1}}, @cf={0x4, 0x6, {0x12, 0xf3, 0x3, 0x3}}]}]}, 0x1398}, 0x1, 0x0, 0x0, 0x48880}, 0x28000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r4 = syz_genetlink_get_family_id$team(&(0x7f00000019c0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001ac0)={'syztnl1\x00', &(0x7f0000001a00)={'gre0\x00', 0x0, 0x8000, 0x700, 0xe2, 0x8, {{0x24, 0x4, 0x3, 0x0, 0x90, 0x67, 0x9, 0x7e, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0x62, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @loopback, @local, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}]}, @timestamp_addr={0x44, 0x24, 0x38, 0x1, 0x7, [{@empty, 0x400}, {@private=0xa010102, 0x7}, {@local, 0x242179c5}, {@multicast1, 0xc}]}, @cipso={0x86, 0x31, 0x3, [{0x5, 0x10, "ef21d99bf42eb9fc3dfbe8776e4f"}, {0x0, 0xe, "6eb29635db7402693f712369"}, {0x6, 0xd, "1dea1ca506a8a67077deb8"}]}, @end, @end, @end, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001b00)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001b40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001c00)={'syztnl1\x00', &(0x7f0000001b80)={'syztnl2\x00', 0x0, 0x29, 0x2b, 0x1, 0x80000001, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0x10, 0x35, 0x8001}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001c40)={@initdev, @multicast1, 0x0}, &(0x7f0000001c80)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001cc0)=0x0, &(0x7f0000001d00)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001d40)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001d80)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001dc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001e00)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001e40)={@remote, 0x0}, &(0x7f0000001e80)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001ec0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002180)={'syztnl0\x00', &(0x7f0000002080)={'gre0\x00', 0x0, 0x700, 0x7, 0x0, 0x3cee99a5, {{0x2c, 0x4, 0x0, 0x12, 0xb0, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @empty, {[@generic={0x94, 0xe, "3999ea21f76c0c3dae852973"}, @timestamp_prespec={0x44, 0x14, 0x62, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@local, 0x5361}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xb, "5d093fd2d3c3752a71"}, {0x1, 0x11, "907cee9204d0c817aab18a0e583a0a"}, {0x1, 0x7, "c2d95a9b9c"}]}, @generic={0x88, 0xb, "e10e46beecb8731480"}, @lsrr={0x83, 0xb, 0x38, [@dev={0xac, 0x14, 0x14, 0x28}, @loopback]}, @timestamp_prespec={0x44, 0x2c, 0xbd, 0x3, 0x5, [{@empty, 0x8a2}, {@private=0xa010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x6}, {@empty, 0xfffffff8}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "1c1f2236d9c6ab"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000021c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002200)={@multicast2, @empty, 0x0}, &(0x7f0000002240)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0xd0f17e47412eff27}, 0xc, &(0x7f0000002b00)={&(0x7f0000002280)={0x844, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a3}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xe, 0x2, 0x3}, {0x1, 0x9, 0x5, 0x2}, {0xe7, 0x5, 0x9, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbdf}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r17}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9e83}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r20}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5b6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e9c}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r23}}}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002bc0)='memory.stat\x00', 0x0, 0x0) 1.601188258s ago: executing program 3 (id=709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f000000, 0xe, 0x0, &(0x7f0000000780)="5ceced9e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82041, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_emit_ethernet(0xae, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff01"], 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0xfffffe3a) 1.479882237s ago: executing program 4 (id=710): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x2, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="8d437a5771"]}]}, 0x30}}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x4, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x15, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.419723175s ago: executing program 1 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a00)={0x111c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x1105, 0x100, 0x0, 0x1, [@nested={0x20, 0x13, 0x0, 0x1, [@generic="6f5514dcd15de17d", @typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="38393697f2525a3cf827d3caa06cf13a932193444b6403f25f7d440251d82ab78b9578279877e2926f68252652c547f8c304ae2b766a5027e4d1fce3e47b787bd63df22a714e4b9c168a054b06b245b7619ad382412efcfcb3fa0769592d7d9599a28f372dbfab1dd78d50cb3c936677fefb79ce5fb02c790a1347a86ffa49e95fe3c8a8359069f2d03afe2f17125a94649a114bd53e35044129ff849bb7e9dc2aefd052ab33fc5766bf4955c2b6f4e833ec77dbcb9336a5ebc01622c10456aa7c12db4d5d85326b654fbf81990c9e90019079324a78db884e", @nested={0x1008, 0xc1, 0x0, 0x1, [@typed={0x4, 0xae}, @generic="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"]}]}]}, 0x111c}}, 0x5) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 1.359019855s ago: executing program 4 (id=712): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x78) socket(0x3, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1e4, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x1d0, 0x1, [@m_nat={0x2c, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xe0, 0xc, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffff1a, 0x7, 0x0, 0x2, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b9f, 0xe}}]}, {0x8e, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x80, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x51, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x40, 0x11, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1e4}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = openat$cgroup_devices(r4, &(0x7f0000000580)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) openat$cgroup(r4, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="00fefdfffffffffff2"], 0x9) 425.916319ms ago: executing program 1 (id=713): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd635dba3300442fff00009300000000000000000000000000ff0200000000000000000000000000010421880b00000000888cd5a6000086dd080088be000022eb0000000227040c0802000000000000000009770408006558000000016a1c7e4dca"], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r4, r3, 0x0, 0x9c) write$cgroup_int(r3, &(0x7f0000000100)=0xffffffffffffffff, 0x12) r5 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000003800ffff0000010000000401f100", @ANYRESOCT=r1, @ANYBLOB="f0ffffff00"/20, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB="fdffffff05000000050000000f00"/28], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f000002d000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x400000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, 0x0, 0x0) openat$cgroup_pressure(r8, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) 282.276797ms ago: executing program 4 (id=714): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/174, 0xae, 0x5, 0x8}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="53afd9c5e3b8245ecd17e3e574037e15d717103c3061823a53de8fb6423d0140aa576b40a3de08f4c8883f77b1f12804bdb212ff46859400a1404a938c8199d0ce9ac6149a0297175a2589297706fadf99820d581c40be7f69079dd8fae3042dc92f114871911d0af189b0cb8230e0ece7acd0a22fa7baf4329c495b7421bd7d947165c288649b106828dffaa2f3c3cfd580c9ea3c569d341ab185fbb00b52f78e5b87c4eda769aefa9949c674dcc6d26f7e6dc80ce644e148a7b5697d51f60d5d0d0e", 0xc3, 0x8000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240), 0x8) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x10c, 0x453, 0x400, 0x70bd2a, 0x25dfdbfb, "0aaf49e9e314f08a586641e6e2799e2a0eb44158ffab21bf9e9d7a92eb19cd634f804474c34bc2eb5c0b014cffd1d791a8a46f686e4015abc0cb656e87528efc31c1e546de25bd619bc5f4331de416942f96d423772c7c9f9350a15cd3efa227d78eeb9f6532dc0a22af0967ee751c306aa6879e4cadb185c92897b46881d2c5e8b74f8518fd2884d1870de4efcf1c90a78d7bd906f06c5a13709ac35138bd4fc5b1f1aa19b4aab68d820c0ef69f9ac6c7720e37da7d8b678fe62927640840b8e8a69fbb9a3fa8a6dd3965531b0e08326e70d0e75e9f00b9d3c461d105f6870d008c8feb76ab232c75ae15aad5bab888d91a13d03c2097c99c", ["", "", "", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x815) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x5}}, 0xfffffaf4, 0x3, 0x7, 0x400, 0x5}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x800000}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000600)={r2, 0x8, 0x7515, 0x3, 0x8, 0x6c, 0x9, 0x9, {r3, @in={{0x2, 0x4e22, @remote}}, 0x8, 0x8, 0x3, 0x6, 0x3}}, &(0x7f00000006c0)=0xb0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_netfilter(r1, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x41c, 0x3, 0x7, 0x900, 0x70bd2c, 0x25dfdbfd, {0xc, 0x0, 0x8}, [@generic="4c3a7498480dd86d64d2c3cf4ffd0959aecf5e5cd96ab272acfafd2fc33ed950fa2a736ee1adbc9d7381be", @nested={0x1ab, 0x20, 0x0, 0x1, [@typed={0xf3, 0x140, 0x0, 0x0, @binary="58fbfe88306150abc6021471b1e1efc00318e88c5dbcdfc9c6ec7bc0ec11466a0000a8c9fff66980a45e79fb1ecaf4eb1f744d950c3a5031c53adf6666fe1baadf3cc1bb71a02f885805b53818d3567853c84b597a1beaa746666b7d57a08b04eb778f84a0f3af5e9129ef765257c283de8cfe8f6a70c58e8e2a820370dccd4d8dc3e9a67348ec3eb99eed8e11e2108dc03c1634e280b93940cec40af8dc856558dc2aa0e832f7a3ebe2113747e2b95a9efe2a652562dea648375afd0e26026fe10be2d09ddd1c0da59cae9a3fd97a881fa06b05231a3803a717150bb0fc34a3191861e13ecf2dc0c8517365cdc191"}, @generic="fffecc2468c19ff66de2f75890b013c2d3f44053e6d104801aa76f8d98d74d0ac85df63e294676f8a20504", @nested={0x4, 0x59}, @nested={0x4, 0xf3}, @typed={0x4, 0x107}, @nested={0x4, 0x70}, @generic="e9d61788fbc2dc0e926ff22e67c37dc6e61b58ef5afec1327cfa1681dabd120f8a68d1acc89763b6cda91cefaa8c1c030f49b89b2673b4ab0a34751dcebd3837b78ce5669432b1de46f6f57f1bad86491d85713942e9fae75d8a9ea1c9aa18de484d877b234cf416", @typed={0x5, 0x10f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xfb, 0x0, 0x0, @fd=r4}]}, @nested={0xc, 0xad, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="e584640e57025a3088f5262e827c6be9659457594e4062651a21979e13638795c456e1d53f9bd9d34be552d53663a3fc0a45489f0f5d3c5a2eecd6b4cfcd145dd8cb201ef879ad475d892c27fc7d0e4c99553fa00adaa0b5f1f99dae5ef4016c2ecd815349e567710678d9a689de220320d41e27c696ae737915ce23c4adad3ce627c845bd", @generic="67c815483cc130c8c8e7e395ab9151a455f3eb5738ee8b719a7439799d75f972fe85951d8ab6947f0ec9d694014f9576008c23ea2f6152dae13e2dce96906dcced7a2a82dd1d0638f3701bf2cbe2b496fb7e04a2", @nested={0x8c, 0xce, 0x0, 0x1, [@generic="cd217b03ac363cf54a25a4f172e4c37cb6281184d7643837460995bf1edcc9423953aca00276dccdc83dbeac562dc055ead4cc77bad669f88b96c63b59233202f83da443b01122d59ed06af5df07dff6661e567d4e79aeac067aebb928bf1d99fe1a967d2140792a995db562c951b5725c88f94c643fae43073837f89a8ab377c4eede0244c506ec"]}, @generic="b57cced6d0e5b22599fbc2d922b451663e70c432298b27894a9ac646f1f8dafcd2a0e107f6e3079bb8bae51cc6aa79c96ad2ec8ca51ec1d0a244fd6623e2864b10fbf948722b1c2686ad768d545ae86bee665a8be51cac5b685cbcfc3fdd21f83f79b6128d38aac723289efc37f6da2b6c3121f1b84d24344362c521c77b0a9f0b641d00d25a4aa22cbc11f8acee0ef855fcbf9f22f8e16103da01f12174076b6345668547c362a48f353cb59374b3e73aff6975ab17b9405e2aed51e6"]}, 0x41c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c40), r6) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000c80)={'pim6reg\x00'}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d40)={'ip6tnl0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x2f, 0x8f, 0x7f, 0xfffffffb, 0x10, @rand_addr=' \x01\x00', @local, 0x8000, 0x700, 0x80000000, 0x8}}) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000d80)={0x0, 0x1, 0x3, 0x7, @vifc_lcl_ifindex=r8, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write(r7, &(0x7f0000000dc0)="80601d7929a7d995cfb89c3fbf3c747d9d91f93a8a89eec9b1f693a5f9fb8485f8e220a9cf834bbc434207cf87b2e1d459dd6fe86365c99b9700502e8175294ae2b9030c90ace5fe36c2b931a4f92891f7768abb46f7252f89c55b91c1791c47f5f376e02eff5be3c4293b732cdb78acc5ffcd4e533c72ff74ee3a4d550ae5", 0x7f) pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r9, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)=@ipv4_deladdr={0x84, 0x15, 0x800, 0x70bd2d, 0x25dfdbfe, {0x2, 0x78, 0x4, 0xff, r8}, [@IFA_LABEL={0x14, 0x3, 'veth1\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0xed}, @IFA_CACHEINFO={0x14, 0x6, {0xe, 0x1, 0x8001, 0x10}}, @IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4000094) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001000)={@remote, 0x0}, &(0x7f0000001040)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', r11, r0, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r10, 0x84, 0x74, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), r6) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r12, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x150, 0x1403, 0x20, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x40c1) syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r0) r13 = socket(0x27, 0x80000, 0x7) sendmsg$nl_route(r13, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002640)={&(0x7f0000002540)=@ipmr_delroute={0xd0, 0x19, 0x8, 0x70bd28, 0x25dfdbfc, {0x80, 0x0, 0x0, 0x4a, 0xff, 0x4, 0xfe, 0xb, 0xa00}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_METRICS={0x90, 0x8, 0x0, 0x1, "c2ac7a9eae33203efa4a5fa6aaa07bac753f5c7759770da027f9cc6912a606bbdd31bfcf594f608f6cb2fb6ef3bc2f349ce1020331177e24520af5ab7fdb36b7a5e9291c54fa8de8a9344c3862f09538acaf301da448c9e31f2e8fe25c15bfdaae257c00bd5de947a6a5cea05cb5a79779d274cc67419a697641bdc26c25defcd9e5a3e10c434abbeb57b0aa"}, @RTA_PRIORITY={0x8, 0x6, 0x4b0}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x7d}}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) 255.887847ms ago: executing program 1 (id=715): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r0, &(0x7f0000000380), 0xe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000300000000000000950000000000c74daf5ae0a14cd9f559cc0f6ac00000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800303aafb65688db70fffe8000000000000200d692071b1e2eb0800200000000000000000000000000018700907800000000fe8000000000000000000000000000aa0e02000000000000000000000000000101f91f25b07f3c58bf3a3e80c32f09e9fc359f60b1817dbb0628cab4a3774b55a95aea71435decd1fc5978b756d2dd0418ff473771d692ffb7d8e0a99ff9e7aac08ad63ee937b193734fe774eed7702d4d00508e5c98068f39ee29b39b686855027c87ef5db91533e5e3"], 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="40000280"], 0x5c}, 0x1, 0xf000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x50}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0x3f, &(0x7f0000000400)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000080)=[{r10, 0x10}, {r10, 0x660b}], 0x2, 0xf45) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='vcan0\x00', 0x10) sendto$inet6(r11, 0x0, 0x0, 0x40800, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000240), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 255.034389ms ago: executing program 3 (id=716): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x49, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x9c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x88, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x9c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0xff, 0xa, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x10, 0x10, 0x0, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0xd03, 0x10}, &(0x7f0000000040)=0xc) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x14, 0x31, 0x829}, 0x14}}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000340)={r7, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r8, 0x3}, 0x8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 4 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711021000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300000000fcdbdf252e0b0000"], 0x14}, 0x1, 0x0, 0x0, 0xc015}, 0x20040800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711021000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x4f) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090300000000fcdbdf252e0b0000"], 0x14}, 0x1, 0x0, 0x0, 0xc015}, 0x20040800) (async) kernel console output (not intermixed with test programs): able_create+0x102/0x880 [ 74.907089][ T6128] htable_create+0x102/0x880 [ 74.907113][ T6128] hashlimit_mt_check_common+0x710/0xa40 [ 74.907138][ T6128] hashlimit_mt_check_v1+0x2ea/0x540 [ 74.907158][ T6128] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 74.907173][ T6128] ? trace_contention_end+0x3c/0x120 [ 74.907195][ T6128] ? cpus_read_unlock+0xa6/0x140 [ 74.907214][ T6128] ? __mutex_unlock_slowpath+0x227/0x800 [ 74.907238][ T6128] xt_check_match+0x368/0xa40 [ 74.907256][ T6128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.907276][ T6128] ? __pfx_xt_check_match+0x10/0x10 [ 74.907305][ T6128] ? xt_find_match+0x1df/0x230 [ 74.907335][ T6128] translate_table+0x1704/0x2490 [ 74.907382][ T6128] ? __pfx_translate_table+0x10/0x10 [ 74.907411][ T6128] ? __might_fault+0xaa/0x120 [ 74.907434][ T6128] ? __pfx_lock_release+0x10/0x10 [ 74.907459][ T6128] ? __virt_addr_valid+0x183/0x530 [ 74.907486][ T6128] ? __might_fault+0xc6/0x120 [ 74.907514][ T6128] ? copy_from_sockptr_offset+0x6b/0xb0 [ 74.907536][ T6128] do_ip6t_set_ctl+0xe4c/0x1270 [ 74.907560][ T6128] ? nf_setsockopt+0x240/0x2c0 [ 74.907573][ T6128] ? aa_label_sk_perm+0x4f3/0x6c0 [ 74.907590][ T6128] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 74.907609][ T6128] ? rcu_is_watching+0x15/0xb0 [ 74.907625][ T6128] ? trace_contention_end+0x3c/0x120 [ 74.907647][ T6128] ? __mutex_unlock_slowpath+0x227/0x800 [ 74.907673][ T6128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.907703][ T6128] nf_setsockopt+0x295/0x2c0 [ 74.907724][ T6128] rawv6_setsockopt+0x2ac/0x690 [ 74.907750][ T6128] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 74.907770][ T6128] ? __pfx_lock_acquire+0x10/0x10 [ 74.907788][ T6128] ? aa_sock_opt_perm+0x79/0x120 [ 74.907809][ T6128] ? sock_common_setsockopt+0x37/0xc0 [ 74.907828][ T6128] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.907843][ T6128] do_sock_setsockopt+0x3af/0x720 [ 74.907869][ T6128] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 74.907892][ T6128] ? __fget_files+0x395/0x410 [ 74.907910][ T6128] ? __fget_files+0x2a/0x410 [ 74.907934][ T6128] __x64_sys_setsockopt+0x1ee/0x280 [ 74.907958][ T6128] do_syscall_64+0xf3/0x230 [ 74.907975][ T6128] ? clear_bhb_loop+0x35/0x90 [ 74.907995][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.908012][ T6128] RIP: 0033:0x7f1f9eb8cde9 [ 74.908036][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.908048][ T6128] RSP: 002b:00007f1f9fa7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.908064][ T6128] RAX: ffffffffffffffda RBX: 00007f1f9eda5fa0 RCX: 00007f1f9eb8cde9 [ 74.908075][ T6128] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 74.908084][ T6128] RBP: 00007f1f9ec0e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 74.908094][ T6128] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 74.908104][ T6128] R13: 0000000000000000 R14: 00007f1f9eda5fa0 R15: 00007ffd14635d78 [ 74.908129][ T6128] [ 74.908136][ T6128] Mem-Info: [ 75.092582][ T6135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 75.216517][ T6128] active_anon:5122 inactive_anon:0 isolated_anon:0 [ 75.216517][ T6128] active_file:1435 inactive_file:38298 isolated_file:0 [ 75.216517][ T6128] unevictable:768 dirty:1638 writeback:0 [ 75.216517][ T6128] slab_reclaimable:9639 slab_unreclaimable:121261 [ 75.216517][ T6128] mapped:29664 shmem:1433 pagetables:884 [ 75.216517][ T6128] sec_pagetables:0 bounce:0 [ 75.216517][ T6128] kernel_misc_reclaimable:0 [ 75.216517][ T6128] free:1320367 free_pcp:470 free_cma:0 [ 75.256634][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 75.294883][ T6128] Node 0 active_anon:20588kB inactive_anon:0kB active_file:5768kB inactive_file:153124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118796kB dirty:6584kB writeback:0kB shmem:4212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:3728kB sec_pagetables:0kB all_unreclaimable? no [ 75.464540][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 75.486969][ T6128] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 75.564386][ T6128] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.627698][ T6128] lowmem_reserve[]: 0 2490 2490 0 0 [ 75.633016][ T6128] Node 0 DMA32 free:1411632kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20552kB inactive_anon:0kB active_file:5768kB inactive_file:152804kB unevictable:1536kB writepending:6580kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:876kB local_pcp:368kB free_cma:0kB [ 75.705717][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 75.710692][ T6128] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 75.764334][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 75.794179][ T6128] Node 1 Normal free:3902292kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:316kB local_pcp:32kB free_cma:0kB [ 75.875477][ T6128] lowmem_reserve[]: 0 0 0 0 0 [ 75.882798][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.912993][ T6128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.919114][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.955491][ T6128] Node 0 DMA32: 864*4kB (U) 667*8kB (UE) 446*16kB (UME) 802*32kB (UME) 242*64kB (UME) 90*128kB (UME) 41*256kB (UME) 16*512kB (UME) 10*1024kB (UME) 8*2048kB (UME) 323*4096kB (UM) = 1436920kB [ 75.995762][ T6128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 76.023195][ T6148] batadv_slave_1: entered promiscuous mode [ 76.048914][ T6128] Node 1 Normal: 127*4kB (UME) 59*8kB (UME) 50*16kB (UME) 211*32kB (UME) 90*64kB (UME) 29*128kB (UME) 11*256kB (UM) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3902292kB [ 76.119187][ T6128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.142427][ T6128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.172346][ T5989] team0: Port device team_slave_0 added [ 76.203605][ T5989] team0: Port device team_slave_1 added [ 76.211904][ T6128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.292387][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.303443][ T6128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.311328][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.333240][ T6128] 43152 total pagecache pages [ 76.388061][ T6128] 0 pages in swap cache [ 76.389747][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.393005][ T6128] Free swap = 124996kB [ 76.423548][ T6128] Total swap = 124996kB [ 76.437194][ T6128] 2097051 pages RAM [ 76.441724][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.451502][ T6128] 0 pages HighMem/MovableOnly [ 76.456215][ T6128] 427863 pages reserved [ 76.481095][ T6128] 0 pages cma reserved [ 76.496914][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.562429][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.611975][ T6174] xt_CONNSECMARK: invalid mode: 0 [ 76.667178][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 76.766992][ T5848] Bluetooth: hci4: command tx timeout [ 76.775219][ T6146] batadv_slave_1: left promiscuous mode [ 76.800774][ T5989] hsr_slave_0: entered promiscuous mode [ 76.817026][ T5989] hsr_slave_1: entered promiscuous mode [ 77.124845][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'. [ 77.483570][ T6189] veth1: entered promiscuous mode [ 77.518072][ T6189] veth1: left promiscuous mode [ 77.750211][ T6212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 77.808988][ T6212] batman_adv: batadv0: Adding interface: gretap1 [ 77.846735][ T6212] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.893975][ T6212] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 78.284313][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.62'. [ 78.691804][ T6242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.65'. [ 78.782725][ T6239] tipc: Started in network mode [ 78.794163][ T6239] tipc: Node identity 3efdbeba1942, cluster identity 4711 [ 78.804646][ T6239] tipc: Enabled bearer , priority 0 [ 78.847088][ T5843] Bluetooth: hci4: command tx timeout [ 79.051843][ T6251] netlink: 'syz.3.67': attribute type 21 has an invalid length. [ 79.060277][ T6251] netlink: 152 bytes leftover after parsing attributes in process `syz.3.67'. [ 79.354687][ T6237] tipc: Disabling bearer [ 79.578185][ T5989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.654906][ T5989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.675692][ T5989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.745724][ T5989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.760506][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 79.812686][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 79.857357][ T6280] vlan3: entered promiscuous mode [ 79.886764][ T6289] Cannot find set identified by id 0 to match [ 80.240567][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.260051][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.285917][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.293117][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.379848][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.387082][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.507766][ T5989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.573378][ T6318] Zero length message leads to an empty skb [ 80.718238][ T6327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.763522][ T6329] pimreg: entered allmulticast mode [ 80.928499][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 81.028133][ T6340] Cannot find set identified by id 0 to match [ 81.205872][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.257256][ T6348] Illegal XDP return value 4294967294 on prog (id 36) dev N/A, expect packet loss! [ 81.266790][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 81.513964][ T5989] veth0_vlan: entered promiscuous mode [ 81.516862][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 81.572127][ T5989] veth1_vlan: entered promiscuous mode [ 81.596203][ T6358] syzkaller1: entered promiscuous mode [ 81.616443][ T6358] syzkaller1: entered allmulticast mode [ 81.647308][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.94'. [ 81.981127][ T25] cfg80211: failed to load regulatory.db [ 82.108865][ T5989] veth0_macvtap: entered promiscuous mode [ 82.189632][ T5989] veth1_macvtap: entered promiscuous mode [ 82.273275][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.346795][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.387772][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.436601][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.468015][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.511677][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.538297][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.622745][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.650798][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.667632][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.678767][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.693017][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.704269][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.735115][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.763585][ T6405] warning: `syz.3.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.793898][ T5989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.841097][ T5989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.880079][ T5989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.916625][ T5989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.139417][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 83.225093][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'. [ 83.473677][ T6440] netlink: 56 bytes leftover after parsing attributes in process `syz.1.103'. [ 83.651049][ T6442] netpci0: tun_chr_ioctl cmd 1074025677 [ 83.672358][ T6442] netpci0: linktype set to 1 [ 83.948605][ T6451] gre2: entered promiscuous mode [ 84.121569][ T6463] ipvlan2: entered promiscuous mode [ 84.143011][ T6463] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 84.163111][ T6463] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.303961][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.322197][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.497487][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.505356][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.640700][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 84.945013][ T6500] Cannot find set identified by id 0 to match [ 84.947404][ T6456] netlink: 96 bytes leftover after parsing attributes in process `syz.1.106'. [ 85.029394][ T6456] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 85.068228][ T6456] netlink: 228 bytes leftover after parsing attributes in process `syz.1.106'. [ 85.283544][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 85.725395][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.006157][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.099845][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.158733][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.210881][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.394055][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.450069][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.479877][ T6557] tipc: Enabling of bearer rejected, failed to enable media [ 86.500635][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.544259][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.621722][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.667656][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.677990][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.686519][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.700255][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.716310][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.724139][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.733200][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.749168][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.763721][ T6545] netlink: 'syz.1.120': attribute type 64 has an invalid length. [ 86.817551][ T6569] Cannot find set identified by id 0 to match [ 86.983863][ T1142] bridge_slave_1: left allmulticast mode [ 87.001311][ T1142] bridge_slave_1: left promiscuous mode [ 87.021809][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.091039][ T1142] bridge_slave_0: left allmulticast mode [ 87.103858][ T1142] bridge_slave_0: left promiscuous mode [ 87.136693][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.161834][ T6582] xt_hashlimit: size too large, truncated to 1048576 [ 87.762009][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.773439][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.785685][ T1142] bond0 (unregistering): Released all slaves [ 87.809230][ T6601] netlink: 96 bytes leftover after parsing attributes in process `syz.4.130'. [ 87.969611][ T6607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.133'. [ 88.044504][ T6601] netlink: 228 bytes leftover after parsing attributes in process `syz.4.130'. [ 88.063210][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 88.396158][ T6631] Cannot find set identified by id 0 to match [ 88.601801][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 88.749402][ T1142] hsr_slave_0: left promiscuous mode [ 88.762456][ T1142] hsr_slave_1: left promiscuous mode [ 88.785459][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.794025][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.815278][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.836458][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.846842][ T5848] Bluetooth: hci4: command tx timeout [ 88.887744][ T1142] veth1_macvtap: left promiscuous mode [ 88.900028][ T1142] veth0_macvtap: left promiscuous mode [ 88.911349][ T1142] veth1_vlan: left promiscuous mode [ 88.923888][ T1142] veth0_vlan: left promiscuous mode [ 89.336152][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 89.375112][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 89.720379][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 89.742664][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 89.773013][ T6646] veth2: entered promiscuous mode [ 89.778605][ T6646] veth2: entered allmulticast mode [ 89.947764][ T6674] netlink: 88 bytes leftover after parsing attributes in process `syz.4.144'. [ 89.976497][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.144'. [ 89.985405][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.144'. [ 90.015812][ T6674] netlink: 80 bytes leftover after parsing attributes in process `syz.4.144'. [ 90.084681][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.108843][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.126328][ T6681] netlink: 'syz.1.145': attribute type 11 has an invalid length. [ 90.132402][ T6560] bridge_slave_0: entered allmulticast mode [ 90.161233][ T6560] bridge_slave_0: entered promiscuous mode [ 90.192709][ T6683] bond_slave_0: entered promiscuous mode [ 90.198628][ T6683] bond_slave_1: entered promiscuous mode [ 90.215340][ T6683] macvlan2: entered promiscuous mode [ 90.224730][ T6683] bond0: entered promiscuous mode [ 90.230177][ T6683] macvlan2: entered allmulticast mode [ 90.235701][ T6683] bond0: entered allmulticast mode [ 90.241081][ T6683] bond_slave_0: entered allmulticast mode [ 90.247140][ T6683] bond_slave_1: entered allmulticast mode [ 90.253746][ T6683] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.269841][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.281789][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.303485][ T6560] bridge_slave_1: entered allmulticast mode [ 90.312586][ T6560] bridge_slave_1: entered promiscuous mode [ 90.329387][ T6693] openvswitch: netlink: IPv4 tunnel dst address is zero [ 90.380867][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 90.501898][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.538840][ T6700] Cannot find set identified by id 0 to match [ 90.592046][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.820863][ T6560] team0: Port device team_slave_0 added [ 90.896092][ T6560] team0: Port device team_slave_1 added [ 90.912584][ T6720] validate_nla: 26 callbacks suppressed [ 90.912604][ T6720] netlink: 'syz.2.154': attribute type 21 has an invalid length. [ 90.926747][ T5848] Bluetooth: hci4: command tx timeout [ 90.960516][ T6720] netlink: 132 bytes leftover after parsing attributes in process `syz.2.154'. [ 91.513681][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.521210][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.551359][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.612597][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.640779][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.689917][ T6740] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 91.731204][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.743508][ T6740] netlink: 228 bytes leftover after parsing attributes in process `syz.3.151'. [ 91.769758][ T6743] netlink: 88 bytes leftover after parsing attributes in process `syz.1.158'. [ 91.796648][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 91.805734][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 91.833419][ T6743] netlink: 80 bytes leftover after parsing attributes in process `syz.1.158'. [ 92.098022][ T6560] hsr_slave_0: entered promiscuous mode [ 92.104397][ T6560] hsr_slave_1: entered promiscuous mode [ 92.160570][ T6753] bridge_slave_0: left allmulticast mode [ 92.185733][ T6753] bridge_slave_0: left promiscuous mode [ 92.207389][ T6757] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 92.209290][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.273615][ T6753] bridge_slave_1: left allmulticast mode [ 92.279638][ T6753] bridge_slave_1: left promiscuous mode [ 92.285502][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.303661][ T6753] bond0: (slave bond_slave_0): Releasing backup interface [ 92.314444][ T6753] bond0: (slave bond_slave_1): Releasing backup interface [ 92.355676][ T6753] team0: Port device team_slave_0 removed [ 92.388643][ T6753] team0: Port device team_slave_1 removed [ 92.395172][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.408768][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.420398][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.431767][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.493551][ T6757] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.518257][ T6766] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 92.556158][ T6767] sch_tbf: burst 1127 is lower than device lo mtu (65550) ! [ 93.008144][ T5848] Bluetooth: hci4: command tx timeout [ 93.100405][ T6798] netlink: 'syz.1.169': attribute type 10 has an invalid length. [ 93.130164][ T6798] bridge0: entered promiscuous mode [ 93.280099][ T6809] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 93.323727][ T6809] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 93.490662][ T6808] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 93.523554][ T6808] macvtap1: entered promiscuous mode [ 93.549212][ T6808] macvtap1: entered allmulticast mode [ 93.560819][ T6808] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 93.578229][ T6808] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 93.585771][ T6808] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 94.292990][ T6560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.317888][ T6560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.360225][ T6560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.457446][ T6560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.722384][ T6863] netlink: 'syz.1.181': attribute type 10 has an invalid length. [ 94.735881][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.792214][ T6863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.808890][ T6863] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.949406][ T6863] syzkaller0: entered promiscuous mode [ 94.974415][ T6863] syzkaller0: entered allmulticast mode [ 95.046095][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.054225][ T6873] __nla_validate_parse: 15 callbacks suppressed [ 95.054243][ T6873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.182'. [ 95.084055][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.091292][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.096526][ T5843] Bluetooth: hci4: command tx timeout [ 95.398244][ T6849] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 95.405947][ T6849] netlink: 228 bytes leftover after parsing attributes in process `syz.4.178'. [ 96.840312][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.847499][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.888146][ T6884] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 96.895838][ T6884] netlink: 228 bytes leftover after parsing attributes in process `syz.3.183'. [ 97.133583][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 97.168714][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 97.434012][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.528918][ T6560] veth0_vlan: entered promiscuous mode [ 97.568028][ T6560] veth1_vlan: entered promiscuous mode [ 97.799250][ T6560] veth0_macvtap: entered promiscuous mode [ 97.868341][ T6560] veth1_macvtap: entered promiscuous mode [ 97.964413][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.973786][ T6924] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 98.004274][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.032345][ T6927] netlink: 'syz.2.190': attribute type 13 has an invalid length. [ 98.040509][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.066452][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.108132][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.144659][ T6927] macvtap0: entered promiscuous mode [ 98.184042][ T6927] macvtap0: refused to change device tx_queue_len [ 98.211911][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.238002][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.259412][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.283325][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.301478][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.344222][ T6560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.365112][ T6560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.374586][ T6560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.395135][ T6560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691122][ T6950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.195'. [ 98.723079][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.750689][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.823574][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.842010][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.855295][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 98.908865][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 99.205131][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 99.467734][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.514658][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 99.589631][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 99.668258][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.893310][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.439775][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.457303][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.477034][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.485150][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.501289][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.514709][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.643277][ T7023] __nla_validate_parse: 1 callbacks suppressed [ 100.643307][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 100.667673][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 100.742087][ T7024] x_tables: duplicate underflow at hook 2 [ 101.989025][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.003479][ T7023] IPv6: NLM_F_REPLACE set, but no existing node found! [ 102.016634][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 102.041513][ T7027] tipc: Enabling of bearer rejected, failed to enable media [ 102.240219][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 102.308555][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 102.332200][ T7042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.214'. [ 102.448760][ T53] bridge_slave_1: left allmulticast mode [ 102.454479][ T53] bridge_slave_1: left promiscuous mode [ 102.507543][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.608745][ T5843] Bluetooth: hci4: command tx timeout [ 102.640029][ T53] bridge_slave_0: left allmulticast mode [ 102.665954][ T53] bridge_slave_0: left promiscuous mode [ 102.693139][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.664652][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.684593][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.695621][ T53] bond0 (unregistering): Released all slaves [ 103.990996][ T7018] chnl_net:caif_netlink_parms(): no params data found [ 104.098369][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 104.107436][ T7098] netlink: 'syz.2.218': attribute type 30 has an invalid length. [ 104.135316][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 104.176325][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 104.538672][ T7129] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.222'. [ 104.686903][ T5843] Bluetooth: hci4: command tx timeout [ 104.789922][ T7143] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 104.794728][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.807778][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.815044][ T7018] bridge_slave_0: entered allmulticast mode [ 104.824077][ T7018] bridge_slave_0: entered promiscuous mode [ 104.847296][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 104.864168][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.872818][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.880488][ T7018] bridge_slave_1: entered allmulticast mode [ 104.887876][ T7018] bridge_slave_1: entered promiscuous mode [ 104.997887][ T53] hsr_slave_0: left promiscuous mode [ 105.021179][ T53] hsr_slave_1: left promiscuous mode [ 105.034635][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.054697][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.089247][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.120367][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.198268][ T53] veth1_macvtap: left promiscuous mode [ 105.203875][ T53] veth0_macvtap: left promiscuous mode [ 105.217348][ T53] veth1_vlan: left promiscuous mode [ 105.223134][ T53] veth0_vlan: left promiscuous mode [ 106.083777][ T53] team0 (unregistering): Port device team_slave_1 removed [ 106.165033][ T53] team0 (unregistering): Port device team_slave_0 removed [ 106.766514][ T5843] Bluetooth: hci4: command tx timeout [ 106.773836][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.783250][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.794235][ T7156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.833710][ T7176] __nla_validate_parse: 4 callbacks suppressed [ 106.833729][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 106.849820][ T7156] syz.3.229 (7156) used greatest stack depth: 18264 bytes left [ 106.861910][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.882651][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.057012][ T7192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 107.063889][ T7018] team0: Port device team_slave_0 added [ 107.119292][ T7018] team0: Port device team_slave_1 added [ 107.327988][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.338089][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.364689][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.378246][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.385670][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.436962][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.517407][ T7018] hsr_slave_0: entered promiscuous mode [ 107.560665][ T7018] hsr_slave_1: entered promiscuous mode [ 107.702228][ T7209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.889928][ T7223] netlink: 216 bytes leftover after parsing attributes in process `syz.1.240'. [ 107.921820][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.240'. [ 107.951327][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.240'. [ 108.177422][ T7215] syzkaller1: entered promiscuous mode [ 108.182955][ T7215] syzkaller1: entered allmulticast mode [ 108.580484][ T7246] bond0: entered promiscuous mode [ 108.596650][ T7246] bond_slave_0: entered promiscuous mode [ 108.609323][ T7246] bond_slave_1: entered promiscuous mode [ 108.815919][ T7260] netlink: 216 bytes leftover after parsing attributes in process `syz.1.249'. [ 108.847762][ T5843] Bluetooth: hci4: command tx timeout [ 108.876771][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.249'. [ 109.026546][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 109.099718][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 109.130172][ T7266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.399516][ T7280] veth0: entered promiscuous mode [ 109.463278][ T7280] veth0: left promiscuous mode [ 109.647690][ T7294] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 109.751813][ T7298] netlink: 'syz.4.257': attribute type 11 has an invalid length. [ 110.114821][ T7018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.173641][ T7018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.330533][ T7018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.354469][ T7018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.507689][ T7327] sctp: [Deprecated]: syz.1.264 (pid 7327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.507689][ T7327] Use struct sctp_sack_info instead [ 110.785528][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.901714][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.973704][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.980898][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.048617][ T7351] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 111.057965][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.065092][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.149781][ T7351] netlink: 'syz.4.269': attribute type 21 has an invalid length. [ 111.158179][ T7351] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.166092][ T7351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.173364][ T7351] IPv6: NLM_F_CREATE should be set when creating new route [ 111.180651][ T7351] IPv6: NLM_F_CREATE should be set when creating new route [ 111.187933][ T7351] IPv6: NLM_F_CREATE should be set when creating new route [ 111.522437][ T7370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.877309][ T7358] __nla_validate_parse: 9 callbacks suppressed [ 111.877329][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'. [ 111.918037][ T7388] netlink: 216 bytes leftover after parsing attributes in process `syz.3.276'. [ 111.928234][ T7388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.276'. [ 111.946602][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.276934][ T7018] veth0_vlan: entered promiscuous mode [ 112.374603][ T7018] veth1_vlan: entered promiscuous mode [ 112.669704][ T7018] veth0_macvtap: entered promiscuous mode [ 112.722381][ T7018] veth1_macvtap: entered promiscuous mode [ 112.820542][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.842135][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.852884][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.865354][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.877284][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.914628][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.944244][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.959954][ T7018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.972441][ T7018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.977396][ T7423] netlink: 216 bytes leftover after parsing attributes in process `syz.3.284'. [ 112.984165][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.002220][ T7018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.011350][ T7018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.019597][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.284'. [ 113.020558][ T7018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.038458][ T7018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.063636][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 113.395444][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 113.439481][ T7435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.285'. [ 113.520219][ T7403] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 113.530202][ T7403] netlink: 228 bytes leftover after parsing attributes in process `syz.1.279'. [ 113.606634][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.651897][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.765938][ T7456] x_tables: duplicate underflow at hook 1 [ 113.802783][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.816655][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.847356][ T7454] netlink: 216 bytes leftover after parsing attributes in process `syz.3.289'. [ 114.011945][ T7461] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 114.341968][ T7474] bridge_slave_0: left allmulticast mode [ 114.359991][ T7474] bridge_slave_0: left promiscuous mode [ 114.365873][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.484348][ T7474] bridge_slave_1: left allmulticast mode [ 114.515733][ T7474] bridge_slave_1: left promiscuous mode [ 114.546241][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.584369][ T7474] bond0: (slave bond_slave_0): Releasing backup interface [ 114.620275][ T7474] bond_slave_0: left allmulticast mode [ 114.627078][ T7474] bond_slave_0: left promiscuous mode [ 114.649776][ T7474] bond0: (slave bond_slave_1): Releasing backup interface [ 114.664532][ T7474] bond_slave_1: left allmulticast mode [ 114.677789][ T7474] bond_slave_1: left promiscuous mode [ 114.763040][ T7474] team0: Port device team_slave_0 removed [ 114.785970][ T7474] team0: Port device team_slave_1 removed [ 114.797373][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.811760][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.825255][ T7474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.844418][ T7474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.914286][ T7474] team0: Port device bridge1 removed [ 114.963637][ T7482] team0: Mode changed to "loadbalance" [ 114.986946][ T7477] C: renamed from team_slave_0 [ 114.994999][ T7477] netlink: 'syz.3.296': attribute type 4 has an invalid length. [ 115.006992][ T7477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 115.579954][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.721335][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.780669][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.860730][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.024193][ T11] bridge_slave_1: left allmulticast mode [ 116.035202][ T11] bridge_slave_1: left promiscuous mode [ 116.045913][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.062718][ T11] bridge_slave_0: left allmulticast mode [ 116.069784][ T11] bridge_slave_0: left promiscuous mode [ 116.075560][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.188018][ T7563] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 116.199069][ T7561] atomic_op ffff8880274c5998 conn xmit_atomic 0000000000000000 [ 116.519042][ T5884] IPVS: starting estimator thread 0... [ 116.606687][ T7575] IPVS: using max 23 ests per chain, 55200 per kthread [ 116.735382][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.754209][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.763449][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.786162][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.795718][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.806767][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.953339][ T7573] __nla_validate_parse: 11 callbacks suppressed [ 116.953362][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 117.044452][ T7579] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 117.052972][ T7579] netlink: 228 bytes leftover after parsing attributes in process `syz.2.304'. [ 117.064856][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.079612][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.092636][ T11] bond0 (unregistering): Released all slaves [ 117.351253][ T7588] netlink: 216 bytes leftover after parsing attributes in process `syz.3.309'. [ 117.372458][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.309'. [ 117.417698][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.309'. [ 117.586811][ T7597] Unsupported ieee802154 address type: 0 [ 117.933811][ T11] hsr_slave_0: left promiscuous mode [ 117.943744][ T11] hsr_slave_1: left promiscuous mode [ 117.950012][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.960088][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.968830][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.976261][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.995840][ T11] veth1_macvtap: left promiscuous mode [ 118.001451][ T11] veth0_macvtap: left promiscuous mode [ 118.008113][ T11] veth1_vlan: left promiscuous mode [ 118.013395][ T11] veth0_vlan: left promiscuous mode [ 118.378466][ T11] team0 (unregistering): Port device team_slave_1 removed [ 118.416087][ T11] team0 (unregistering): Port device team_slave_0 removed [ 118.854697][ T5848] Bluetooth: hci4: command tx timeout [ 119.106527][ T7619] netlink: 'syz.3.312': attribute type 3 has an invalid length. [ 119.109834][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 119.123288][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 119.249560][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 119.394071][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.415435][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.423981][ T7577] bridge_slave_0: entered allmulticast mode [ 119.431508][ T7577] bridge_slave_0: entered promiscuous mode [ 119.524166][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.545239][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.569755][ T7577] bridge_slave_1: entered allmulticast mode [ 119.588484][ T7577] bridge_slave_1: entered promiscuous mode [ 119.742482][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 119.743018][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.911133][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.098992][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'. [ 120.595992][ T7577] team0: Port device team_slave_0 added [ 120.678363][ T7657] syzkaller0: entered promiscuous mode [ 120.684088][ T7657] syzkaller0: entered allmulticast mode [ 120.928651][ T5848] Bluetooth: hci4: command tx timeout [ 122.298821][ T7577] team0: Port device team_slave_1 added [ 122.465535][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.478709][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.514595][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 122.523741][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 122.544508][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.635543][ T7692] team0: entered promiscuous mode [ 122.643331][ T7692] team0: left promiscuous mode [ 122.678162][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.688522][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.721626][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.802243][ T7577] hsr_slave_0: entered promiscuous mode [ 122.840114][ T7577] hsr_slave_1: entered promiscuous mode [ 123.006529][ T5848] Bluetooth: hci4: command tx timeout [ 123.518796][ T5884] IPVS: starting estimator thread 0... [ 123.617002][ T7702] IPVS: using max 21 ests per chain, 50400 per kthread [ 123.839034][ T7719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.335'. [ 123.856767][ T7719] tipc: Started in network mode [ 123.871126][ T7719] tipc: Node identity fff, cluster identity 4711 [ 123.880038][ T7719] tipc: Node number set to 4095 [ 123.902259][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 123.928593][ T7728] netlink: 88 bytes leftover after parsing attributes in process `syz.3.336'. [ 123.941481][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.336'. [ 123.952287][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 123.961527][ T7728] netlink: 80 bytes leftover after parsing attributes in process `syz.3.336'. [ 124.506300][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 124.613590][ T7748] netlink: zone id is out of range [ 124.618883][ T7748] netlink: zone id is out of range [ 124.634700][ T7748] netlink: zone id is out of range [ 124.640840][ T7577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.660852][ T7748] netlink: zone id is out of range [ 124.675381][ T7577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.687585][ T7748] netlink: zone id is out of range [ 124.692756][ T7748] netlink: zone id is out of range [ 124.742123][ T7748] netlink: zone id is out of range [ 124.751259][ T7748] netlink: zone id is out of range [ 124.790612][ T7577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.792228][ T7748] netlink: zone id is out of range [ 124.805117][ T7748] netlink: zone id is out of range [ 124.890805][ T7762] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 124.901583][ T7577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.098938][ T5848] Bluetooth: hci4: command tx timeout [ 125.143379][ T7769] ieee802154 phy0 wpan0: encryption failed: -90 [ 125.230363][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.271568][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.316291][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.323552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.342209][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.349400][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.533319][ T7779] netlink: 72 bytes leftover after parsing attributes in process `syz.3.347'. [ 125.703130][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.757366][ T7577] veth0_vlan: entered promiscuous mode [ 125.784193][ T7577] veth1_vlan: entered promiscuous mode [ 125.857737][ T7577] veth0_macvtap: entered promiscuous mode [ 125.867798][ T7577] veth1_macvtap: entered promiscuous mode [ 125.884566][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.895924][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.934809][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.968060][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.010761][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.022564][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.035657][ T7577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.045131][ T7577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.054147][ T7577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.069049][ T7577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.333949][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.361277][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.451793][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.463579][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.695418][ T7868] __nla_validate_parse: 4 callbacks suppressed [ 127.695438][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 127.725330][ T7868] Bluetooth: MGMT ver 1.23 [ 128.038379][ T7862] bond0: left promiscuous mode [ 128.043225][ T7862] bond_slave_0: left promiscuous mode [ 128.052518][ T7862] bond_slave_1: left promiscuous mode [ 128.136186][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.163649][ T7872] netlink: 17 bytes leftover after parsing attributes in process `syz.4.373'. [ 129.225132][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.237457][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.246089][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.256923][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.279383][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.295384][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.298059][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 129.311542][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.427409][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 129.445175][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.499682][ T7912] Bluetooth: MGMT ver 1.23 [ 129.607584][ T7914] Cannot find set identified by id 0 to match [ 129.657363][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.678638][ T7888] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 129.700909][ T7888] netlink: 228 bytes leftover after parsing attributes in process `syz.2.375'. [ 129.734292][ T7916] pim6reg: entered allmulticast mode [ 129.807196][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 129.808980][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 129.815012][ T5848] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 130.030127][ T7932] net_ratelimit: 354 callbacks suppressed [ 130.030146][ T7932] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 130.045531][ T7932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.142540][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.389'. [ 130.315342][ T7944] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 130.334778][ T7944] x_tables: duplicate underflow at hook 1 [ 130.348342][ T12] bridge_slave_1: left allmulticast mode [ 130.354041][ T12] bridge_slave_1: left promiscuous mode [ 130.386816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.429450][ T12] bridge_slave_0: left allmulticast mode [ 130.455211][ T12] bridge_slave_0: left promiscuous mode [ 130.466178][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.746289][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.863944][ T7964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.394'. [ 131.033986][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.045074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.055617][ T12] bond0 (unregistering): Released all slaves [ 131.245015][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 131.302804][ T7967] netlink: 830 bytes leftover after parsing attributes in process `syz.3.396'. [ 131.406632][ T5848] Bluetooth: hci4: command tx timeout [ 131.574829][ T7979] xt_socket: unknown flags 0x8 [ 131.805938][ T12] hsr_slave_0: left promiscuous mode [ 131.865742][ T12] hsr_slave_1: left promiscuous mode [ 131.880139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.898523][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.918412][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.926060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.968562][ T8001] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 131.979112][ T12] veth1_macvtap: left promiscuous mode [ 131.984758][ T12] veth0_macvtap: left promiscuous mode [ 131.990840][ T12] veth1_vlan: left promiscuous mode [ 131.997095][ T12] veth0_vlan: left promiscuous mode [ 132.042435][ T8002] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 132.327093][ T8003] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 132.335560][ T8003] netlink: 228 bytes leftover after parsing attributes in process `syz.2.399'. [ 132.622320][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.713576][ T12] team0 (unregistering): Port device team_slave_0 removed [ 133.170777][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186212][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.209709][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.223914][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.232011][ T7899] bridge_slave_0: entered allmulticast mode [ 133.240167][ T7899] bridge_slave_0: entered promiscuous mode [ 133.248119][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.255315][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.269982][ T7899] bridge_slave_1: entered allmulticast mode [ 133.277005][ T7899] bridge_slave_1: entered promiscuous mode [ 133.284065][ T8001] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 133.486461][ T5848] Bluetooth: hci4: command tx timeout [ 133.512984][ T8026] tipc: Enabling of bearer rejected, failed to enable media [ 133.534111][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.548824][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.742988][ T7899] team0: Port device team_slave_0 added [ 133.806052][ T8039] netlink: 216 bytes leftover after parsing attributes in process `syz.3.410'. [ 133.846296][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 133.885696][ T8037] gretap1: entered promiscuous mode [ 133.893244][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 133.915821][ T7899] team0: Port device team_slave_1 added [ 134.105532][ T8044] netlink: 156 bytes leftover after parsing attributes in process `syz.1.411'. [ 134.126306][ T8041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.165024][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.179408][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.234635][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.268803][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.275790][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.336751][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.421001][ T8041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.577941][ T8041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.726178][ T8041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.851157][ T7899] hsr_slave_0: entered promiscuous mode [ 134.864037][ T7899] hsr_slave_1: entered promiscuous mode [ 135.112699][ T8069] sctp: [Deprecated]: syz.4.416 (pid 8069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.112699][ T8069] Use struct sctp_sack_info instead [ 135.152753][ T8065] sit0: entered promiscuous mode [ 135.158160][ T8065] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 135.183985][ T8065] netlink: 1 bytes leftover after parsing attributes in process `syz.3.417'. [ 135.209402][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 135.226581][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 135.300912][ T8071] IPVS: Unknown mcast interface: veth [ 135.470472][ T8041] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.521144][ T8041] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.566625][ T5848] Bluetooth: hci4: command tx timeout [ 135.594834][ T8041] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.619651][ T8041] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.671126][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 135.795716][ T8085] netlink: 216 bytes leftover after parsing attributes in process `syz.1.423'. [ 135.811605][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'. [ 136.388472][ T8114] netem: unknown loss type 13 [ 136.394718][ T8114] netem: change failed [ 136.631471][ T7899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.665474][ T7899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.701300][ T7899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.720491][ T7899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.881790][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.915943][ T8147] netlink: 'syz.2.439': attribute type 2 has an invalid length. [ 136.932221][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.950763][ T8147] Tq: entered promiscuous mode [ 136.963791][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.970977][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.006030][ T8147] can: request_module (can-proto-0) failed. [ 137.031953][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.036829][ T8147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.039181][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.150420][ T7899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.411056][ T8173] netlink: 'syz.3.447': attribute type 10 has an invalid length. [ 137.652338][ T5848] Bluetooth: hci4: command tx timeout [ 137.692030][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.100000][ T7899] veth0_vlan: entered promiscuous mode [ 138.170029][ T7899] veth1_vlan: entered promiscuous mode [ 138.630467][ T7899] veth0_macvtap: entered promiscuous mode [ 138.681704][ T7899] veth1_macvtap: entered promiscuous mode [ 138.740983][ T8221] bond1: entered promiscuous mode [ 138.749614][ T8221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.190663][ T8228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.200707][ T8228] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 139.232743][ T8228] bond1: (slave vti0): Error -95 calling set_mac_address [ 139.251864][ T8242] __nla_validate_parse: 18 callbacks suppressed [ 139.251882][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 139.299275][ T8245] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 139.317780][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.329587][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.344145][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.377797][ T8242] 8021q: adding VLAN 0 to HW filter on device team1 [ 139.464065][ T7899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.500320][ T7899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.524054][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.709620][ T7899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.734087][ T7899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.758422][ T7899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.772587][ T7899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.132458][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.161122][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.243890][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 140.253975][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.276592][ T8272] netlink: 17 bytes leftover after parsing attributes in process `syz.1.475'. [ 140.296696][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.322308][ T8274] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 140.332925][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 140.504733][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 140.722591][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 140.733270][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 140.905685][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 140.963846][ T8301] ip6tnl1: entered promiscuous mode [ 140.970068][ T8301] ip6tnl1: entered allmulticast mode [ 141.053173][ T8309] tipc: Enabling of bearer rejected, failed to enable media [ 141.097718][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 141.153992][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.208831][ T8311] netlink: 'syz.1.485': attribute type 1 has an invalid length. [ 141.251038][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.311392][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.415579][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.497811][ T35] bridge_slave_1: left allmulticast mode [ 141.505503][ T35] bridge_slave_1: left promiscuous mode [ 141.511321][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.521476][ T35] bridge_slave_0: left allmulticast mode [ 141.528394][ T35] bridge_slave_0: left promiscuous mode [ 141.534118][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.901133][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 142.057101][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.097076][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.120444][ T35] bond0 (unregistering): Released all slaves [ 142.325814][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.335533][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.350358][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.373319][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.385656][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.399276][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.982080][ T8355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.990337][ T8355] bond1: entered promiscuous mode [ 142.995519][ T8355] bond1: entered allmulticast mode [ 143.001733][ T8355] bond0: (slave bond1): Enslaving as an active interface with an up link [ 143.094993][ T35] hsr_slave_0: left promiscuous mode [ 143.101357][ T35] hsr_slave_1: left promiscuous mode [ 143.107783][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.115545][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.123909][ T8348] FAULT_INJECTION: forcing a failure. [ 143.123909][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.142573][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.3.494 Not tainted 6.14.0-rc2-syzkaller-00473-g7f89ec6c4537 #0 [ 143.142598][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.142609][ T8348] Call Trace: [ 143.142615][ T8348] [ 143.142622][ T8348] dump_stack_lvl+0x241/0x360 [ 143.142648][ T8348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.142665][ T8348] ? __pfx__printk+0x10/0x10 [ 143.142683][ T8348] ? __pfx_lock_release+0x10/0x10 [ 143.142714][ T8348] should_fail_ex+0x40a/0x550 [ 143.142739][ T8348] _copy_from_user+0x2d/0xb0 [ 143.142758][ T8348] __sys_bpf+0x1be/0x820 [ 143.142782][ T8348] ? __pfx___sys_bpf+0x10/0x10 [ 143.142814][ T8348] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.142838][ T8348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.142861][ T8348] ? do_syscall_64+0x100/0x230 [ 143.142885][ T8348] __x64_sys_bpf+0x7c/0x90 [ 143.142904][ T8348] do_syscall_64+0xf3/0x230 [ 143.142923][ T8348] ? clear_bhb_loop+0x35/0x90 [ 143.142947][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.142967][ T8348] RIP: 0033:0x7fa90fb8cde9 [ 143.142982][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.142995][ T8348] RSP: 002b:00007fa910962038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.143013][ T8348] RAX: ffffffffffffffda RBX: 00007fa90fda6080 RCX: 00007fa90fb8cde9 [ 143.143024][ T8348] RDX: 0000000000000048 RSI: 00004000000054c0 RDI: 0000000000000005 [ 143.143034][ T8348] RBP: 00007fa910962090 R08: 0000000000000000 R09: 0000000000000000 [ 143.143044][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.143054][ T8348] R13: 0000000000000000 R14: 00007fa90fda6080 R15: 00007ffeb2b8f388 [ 143.143079][ T8348] [ 143.144651][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.332105][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.367946][ T35] veth1_macvtap: left promiscuous mode [ 143.373496][ T35] veth0_macvtap: left promiscuous mode [ 143.380100][ T35] veth1_vlan: left promiscuous mode [ 143.385598][ T35] veth0_vlan: left promiscuous mode [ 143.785681][ T35] team0 (unregistering): Port device team_slave_1 removed [ 143.826432][ T35] team0 (unregistering): Port device team_slave_0 removed [ 144.356551][ T8374] __nla_validate_parse: 6 callbacks suppressed [ 144.356569][ T8374] netlink: 216 bytes leftover after parsing attributes in process `syz.2.501'. [ 144.414574][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 144.446597][ T5844] Bluetooth: hci4: command tx timeout [ 144.580829][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 145.014050][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.041604][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.064056][ T8335] bridge_slave_0: entered allmulticast mode [ 145.076107][ T8335] bridge_slave_0: entered promiscuous mode [ 145.084482][ T8396] : renamed from pim6reg1 [ 145.106748][ T8379] netlink: 'syz.4.502': attribute type 1 has an invalid length. [ 145.114585][ T8379] netlink: 228 bytes leftover after parsing attributes in process `syz.4.502'. [ 145.129465][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 145.144139][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.157700][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.165100][ T8335] bridge_slave_1: entered allmulticast mode [ 145.174515][ T8335] bridge_slave_1: entered promiscuous mode [ 145.293023][ T8412] netlink: 232 bytes leftover after parsing attributes in process `syz.1.509'. [ 145.310194][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.349360][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.464641][ T8335] team0: Port device team_slave_0 added [ 145.485533][ T8335] team0: Port device team_slave_1 added [ 145.571390][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.584313][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.619392][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.640090][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.655275][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.691032][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.706540][ T8418] tc_dump_action: action bad kind [ 145.718850][ T8427] netlink: 216 bytes leftover after parsing attributes in process `syz.3.513'. [ 145.732149][ T8418] tap0: tun_chr_ioctl cmd 1074025677 [ 145.738959][ T8418] tap0: linktype set to 768 [ 145.743670][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 145.793939][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 145.894501][ T8335] hsr_slave_0: entered promiscuous mode [ 145.901075][ T8335] hsr_slave_1: entered promiscuous mode [ 146.473899][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 146.533250][ T5844] Bluetooth: hci4: command tx timeout [ 146.668552][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 146.708283][ T8434] FAULT_INJECTION: forcing a failure. [ 146.708283][ T8434] name failslab, interval 1, probability 0, space 0, times 1 [ 146.771949][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.2.516 Not tainted 6.14.0-rc2-syzkaller-00473-g7f89ec6c4537 #0 [ 146.771977][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.771987][ T8434] Call Trace: [ 146.771993][ T8434] [ 146.772000][ T8434] dump_stack_lvl+0x241/0x360 [ 146.772025][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.772042][ T8434] ? __pfx__printk+0x10/0x10 [ 146.772061][ T8434] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 146.772083][ T8434] ? __pfx___might_resched+0x10/0x10 [ 146.772107][ T8434] should_fail_ex+0x40a/0x550 [ 146.772133][ T8434] should_failslab+0xac/0x100 [ 146.772154][ T8434] ? __get_vm_area_node+0x132/0x2d0 [ 146.772173][ T8434] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 146.772200][ T8434] __get_vm_area_node+0x132/0x2d0 [ 146.772225][ T8434] __vmalloc_node_range_noprof+0x344/0x1380 [ 146.772249][ T8434] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 146.772272][ T8434] ? mark_lock+0x9a/0x360 [ 146.772308][ T8434] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.772340][ T8434] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 146.772360][ T8434] __vmalloc_noprof+0x79/0x90 [ 146.772383][ T8434] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 146.772405][ T8434] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 146.772425][ T8434] ? bpf_prog_alloc+0x28/0x1b0 [ 146.772448][ T8434] bpf_prog_alloc+0x3a/0x1b0 [ 146.772471][ T8434] bpf_prog_load+0x7f4/0x20e0 [ 146.772507][ T8434] ? __pfx_bpf_prog_load+0x10/0x10 [ 146.772527][ T8434] ? __pfx___might_resched+0x10/0x10 [ 146.772558][ T8434] ? __might_fault+0xaa/0x120 [ 146.772587][ T8434] __sys_bpf+0x4ea/0x820 [ 146.772609][ T8434] ? __pfx___sys_bpf+0x10/0x10 [ 146.772640][ T8434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.772665][ T8434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.772688][ T8434] ? do_syscall_64+0x100/0x230 [ 146.772712][ T8434] __x64_sys_bpf+0x7c/0x90 [ 146.772731][ T8434] do_syscall_64+0xf3/0x230 [ 146.772757][ T8434] ? clear_bhb_loop+0x35/0x90 [ 146.772782][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.772801][ T8434] RIP: 0033:0x7f1f9eb8cde9 [ 146.772815][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.772828][ T8434] RSP: 002b:00007f1f9fa7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.772846][ T8434] RAX: ffffffffffffffda RBX: 00007f1f9eda5fa0 RCX: 00007f1f9eb8cde9 [ 146.772858][ T8434] RDX: 0000000000000048 RSI: 00004000000054c0 RDI: 0000000000000005 [ 146.772868][ T8434] RBP: 00007f1f9fa7e090 R08: 0000000000000000 R09: 0000000000000000 [ 146.772878][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.772887][ T8434] R13: 0000000000000000 R14: 00007f1f9eda5fa0 R15: 00007ffd14635d78 [ 146.772912][ T8434] [ 146.772921][ T8434] syz.2.516: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 146.947413][ T8460] openvswitch: netlink: Message has 8 unknown bytes. [ 147.076917][ T8434] ,cpuset=/,mems_allowed=0-1 [ 147.081811][ T8434] CPU: 1 UID: 0 PID: 8434 Comm: syz.2.516 Not tainted 6.14.0-rc2-syzkaller-00473-g7f89ec6c4537 #0 [ 147.081831][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.081841][ T8434] Call Trace: [ 147.081847][ T8434] [ 147.081853][ T8434] dump_stack_lvl+0x241/0x360 [ 147.081878][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.081898][ T8434] ? __pfx__printk+0x10/0x10 [ 147.081918][ T8434] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 147.081938][ T8434] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 147.081959][ T8434] warn_alloc+0x278/0x410 [ 147.081981][ T8434] ? __pfx_warn_alloc+0x10/0x10 [ 147.081993][ T8434] ? __kasan_kmalloc+0x23/0xb0 [ 147.082011][ T8434] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 147.082038][ T8434] ? __get_vm_area_node+0x280/0x2d0 [ 147.082066][ T8434] __vmalloc_node_range_noprof+0x369/0x1380 [ 147.082090][ T8434] ? mark_lock+0x9a/0x360 [ 147.082126][ T8434] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.082157][ T8434] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 147.082178][ T8434] __vmalloc_noprof+0x79/0x90 [ 147.082199][ T8434] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 147.082221][ T8434] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 147.082240][ T8434] ? bpf_prog_alloc+0x28/0x1b0 [ 147.082263][ T8434] bpf_prog_alloc+0x3a/0x1b0 [ 147.082284][ T8434] bpf_prog_load+0x7f4/0x20e0 [ 147.082322][ T8434] ? __pfx_bpf_prog_load+0x10/0x10 [ 147.082343][ T8434] ? __pfx___might_resched+0x10/0x10 [ 147.082374][ T8434] ? __might_fault+0xaa/0x120 [ 147.082402][ T8434] __sys_bpf+0x4ea/0x820 [ 147.082423][ T8434] ? __pfx___sys_bpf+0x10/0x10 [ 147.082453][ T8434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.082476][ T8434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.082499][ T8434] ? do_syscall_64+0x100/0x230 [ 147.082521][ T8434] __x64_sys_bpf+0x7c/0x90 [ 147.082540][ T8434] do_syscall_64+0xf3/0x230 [ 147.082558][ T8434] ? clear_bhb_loop+0x35/0x90 [ 147.082580][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.082600][ T8434] RIP: 0033:0x7f1f9eb8cde9 [ 147.082616][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.082629][ T8434] RSP: 002b:00007f1f9fa7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.082646][ T8434] RAX: ffffffffffffffda RBX: 00007f1f9eda5fa0 RCX: 00007f1f9eb8cde9 [ 147.082658][ T8434] RDX: 0000000000000048 RSI: 00004000000054c0 RDI: 0000000000000005 [ 147.082674][ T8434] RBP: 00007f1f9fa7e090 R08: 0000000000000000 R09: 0000000000000000 [ 147.082684][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.082694][ T8434] R13: 0000000000000000 R14: 00007f1f9eda5fa0 R15: 00007ffd14635d78 [ 147.082720][ T8434] [ 147.082769][ T8434] Mem-Info: [ 147.176133][ T8335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.346618][ T8434] active_anon:6438 inactive_anon:0 isolated_anon:0 [ 147.346618][ T8434] active_file:1826 inactive_file:38339 isolated_file:0 [ 147.346618][ T8434] unevictable:3812 dirty:518 writeback:0 [ 147.346618][ T8434] slab_reclaimable:10796 slab_unreclaimable:97511 [ 147.346618][ T8434] mapped:31653 shmem:4312 pagetables:735 [ 147.346618][ T8434] sec_pagetables:0 bounce:0 [ 147.346618][ T8434] kernel_misc_reclaimable:0 [ 147.346618][ T8434] free:1336686 free_pcp:801 free_cma:0 [ 147.416583][ T8434] Node 0 active_anon:25560kB inactive_anon:0kB active_file:7400kB inactive_file:153288kB unevictable:13748kB isolated(anon):0kB isolated(file):0kB mapped:126544kB dirty:2136kB writeback:0kB shmem:15724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10880kB pagetables:2892kB sec_pagetables:0kB all_unreclaimable? no [ 147.465620][ T8434] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 147.503548][ T8335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.520946][ T8434] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.554342][ T8434] lowmem_reserve[]: 0 2490 2490 0 0 [ 147.563791][ T8335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.580541][ T8335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.596576][ T8434] Node 0 DMA32 free:1428304kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:34824kB inactive_anon:0kB active_file:7400kB inactive_file:152968kB unevictable:4448kB writepending:2132kB present:3129332kB managed:2549864kB mlocked:2904kB bounce:0kB free_pcp:3440kB local_pcp:1184kB free_cma:0kB [ 147.633299][ T8434] lowmem_reserve[]: 0 0 0 0 0 [ 147.664525][ T8434] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 147.697783][ T8434] lowmem_reserve[]: 0 0 0 0 0 [ 147.703535][ T8434] Node 1 Normal free:3902208kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 147.746823][ T8434] lowmem_reserve[]: 0 0 0 0 0 [ 147.751621][ T8434] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.848542][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.859256][ T8434] Node 0 DMA32: 3*4kB (UME) 8*8kB (U) 4*16kB (UE) 63*32kB (UME) 1136*64kB (UME) 322*128kB (UE) 58*256kB (UME) 8*512kB (UME) 4*1024kB (M) 4*2048kB (UM) 313*4096kB (UM) = 1429356kB [ 147.915379][ T8434] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.941571][ T8434] Node 1 Normal: 65*4kB (UME) 58*8kB (UME) 50*16kB (UME) 212*32kB (UME) 91*64kB (UME) 30*128kB (UME) 11*256kB (UM) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3902260kB [ 147.966811][ T8434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.977852][ T8434] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.987348][ T8434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.019116][ T8434] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.028889][ T8434] 45854 total pagecache pages [ 148.033588][ T8434] 0 pages in swap cache [ 148.059115][ T8335] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.076453][ T8434] Free swap = 124996kB [ 148.080669][ T8434] Total swap = 124996kB [ 148.100089][ T8434] 2097051 pages RAM [ 148.105202][ T8434] 0 pages HighMem/MovableOnly [ 148.116885][ T8434] 427863 pages reserved [ 148.118250][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.121096][ T8434] 0 pages cma reserved [ 148.132368][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.209773][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.216972][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.607564][ T5844] Bluetooth: hci4: command tx timeout [ 149.674263][ T8335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.766009][ T8335] veth0_vlan: entered promiscuous mode [ 149.798507][ T8335] veth1_vlan: entered promiscuous mode [ 149.842085][ T8335] veth0_macvtap: entered promiscuous mode [ 149.870267][ T8335] veth1_macvtap: entered promiscuous mode [ 149.899197][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.934456][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.956238][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.992700][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.026212][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.038950][ T8335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.052700][ T8335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.063094][ T8335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.072039][ T8335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.090647][ T8534] __nla_validate_parse: 6 callbacks suppressed [ 150.090665][ T8534] netlink: 216 bytes leftover after parsing attributes in process `syz.3.537'. [ 150.106713][ T8335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.115571][ T8534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 150.231344][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.245984][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.291415][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.318074][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.701450][ T8560] netlink: 'syz.3.545': attribute type 1 has an invalid length. [ 150.875594][ T8555] infiniband syz!: set down [ 150.889054][ T8555] infiniband syz!: added team_slave_0 [ 150.943814][ T8555] RDS/IB: syz!: added [ 150.948762][ T8555] smc: adding ib device syz! with port count 1 [ 150.952475][ T8568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 150.955152][ T8555] smc: ib device syz! port 1 has pnetid [ 151.284738][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 151.309697][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.549'. [ 151.581875][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.612288][ T8582] netlink: 216 bytes leftover after parsing attributes in process `syz.1.551'. [ 151.624062][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.551'. [ 151.991090][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.432100][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.548329][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 152.587018][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.553'. [ 152.604274][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.657807][ T8588] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 152.973956][ T8598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 153.062851][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.081449][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.092019][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.107147][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.123841][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.132662][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.211197][ T1142] bridge_slave_1: left allmulticast mode [ 153.339513][ T1142] bridge_slave_1: left promiscuous mode [ 153.379450][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.467890][ T1142] bridge_slave_0: left allmulticast mode [ 153.484250][ T1142] bridge_slave_0: left promiscuous mode [ 153.491947][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.695478][ T8614] Bluetooth: MGMT ver 1.23 [ 153.968592][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.982065][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.992122][ T1142] bond0 (unregistering): Released all slaves [ 154.019007][ T8616] tipc: Started in network mode [ 154.044100][ T8616] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 154.074812][ T8616] tipc: Enabled bearer , priority 10 [ 154.975284][ T1142] hsr_slave_0: left promiscuous mode [ 154.993151][ T1142] hsr_slave_1: left promiscuous mode [ 155.011566][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.033118][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.048152][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.066177][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.126833][ T1142] veth1_macvtap: left promiscuous mode [ 155.132740][ T1142] veth0_macvtap: left promiscuous mode [ 155.142120][ T1142] veth1_vlan: left promiscuous mode [ 155.150911][ T1142] veth0_vlan: left promiscuous mode [ 155.168277][ T5844] Bluetooth: hci4: command tx timeout [ 155.198482][ T5837] tipc: Node number set to 43690 [ 155.754029][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 155.793652][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 156.415174][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 156.517328][ T8675] lo: entered promiscuous mode [ 156.522270][ T8675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.572770][ T8684] __nla_validate_parse: 7 callbacks suppressed [ 156.572789][ T8684] netlink: 216 bytes leftover after parsing attributes in process `syz.2.575'. [ 156.641855][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 156.651158][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 156.761655][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.786072][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.802897][ T8602] bridge_slave_0: entered allmulticast mode [ 156.811418][ T8602] bridge_slave_0: entered promiscuous mode [ 156.839852][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.847598][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.854817][ T8602] bridge_slave_1: entered allmulticast mode [ 156.876701][ T8602] bridge_slave_1: entered promiscuous mode [ 156.907775][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.933817][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.018588][ T8602] team0: Port device team_slave_0 added [ 157.038962][ T8602] team0: Port device team_slave_1 added [ 157.096142][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.103499][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.130675][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.162100][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.169568][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.203465][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.238266][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 157.251330][ T5844] Bluetooth: hci4: command tx timeout [ 157.265780][ T8703] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 157.277926][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 157.287700][ T8602] hsr_slave_0: entered promiscuous mode [ 157.294973][ T8602] hsr_slave_1: entered promiscuous mode [ 157.303424][ T8703] pimreg: left allmulticast mode [ 157.497649][ T8706] openvswitch: netlink: IP tunnel dst address not specified [ 157.862681][ T8602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.874992][ T8602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.924117][ T8602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.952417][ T8602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.015269][ T8724] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 158.225366][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.273639][ T8729] netlink: 216 bytes leftover after parsing attributes in process `syz.3.588'. [ 158.280860][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.316540][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 158.387650][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.395385][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.407573][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.588'. [ 158.410353][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.424155][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.576656][ T8736] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 158.589304][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 158.600716][ T8737] netlink: 216 bytes leftover after parsing attributes in process `syz.3.591'. [ 158.636580][ T8734] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 158.846193][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.977238][ T8602] veth0_vlan: entered promiscuous mode [ 159.005469][ T8754] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 159.006155][ T8602] veth1_vlan: entered promiscuous mode [ 159.074315][ T8602] veth0_macvtap: entered promiscuous mode [ 159.100513][ T8602] veth1_macvtap: entered promiscuous mode [ 159.123343][ T8757] netlink: 'syz.2.597': attribute type 6 has an invalid length. [ 159.135032][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.156725][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.187790][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.213807][ T8602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.245302][ T8602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.261056][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.284871][ T8602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.303202][ T8602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.313602][ T8602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.326862][ T5844] Bluetooth: hci4: command tx timeout [ 159.330498][ T8602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.516595][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.541862][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.609560][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.618639][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.786120][ T9] IPVS: starting estimator thread 0... [ 159.897113][ T8778] IPVS: using max 27 ests per chain, 64800 per kthread [ 160.288983][ T8769] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 160.416963][ T8797] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 161.170960][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.781931][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.831961][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.890972][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.209330][ T8843] No such timeout policy "syz0" [ 162.396979][ T1142] bridge_slave_1: left allmulticast mode [ 162.402912][ T1142] bridge_slave_1: left promiscuous mode [ 162.413186][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.465203][ T8853] __nla_validate_parse: 12 callbacks suppressed [ 162.465223][ T8853] netlink: 216 bytes leftover after parsing attributes in process `syz.2.627'. [ 162.498940][ T1142] bridge_slave_0: left allmulticast mode [ 162.504817][ T1142] bridge_slave_0: left promiscuous mode [ 162.516532][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 162.529561][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.567619][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 162.792666][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.803785][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.826829][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.834719][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.854249][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.862898][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.069616][ T8865] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 163.078003][ T8865] netlink: 228 bytes leftover after parsing attributes in process `syz.3.625'. [ 163.190993][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.203562][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.214172][ T1142] bond0 (unregistering): Released all slaves [ 163.315229][ T8861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.365671][ T8851] lo speed is unknown, defaulting to 1000 [ 163.423936][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 163.466526][ T8851] lo speed is unknown, defaulting to 1000 [ 163.540246][ T8861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.587637][ T8851] lo speed is unknown, defaulting to 1000 [ 163.674553][ T8861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.775802][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 163.859941][ T8851] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.924607][ T8851] infiniband sz0: RDMA CMA: cma_listen_on_dev, error -98 [ 164.056701][ T8861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.077840][ T8851] lo speed is unknown, defaulting to 1000 [ 164.113135][ T8851] lo speed is unknown, defaulting to 1000 [ 164.156693][ T8851] lo speed is unknown, defaulting to 1000 [ 164.177149][ T8851] lo speed is unknown, defaulting to 1000 [ 164.183952][ T8851] lo speed is unknown, defaulting to 1000 [ 164.251334][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 164.286213][ T8851] lo speed is unknown, defaulting to 1000 [ 164.332728][ T8851] lo speed is unknown, defaulting to 1000 [ 164.354690][ T8861] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.373502][ T8861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.382303][ T8851] lo speed is unknown, defaulting to 1000 [ 164.395298][ T8861] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.409106][ T8851] lo speed is unknown, defaulting to 1000 [ 164.409237][ T8863] chnl_net:caif_netlink_parms(): no params data found [ 164.428752][ T8861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.437347][ T8851] lo speed is unknown, defaulting to 1000 [ 164.457725][ T8851] lo speed is unknown, defaulting to 1000 [ 164.650958][ T8892] ax25_connect(): syz.4.635 uses autobind, please contact jreuter@yaina.de [ 164.879839][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.898063][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.927572][ T5844] Bluetooth: hci4: command tx timeout [ 164.934077][ T8863] bridge_slave_0: entered allmulticast mode [ 164.948033][ T8863] bridge_slave_0: entered promiscuous mode [ 165.014116][ T1142] hsr_slave_0: left promiscuous mode [ 165.055713][ T1142] hsr_slave_1: left promiscuous mode [ 165.068006][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.084295][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.103175][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.111024][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.134488][ T1142] veth1_macvtap: left promiscuous mode [ 165.140368][ T1142] veth0_macvtap: left promiscuous mode [ 165.146019][ T1142] veth1_vlan: left promiscuous mode [ 165.151409][ T1142] veth0_vlan: left promiscuous mode [ 165.573668][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 165.619261][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 166.024583][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.031947][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.039515][ T8863] bridge_slave_1: entered allmulticast mode [ 166.046162][ T8863] bridge_slave_1: entered promiscuous mode [ 166.112344][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.144131][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.166205][ T8914] netlink: 216 bytes leftover after parsing attributes in process `syz.2.639'. [ 166.176797][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 166.291951][ T8863] team0: Port device team_slave_0 added [ 166.302313][ T8863] team0: Port device team_slave_1 added [ 166.364976][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 166.406593][ T8924] netlink: 'syz.2.642': attribute type 21 has an invalid length. [ 166.414439][ T8924] netlink: 'syz.2.642': attribute type 5 has an invalid length. [ 166.428368][ T8924] netlink: 'syz.2.642': attribute type 6 has an invalid length. [ 166.437559][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.458621][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.510788][ T8863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.523579][ T8863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.536872][ T8863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.586569][ T8863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.591269][ T8932] netlink: 'syz.2.644': attribute type 10 has an invalid length. [ 166.670980][ T8863] hsr_slave_0: entered promiscuous mode [ 166.691679][ T8863] hsr_slave_1: entered promiscuous mode [ 167.006573][ T5844] Bluetooth: hci4: command tx timeout [ 167.445486][ T8966] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 167.856572][ T8863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.867531][ T8988] __nla_validate_parse: 6 callbacks suppressed [ 167.867549][ T8988] netlink: 216 bytes leftover after parsing attributes in process `syz.3.662'. [ 167.918940][ T8863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.932603][ T8984] syz.4.661: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.937013][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.662'. [ 167.983842][ T8863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.002366][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.4.661 Not tainted 6.14.0-rc2-syzkaller-00473-g7f89ec6c4537 #0 [ 168.002393][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 168.002404][ T8984] Call Trace: [ 168.002410][ T8984] [ 168.002417][ T8984] dump_stack_lvl+0x241/0x360 [ 168.002445][ T8984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.002463][ T8984] ? __pfx__printk+0x10/0x10 [ 168.002485][ T8984] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 168.002505][ T8984] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 168.002528][ T8984] warn_alloc+0x278/0x410 [ 168.002551][ T8984] ? __pfx_warn_alloc+0x10/0x10 [ 168.002574][ T8984] ? translate_table+0x19f/0x22b0 [ 168.002597][ T8984] ? __get_vm_area_node+0x1c8/0x2d0 [ 168.002618][ T8984] ? __get_vm_area_node+0x25c/0x2d0 [ 168.002647][ T8984] __vmalloc_node_range_noprof+0x62f/0x1380 [ 168.002672][ T8984] ? lockdep_hardirqs_on+0x99/0x150 [ 168.002713][ T8984] ? rcu_is_watching+0x15/0xb0 [ 168.002730][ T8984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.002754][ T8984] ? rcu_is_watching+0x15/0xb0 [ 168.002772][ T8984] ? trace_kmalloc+0x1f/0xd0 [ 168.002789][ T8984] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 168.002809][ T8984] ? __kvmalloc_node_noprof+0x72/0x190 [ 168.002835][ T8984] __kvmalloc_node_noprof+0x142/0x190 [ 168.002858][ T8984] ? translate_table+0x19f/0x22b0 [ 168.002882][ T8984] translate_table+0x19f/0x22b0 [ 168.002933][ T8984] ? __pfx_translate_table+0x10/0x10 [ 168.002971][ T8984] ? __virt_addr_valid+0x183/0x530 [ 168.002996][ T8984] ? __might_fault+0xaa/0x120 [ 168.003020][ T8984] ? __might_fault+0xc6/0x120 [ 168.003048][ T8984] ? copy_from_sockptr_offset+0x6b/0xb0 [ 168.003067][ T8984] do_arpt_set_ctl+0x101c/0x1650 [ 168.003093][ T8984] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 168.003112][ T8984] ? nf_setsockopt+0x240/0x2c0 [ 168.003127][ T8984] ? do_ip_setsockopt+0x2824/0x3ae0 [ 168.003147][ T8984] ? __pfx_lock_release+0x10/0x10 [ 168.003171][ T8984] ? rcu_is_watching+0x15/0xb0 [ 168.003201][ T8984] ? __mutex_unlock_slowpath+0x227/0x800 [ 168.003229][ T8984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.003253][ T8984] ? __pfx___mutex_lock+0x10/0x10 [ 168.003283][ T8984] nf_setsockopt+0x295/0x2c0 [ 168.003302][ T8984] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.003323][ T8984] smc_setsockopt+0x275/0xd10 [ 168.003344][ T8984] ? __pfx_smc_setsockopt+0x10/0x10 [ 168.003362][ T8984] ? aa_sock_opt_perm+0x79/0x120 [ 168.003387][ T8984] ? __pfx_smc_setsockopt+0x10/0x10 [ 168.003399][ T8984] do_sock_setsockopt+0x3af/0x720 [ 168.003422][ T8984] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 168.003445][ T8984] ? __fget_files+0x395/0x410 [ 168.003465][ T8984] ? __fget_files+0x2a/0x410 [ 168.003494][ T8984] __x64_sys_setsockopt+0x1ee/0x280 [ 168.003521][ T8984] do_syscall_64+0xf3/0x230 [ 168.003540][ T8984] ? clear_bhb_loop+0x35/0x90 [ 168.003565][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.003585][ T8984] RIP: 0033:0x7feb0778cde9 [ 168.003601][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.003615][ T8984] RSP: 002b:00007feb08698038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.003633][ T8984] RAX: ffffffffffffffda RBX: 00007feb079a6080 RCX: 00007feb0778cde9 [ 168.003645][ T8984] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000008 [ 168.003655][ T8984] RBP: 00007feb0780e2a0 R08: 00000000000003f8 R09: 0000000000000000 [ 168.003665][ T8984] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000000 [ 168.003676][ T8984] R13: 0000000000000000 R14: 00007feb079a6080 R15: 00007ffd607a0298 [ 168.003702][ T8984] [ 168.003709][ T8984] Mem-Info: [ 168.371036][ T8984] active_anon:3680 inactive_anon:0 isolated_anon:0 [ 168.371036][ T8984] active_file:1884 inactive_file:38355 isolated_file:0 [ 168.371036][ T8984] unevictable:768 dirty:212 writeback:0 [ 168.371036][ T8984] slab_reclaimable:11025 slab_unreclaimable:99686 [ 168.371036][ T8984] mapped:28813 shmem:1617 pagetables:827 [ 168.371036][ T8984] sec_pagetables:0 bounce:0 [ 168.371036][ T8984] kernel_misc_reclaimable:0 [ 168.371036][ T8984] free:1338422 free_pcp:548 free_cma:0 [ 168.372366][ T8863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.416209][ T8984] Node 0 active_anon:14720kB inactive_anon:0kB active_file:7536kB inactive_file:153352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115252kB dirty:848kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10848kB pagetables:3308kB sec_pagetables:0kB all_unreclaimable? no [ 168.416289][ T8984] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 168.416379][ T8984] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.416430][ T8984] lowmem_reserve[]: 0 2490 2490 0 0 [ 168.416475][ T8984] Node 0 DMA32 free:1435568kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:14684kB inactive_anon:0kB active_file:7536kB inactive_file:153032kB unevictable:1536kB writepending:848kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:2184kB local_pcp:1468kB free_cma:0kB [ 168.416525][ T8984] lowmem_reserve[]: 0 0 0 0 0 [ 168.416564][ T8984] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 168.540336][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 168.551806][ T8984] lowmem_reserve[]: 0 0 0 0 0 [ 168.602591][ T8984] Node 1 Normal free:3902760kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.632205][ T8984] lowmem_reserve[]: 0 0 0 0 0 [ 168.670512][ T8984] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.690141][ T8984] Node 0 DMA32: 247*4kB (UME) 250*8kB (UME) 185*16kB (UME) 195*32kB (UME) 957*64kB (UME) 390*128kB (UME) 65*256kB (UME) 10*512kB (UM) 3*1024kB (M) 4*2048kB (UM) 313*4096kB (UM) = 1438428kB [ 168.709269][ T8984] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.722034][ T8984] Node 1 Normal: 186*4kB (UME) 58*8kB (UME) 49*16kB (UME) 213*32kB (UME) 91*64kB (UME) 30*128kB (UME) 11*256kB (UM) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3902760kB [ 168.741939][ T8984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.756135][ T8984] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.773266][ T8984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.783687][ T8984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.799767][ T8984] 41856 total pagecache pages [ 168.804484][ T8984] 0 pages in swap cache [ 168.835874][ T8984] Free swap = 124996kB [ 168.851894][ T8984] Total swap = 124996kB [ 168.856109][ T8984] 2097051 pages RAM [ 168.872063][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 168.892334][ T8984] 0 pages HighMem/MovableOnly [ 168.902460][ T8984] 427863 pages reserved [ 168.908096][ T8984] 0 pages cma reserved [ 168.938964][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.989590][ T8863] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.049030][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.056233][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.086477][ T5844] Bluetooth: hci4: command tx timeout [ 169.105100][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.112280][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.289719][ T9036] netlink: 216 bytes leftover after parsing attributes in process `syz.3.676'. [ 169.309023][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 169.603657][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.615889][ T9057] netlink: zone id is out of range [ 169.637815][ T9057] netlink: zone id is out of range [ 169.646951][ T9057] netlink: zone id is out of range [ 169.655439][ T9057] netlink: zone id is out of range [ 169.670204][ T9059] netlink: 'syz.3.681': attribute type 5 has an invalid length. [ 169.725570][ T9059] : entered promiscuous mode [ 169.774203][ T8863] veth0_vlan: entered promiscuous mode [ 169.818442][ T8863] veth1_vlan: entered promiscuous mode [ 169.880761][ T5888] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 169.895898][ T8863] veth0_macvtap: entered promiscuous mode [ 169.917877][ T8863] veth1_macvtap: entered promiscuous mode [ 169.924331][ T5888] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 169.948450][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.975560][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.018308][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.060156][ T9045] lo speed is unknown, defaulting to 1000 [ 170.113283][ T9073] trusted_key: syz.4.685 sent an empty control message without MSG_MORE. [ 170.119248][ T8863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.133530][ T8863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.146247][ T8863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.181245][ T8863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.201192][ T8863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.246086][ T8863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.266701][ T8863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.457629][ T9085] netlink: 216 bytes leftover after parsing attributes in process `syz.4.688'. [ 170.476543][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 170.544941][ T9074] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 170.552911][ T9074] netlink: 228 bytes leftover after parsing attributes in process `syz.2.679'. [ 170.855632][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.874960][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.036841][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.046563][ T9052] lo speed is unknown, defaulting to 1000 [ 171.055803][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.166973][ T5844] Bluetooth: hci4: command tx timeout [ 171.502381][ T9096] lo speed is unknown, defaulting to 1000 [ 171.520077][ T9067] lo speed is unknown, defaulting to 1000 [ 171.864658][ T9107] lo speed is unknown, defaulting to 1000 [ 172.097770][ T9110] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.693'. [ 173.163776][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.272503][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.380303][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.461177][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.526636][ T1152] bridge_slave_1: left allmulticast mode [ 173.532305][ T1152] bridge_slave_1: left promiscuous mode [ 173.538222][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.547556][ T1152] bridge_slave_0: left allmulticast mode [ 173.553205][ T1152] bridge_slave_0: left promiscuous mode [ 173.559148][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.049533][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.106153][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.151665][ T9150] __nla_validate_parse: 1 callbacks suppressed [ 174.151683][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 174.192532][ T1152] bond0 (unregistering): Released all slaves [ 174.231786][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 174.315557][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 174.483187][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.508173][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.525102][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.534985][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.543053][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.548776][ T9164] netlink: 'syz.4.706': attribute type 39 has an invalid length. [ 174.558538][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.906639][ T1152] hsr_slave_0: left promiscuous mode [ 174.919230][ T1152] hsr_slave_1: left promiscuous mode [ 174.938035][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.963836][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.001109][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.026763][ T9178] netlink: 'syz.4.710': attribute type 2 has an invalid length. [ 175.056730][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.135031][ T1152] veth1_macvtap: left promiscuous mode [ 175.144101][ T1152] veth0_macvtap: left promiscuous mode [ 175.153329][ T1152] veth1_vlan: left promiscuous mode [ 175.161334][ T1152] veth0_vlan: left promiscuous mode [ 175.589628][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 175.632957][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 176.053894][ T9161] lo speed is unknown, defaulting to 1000 [ 176.280969][ T9161] chnl_net:caif_netlink_parms(): no params data found [ 176.307684][ T9199] dvmrp0: entered allmulticast mode [ 176.375352][ T9202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.715'. [ 176.463667][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.479205][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.486939][ T9161] bridge_slave_0: entered allmulticast mode [ 176.494008][ T9161] bridge_slave_0: entered promiscuous mode [ 176.502144][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.510105][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.517761][ T9161] bridge_slave_1: entered allmulticast mode [ 176.524371][ T9161] bridge_slave_1: entered promiscuous mode [ 176.532118][ T9212] ================================================================== [ 176.540205][ T9212] BUG: KASAN: null-ptr-deref in generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 176.548633][ T9212] Read of size 24 at addr 0000000000000010 by task syz.4.717/9212 [ 176.556439][ T9212] [ 176.558762][ T9212] CPU: 1 UID: 0 PID: 9212 Comm: syz.4.717 Not tainted 6.14.0-rc2-syzkaller-00473-g7f89ec6c4537 #0 [ 176.558780][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.558790][ T9212] Call Trace: [ 176.558797][ T9212] [ 176.558803][ T9212] dump_stack_lvl+0x241/0x360 [ 176.558824][ T9212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.558839][ T9212] ? __pfx__printk+0x10/0x10 [ 176.558854][ T9212] ? _printk+0xd5/0x120 [ 176.558870][ T9212] print_report+0xe8/0x550 [ 176.558888][ T9212] ? bpf_trace_run2+0x1fc/0x540 [ 176.558905][ T9212] ? bpf_trace_run2+0x36e/0x540 [ 176.558921][ T9212] ? __virt_addr_valid+0x58/0x530 [ 176.558943][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 176.558965][ T9212] kasan_report+0x143/0x180 [ 176.558982][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 176.559004][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 176.559026][ T9212] kasan_check_range+0x282/0x290 [ 176.559042][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 176.559063][ T9212] __asan_memcpy+0x29/0x70 [ 176.559084][ T9212] generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 176.559107][ T9212] ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10 [ 176.559135][ T9212] tsconfig_prepare_data+0x133/0x740 [ 176.559162][ T9212] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 176.559184][ T9212] ? __nlmsg_put+0xf7/0x190 [ 176.559206][ T9212] ? genlmsg_put+0x145/0x2e0 [ 176.559221][ T9212] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 176.559241][ T9212] ethnl_default_dumpit+0x4a2/0xb30 [ 176.559257][ T9212] ? ethnl_default_dumpit+0x83/0xb30 [ 176.559274][ T9212] genl_dumpit+0x10d/0x1b0 [ 176.559292][ T9212] netlink_dump+0x64d/0xe10 [ 176.559316][ T9212] ? __pfx_netlink_dump+0x10/0x10 [ 176.559342][ T9212] ? genl_start+0x59d/0x6d0 [ 176.559362][ T9212] __netlink_dump_start+0x5a2/0x790 [ 176.559385][ T9212] genl_rcv_msg+0x894/0xec0 [ 176.559405][ T9212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.559424][ T9212] ? __pfx_genl_start+0x10/0x10 [ 176.559439][ T9212] ? __pfx_genl_dumpit+0x10/0x10 [ 176.559454][ T9212] ? __pfx_genl_done+0x10/0x10 [ 176.559477][ T9212] ? __pfx_lock_acquire+0x10/0x10 [ 176.559495][ T9212] ? __pfx_ethnl_default_start+0x10/0x10 [ 176.559509][ T9212] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 176.559523][ T9212] ? __pfx_ethnl_default_done+0x10/0x10 [ 176.559537][ T9212] ? __pfx___might_resched+0x10/0x10 [ 176.559559][ T9212] netlink_rcv_skb+0x206/0x480 [ 176.559579][ T9212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.559596][ T9212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.559621][ T9212] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 176.559647][ T9212] genl_rcv+0x28/0x40 [ 176.559662][ T9212] netlink_unicast+0x7f6/0x990 [ 176.559684][ T9212] ? __pfx_netlink_unicast+0x10/0x10 [ 176.559701][ T9212] ? __virt_addr_valid+0x45f/0x530 [ 176.559721][ T9212] ? __phys_addr_symbol+0x2f/0x70 [ 176.559741][ T9212] ? __check_object_size+0x47a/0x730 [ 176.559760][ T9212] netlink_sendmsg+0x8de/0xcb0 [ 176.559779][ T9212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.559794][ T9212] ? aa_sock_msg_perm+0x91/0x160 [ 176.559816][ T9212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.559828][ T9212] __sock_sendmsg+0x221/0x270 [ 176.559845][ T9212] ____sys_sendmsg+0x53a/0x860 [ 176.559867][ T9212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.559885][ T9212] ? __fget_files+0x2a/0x410 [ 176.559903][ T9212] ? __fget_files+0x2a/0x410 [ 176.559925][ T9212] __sys_sendmsg+0x269/0x350 [ 176.559945][ T9212] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.559981][ T9212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.560001][ T9212] ? do_syscall_64+0x100/0x230 [ 176.560020][ T9212] ? do_syscall_64+0xb6/0x230 [ 176.560037][ T9212] do_syscall_64+0xf3/0x230 [ 176.560054][ T9212] ? clear_bhb_loop+0x35/0x90 [ 176.560074][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.560092][ T9212] RIP: 0033:0x7feb0778cde9 [ 176.560106][ T9212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.560120][ T9212] RSP: 002b:00007feb086b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.560136][ T9212] RAX: ffffffffffffffda RBX: 00007feb079a5fa0 RCX: 00007feb0778cde9 [ 176.560148][ T9212] RDX: 0000000020040800 RSI: 00004000000001c0 RDI: 0000000000000005 [ 176.560163][ T9212] RBP: 00007feb0780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.560173][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.560182][ T9212] R13: 0000000000000000 R14: 00007feb079a5fa0 R15: 00007ffd607a0298 [ 176.560199][ T9212] [ 176.560204][ T9212] ================================================================== [ 176.696631][ T5848] Bluetooth: hci4: command tx timeout [ 176.735499][ T9212] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 176.735517][ T9212] CPU: 1 UID: 0 PID: 9212 Comm: syz.4.717 Not tainted 6.14.0-rc2-syzkaller-00473-g7f89ec6c4537 #0 [ 176.735537][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.735548][ T9212] Call Trace: [ 176.735555][ T9212] [ 176.735561][ T9212] dump_stack_lvl+0x241/0x360 [ 177.048366][ T9212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.053578][ T9212] ? __pfx__printk+0x10/0x10 [ 177.058178][ T9212] ? preempt_schedule+0xe1/0xf0 [ 177.063036][ T9212] ? vscnprintf+0x5d/0x90 [ 177.067413][ T9212] panic+0x349/0x880 [ 177.071317][ T9212] ? check_panic_on_warn+0x21/0xb0 [ 177.076435][ T9212] ? __pfx_panic+0x10/0x10 [ 177.080862][ T9212] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 177.086846][ T9212] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.093182][ T9212] ? print_report+0xe8/0x550 [ 177.097779][ T9212] check_panic_on_warn+0x86/0xb0 [ 177.102719][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 177.108792][ T9212] end_report+0x77/0x160 [ 177.113036][ T9212] kasan_report+0x154/0x180 [ 177.117547][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 177.123630][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 177.129723][ T9212] kasan_check_range+0x282/0x290 [ 177.134692][ T9212] ? generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 177.140788][ T9212] __asan_memcpy+0x29/0x70 [ 177.145223][ T9212] generic_hwtstamp_ioctl_lower+0x198/0x3b0 [ 177.151137][ T9212] ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10 [ 177.157564][ T9212] tsconfig_prepare_data+0x133/0x740 [ 177.162852][ T9212] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 177.168658][ T9212] ? __nlmsg_put+0xf7/0x190 [ 177.173159][ T9212] ? genlmsg_put+0x145/0x2e0 [ 177.177739][ T9212] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 177.183542][ T9212] ethnl_default_dumpit+0x4a2/0xb30 [ 177.188731][ T9212] ? ethnl_default_dumpit+0x83/0xb30 [ 177.194011][ T9212] genl_dumpit+0x10d/0x1b0 [ 177.198418][ T9212] netlink_dump+0x64d/0xe10 [ 177.202925][ T9212] ? __pfx_netlink_dump+0x10/0x10 [ 177.207947][ T9212] ? genl_start+0x59d/0x6d0 [ 177.212441][ T9212] __netlink_dump_start+0x5a2/0x790 [ 177.217635][ T9212] genl_rcv_msg+0x894/0xec0 [ 177.222222][ T9212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.227240][ T9212] ? __pfx_genl_start+0x10/0x10 [ 177.232082][ T9212] ? __pfx_genl_dumpit+0x10/0x10 [ 177.237013][ T9212] ? __pfx_genl_done+0x10/0x10 [ 177.241772][ T9212] ? __pfx_lock_acquire+0x10/0x10 [ 177.246793][ T9212] ? __pfx_ethnl_default_start+0x10/0x10 [ 177.252415][ T9212] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 177.258139][ T9212] ? __pfx_ethnl_default_done+0x10/0x10 [ 177.263687][ T9212] ? __pfx___might_resched+0x10/0x10 [ 177.268979][ T9212] netlink_rcv_skb+0x206/0x480 [ 177.273749][ T9212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.278768][ T9212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.284057][ T9212] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 177.289523][ T9212] genl_rcv+0x28/0x40 [ 177.293498][ T9212] netlink_unicast+0x7f6/0x990 [ 177.298258][ T9212] ? __pfx_netlink_unicast+0x10/0x10 [ 177.303533][ T9212] ? __virt_addr_valid+0x45f/0x530 [ 177.308639][ T9212] ? __phys_addr_symbol+0x2f/0x70 [ 177.313659][ T9212] ? __check_object_size+0x47a/0x730 [ 177.318939][ T9212] netlink_sendmsg+0x8de/0xcb0 [ 177.323698][ T9212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.328984][ T9212] ? aa_sock_msg_perm+0x91/0x160 [ 177.333926][ T9212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.339208][ T9212] __sock_sendmsg+0x221/0x270 [ 177.343887][ T9212] ____sys_sendmsg+0x53a/0x860 [ 177.348650][ T9212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.353929][ T9212] ? __fget_files+0x2a/0x410 [ 177.358520][ T9212] ? __fget_files+0x2a/0x410 [ 177.363119][ T9212] __sys_sendmsg+0x269/0x350 [ 177.367731][ T9212] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.372862][ T9212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.379188][ T9212] ? do_syscall_64+0x100/0x230 [ 177.383948][ T9212] ? do_syscall_64+0xb6/0x230 [ 177.388627][ T9212] do_syscall_64+0xf3/0x230 [ 177.393125][ T9212] ? clear_bhb_loop+0x35/0x90 [ 177.397800][ T9212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.403695][ T9212] RIP: 0033:0x7feb0778cde9 [ 177.408973][ T9212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.428584][ T9212] RSP: 002b:00007feb086b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.436993][ T9212] RAX: ffffffffffffffda RBX: 00007feb079a5fa0 RCX: 00007feb0778cde9 [ 177.444981][ T9212] RDX: 0000000020040800 RSI: 00004000000001c0 RDI: 0000000000000005 [ 177.452980][ T9212] RBP: 00007feb0780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.460952][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.468929][ T9212] R13: 0000000000000000 R14: 00007feb079a5fa0 R15: 00007ffd607a0298 [ 177.476904][ T9212] [ 177.480174][ T9212] Kernel Offset: disabled [ 177.484487][ T9212] Rebooting in 86400 seconds..