last executing test programs: 2m4.298357304s ago: executing program 4 (id=1039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m44.546005987s ago: executing program 4 (id=1039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m43.337770348s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x3ee, 0x3ff, 0x4, 0x5, 0x8, "79abc3303202e01da6a27829718385a05aa1545768aea6e9840506761cefd54953327ef52e63749d7ef132cac28e1df94030a7fc399965849ea653eb7a3e530a391c3b9001d6c5f9f4bfcb0147e09248bb8a5fde5f560bf14fb8777321825af3f63c8d967df653579b0e9fd114f509b484c6cab915376801295de91da6b2a188"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d9ce971b1daa503}}}, &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044014) 1m38.064155382s ago: executing program 3 (id=1810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce8329ca833d2537955e9c6dd97f3b47dcf8", 0x30) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x8}], 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000007c0)={0x88, @private=0xa010101, 0x4e22, 0x4, 'sh\x00', 0x1, 0x4, 0x36}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0xfffffffffffffdc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x2c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030401000000000037005b7ebf00", @ANYRES32=0x0, @ANYBLOB="010102000000000014003500776c616e31000000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0xba01}, 0x810) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xd32}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f00000000c0)={0xf8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x75}, @nested={0xd3, 0x102, 0x0, 0x1, [@generic="6973ae142c50f87a6e4dae562a65de0dadd4ee7ab4a4d8fc2536ed71ace235caa904995ea6f0f2256465462af4d176830350", @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x126}, @generic="c93e0c54d03847e73b843aafd0fc0ebec4114a648d06534ae17c3d04d6d3f61ba6d1218f315398c7427642e67fbb0facb95c3c1637f2bb7f234896f1d2968603e82be5d3a0766e500e9da8e3f79ba8aa452f432c50553926d6fb7c13b1f218c80a9b0fa0930050fe026bbbc5a9dc69b9ea", @nested={0x4, 0xe0}]}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}, 0xf8}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="180000003a00000028bd7000fcdbdf250800ea00540412f7c048a07692dafa66002a018fb4591899b7a0656f60581f51d6c7851cd872f1903ba147b85c91052520ea2653caac9fa4ae705770811d67e8f7", @ANYRES32=r13, @ANYBLOB], 0x18}], 0x3}, 0x4008000) 1m25.172674195s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x3ee, 0x3ff, 0x4, 0x5, 0x8, "79abc3303202e01da6a27829718385a05aa1545768aea6e9840506761cefd54953327ef52e63749d7ef132cac28e1df94030a7fc399965849ea653eb7a3e530a391c3b9001d6c5f9f4bfcb0147e09248bb8a5fde5f560bf14fb8777321825af3f63c8d967df653579b0e9fd114f509b484c6cab915376801295de91da6b2a188"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d9ce971b1daa503}}}, &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044014) 1m24.208917132s ago: executing program 4 (id=1039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m22.363117903s ago: executing program 3 (id=1810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce8329ca833d2537955e9c6dd97f3b47dcf8", 0x30) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x8}], 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000007c0)={0x88, @private=0xa010101, 0x4e22, 0x4, 'sh\x00', 0x1, 0x4, 0x36}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e130605dcd8872a8d94b638c4244de735a3184f123d6da2f1acfac0ee2dd20600b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe077528282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cf6b707f3336336ebb7e781000000140000800d000000cfe7336f91087ba18b0000000000005fef7fa92468646951cc4f84f96f063d17d26f243ce6d23d25a23dceb4dc7b210f80d956bd5c0f4fbed207dbe7d91fa91ea29d9ab3e8446f51d949b57bcb28fb1f2b08c6c466cc505b3eece6f808cc8377a20e2a0884d76941ca8d2b04134dcc6e3f"], 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0xfffffffffffffdc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x2c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030401000000000037005b7ebf00", @ANYRES32=0x0, @ANYBLOB="010102000000000014003500776c616e31000000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0xba01}, 0x810) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xd32}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0011000000000000000000140001000000100000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d7de351dc076eb43d9621dc08c029d1608a48700000000000000e181bff81a8b9482565856555ee923c65973deb0a99b962bdcedc85ca0c0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69195ace475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c000000"], 0x114}, {&(0x7f00000000c0)={0xf8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x75}, @nested={0xd3, 0x102, 0x0, 0x1, [@generic="6973ae142c50f87a6e4dae562a65de0dadd4ee7ab4a4d8fc2536ed71ace235caa904995ea6f0f2256465462af4d176830350", @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x126}, @generic="c93e0c54d03847e73b843aafd0fc0ebec4114a648d06534ae17c3d04d6d3f61ba6d1218f315398c7427642e67fbb0facb95c3c1637f2bb7f234896f1d2968603e82be5d3a0766e500e9da8e3f79ba8aa452f432c50553926d6fb7c13b1f218c80a9b0fa0930050fe026bbbc5a9dc69b9ea", @nested={0x4, 0xe0}]}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}, 0xf8}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="180000003a00000028bd7000fcdbdf250800ea00540412f7c048a07692dafa66002a018fb4591899b7a0656f60581f51d6c7851cd872f1903ba147b85c91052520ea2653caac9fa4ae705770811d67e8f7", @ANYRES32=r13, @ANYBLOB], 0x18}], 0x3}, 0x4008000) 1m3.908260875s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x3ee, 0x3ff, 0x4, 0x5, 0x8, "79abc3303202e01da6a27829718385a05aa1545768aea6e9840506761cefd54953327ef52e63749d7ef132cac28e1df94030a7fc399965849ea653eb7a3e530a391c3b9001d6c5f9f4bfcb0147e09248bb8a5fde5f560bf14fb8777321825af3f63c8d967df653579b0e9fd114f509b484c6cab915376801295de91da6b2a188"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d9ce971b1daa503}}}, &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044014) 1m0.738976112s ago: executing program 4 (id=1039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m0.005937905s ago: executing program 3 (id=1810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce8329ca833d2537955e9c6dd97f3b47dcf8", 0x30) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x8}], 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000007c0)={0x88, @private=0xa010101, 0x4e22, 0x4, 'sh\x00', 0x1, 0x4, 0x36}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0xfffffffffffffdc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x2c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030401000000000037005b7ebf00", @ANYRES32=0x0, @ANYBLOB="010102000000000014003500776c616e31000000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0xba01}, 0x810) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xd32}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f00000000c0)={0xf8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x75}, @nested={0xd3, 0x102, 0x0, 0x1, [@generic="6973ae142c50f87a6e4dae562a65de0dadd4ee7ab4a4d8fc2536ed71ace235caa904995ea6f0f2256465462af4d176830350", @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x126}, @generic="c93e0c54d03847e73b843aafd0fc0ebec4114a648d06534ae17c3d04d6d3f61ba6d1218f315398c7427642e67fbb0facb95c3c1637f2bb7f234896f1d2968603e82be5d3a0766e500e9da8e3f79ba8aa452f432c50553926d6fb7c13b1f218c80a9b0fa0930050fe026bbbc5a9dc69b9ea", @nested={0x4, 0xe0}]}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}, 0xf8}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="180000003a00000028bd7000fcdbdf250800ea00540412f7c048a07692dafa66002a018fb4591899b7a0656f60581f51d6c7851cd872f1903ba147b85c91052520ea2653caac9fa4ae705770811d67e8f7", @ANYRES32=r13, @ANYBLOB], 0x18}], 0x3}, 0x4008000) 43.621643713s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x3ee, 0x3ff, 0x4, 0x5, 0x8, "79abc3303202e01da6a27829718385a05aa1545768aea6e9840506761cefd54953327ef52e63749d7ef132cac28e1df94030a7fc399965849ea653eb7a3e530a391c3b9001d6c5f9f4bfcb0147e09248bb8a5fde5f560bf14fb8777321825af3f63c8d967df653579b0e9fd114f509b484c6cab915376801295de91da6b2a188"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d9ce971b1daa503}}}, &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044014) 40.87499543s ago: executing program 3 (id=1810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce8329ca833d2537955e9c6dd97f3b47dcf8", 0x30) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x8}], 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000007c0)={0x88, @private=0xa010101, 0x4e22, 0x4, 'sh\x00', 0x1, 0x4, 0x36}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0xfffffffffffffdc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x2c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030401000000000037005b7ebf00", @ANYRES32=0x0, @ANYBLOB="010102000000000014003500776c616e31000000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0xba01}, 0x810) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xd32}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f00000000c0)={0xf8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x75}, @nested={0xd3, 0x102, 0x0, 0x1, [@generic="6973ae142c50f87a6e4dae562a65de0dadd4ee7ab4a4d8fc2536ed71ace235caa904995ea6f0f2256465462af4d176830350", @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x126}, @generic="c93e0c54d03847e73b843aafd0fc0ebec4114a648d06534ae17c3d04d6d3f61ba6d1218f315398c7427642e67fbb0facb95c3c1637f2bb7f234896f1d2968603e82be5d3a0766e500e9da8e3f79ba8aa452f432c50553926d6fb7c13b1f218c80a9b0fa0930050fe026bbbc5a9dc69b9ea", @nested={0x4, 0xe0}]}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}, 0xf8}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="180000003a00000028bd7000fcdbdf250800ea00540412f7c048a07692dafa66002a018fb4591899b7a0656f60581f51d6c7851cd872f1903ba147b85c91052520ea2653caac9fa4ae705770811d67e8f7", @ANYRES32=r13, @ANYBLOB], 0x18}], 0x3}, 0x4008000) 39.528286504s ago: executing program 4 (id=1039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 21.699224321s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x3ee, 0x3ff, 0x4, 0x5, 0x8, "79abc3303202e01da6a27829718385a05aa1545768aea6e9840506761cefd54953327ef52e63749d7ef132cac28e1df94030a7fc399965849ea653eb7a3e530a391c3b9001d6c5f9f4bfcb0147e09248bb8a5fde5f560bf14fb8777321825af3f63c8d967df653579b0e9fd114f509b484c6cab915376801295de91da6b2a188"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d9ce971b1daa503}}}, &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044014) 20.436486328s ago: executing program 3 (id=1810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce8329ca833d2537955e9c6dd97f3b47dcf8", 0x30) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x8}], 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000007c0)={0x88, @private=0xa010101, 0x4e22, 0x4, 'sh\x00', 0x1, 0x4, 0x36}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e130605dcd8872a8d94b638c4244de735a3184f123d6da2f1acfac0ee2dd20600b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe077528282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cf6b707f3336336ebb7e781000000140000800d000000cfe7336f91087ba18b0000000000005fef7fa92468646951cc4f84f96f063d17d26f243ce6d23d25a23dceb4dc7b210f80d956bd5c0f4fbed207dbe7d91fa91ea29d9ab3e8446f51d949b57bcb28fb1f2b08c6c466cc505b3eece6f808cc8377a20e2a0884d76941ca8d2b04134dcc6e3f"], 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0xfffffffffffffdc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x2c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030401000000000037005b7ebf00", @ANYRES32=0x0, @ANYBLOB="010102000000000014003500776c616e31000000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0xba01}, 0x810) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xd32}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0011000000000000000000140001000000100000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d7de351dc076eb43d9621dc08c029d1608a48700000000000000e181bff81a8b9482565856555ee923c65973deb0a99b962bdcedc85ca0c0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69195ace475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c000000"], 0x114}, {&(0x7f00000000c0)={0xf8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x75}, @nested={0xd3, 0x102, 0x0, 0x1, [@generic="6973ae142c50f87a6e4dae562a65de0dadd4ee7ab4a4d8fc2536ed71ace235caa904995ea6f0f2256465462af4d176830350", @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x126}, @generic="c93e0c54d03847e73b843aafd0fc0ebec4114a648d06534ae17c3d04d6d3f61ba6d1218f315398c7427642e67fbb0facb95c3c1637f2bb7f234896f1d2968603e82be5d3a0766e500e9da8e3f79ba8aa452f432c50553926d6fb7c13b1f218c80a9b0fa0930050fe026bbbc5a9dc69b9ea", @nested={0x4, 0xe0}]}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}, 0xf8}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="180000003a00000028bd7000fcdbdf250800ea00540412f7c048a07692dafa66002a018fb4591899b7a0656f60581f51d6c7851cd872f1903ba147b85c91052520ea2653caac9fa4ae705770811d67e8f7", @ANYRES32=r13, @ANYBLOB], 0x18}], 0x3}, 0x4008000) 18.885213374s ago: executing program 4 (id=1039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r4, &(0x7f00000000c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.366471121s ago: executing program 2 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x452b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="29d0cc2d80a748db72f21fbad225e6b8d210d12f68b09e96d4e5a89084fc1ab5b5cbe612d71de4461326c716165b2c3541bba950a52eb9280d136f9bbc86fe25391a3e5b777f64431636a804ebf22a6180d13bad2377574fb2cde43fab967d61e2fe4862ff3d77b8ca27d759d55bd6c919706e855ecaf73bd2d1c5dbf6f4baf3e2143d8b46c0cf8385a72cebfa01e046d7ad91323c8e93a442a3375c2513d243e00b83122b0ad00c98bf14565438af76af16553fe962f4ba0f7380f76fbc73d0362d01", 0xc3}, {&(0x7f0000000080)="0d294b758a3ffe77278b7df2c09afd7ece31ade323b5aa9acdbad54511247acf73f178a16dc345c48010d024d1a879f7244b57ffa757e9d5d7d8d75fa0b04a128c9589d992814e76f5623c0a96bbb098eedd8777738985b81abe12ec13bb5ce7b975810ff822b278b73f289d764c2903a0ee00ca813bb09e3d82446147ad23475b2f1df748152675af8f579001572257a82d354c9316b72d56c72fc7a91bea0704c1a85c81bf819a8a806573fddd75b0f9aad4abfee61c7f3789e8", 0xbb}, {&(0x7f0000000180)="dc7a38309fb4e3de05a92676da127a35480dea8b95ab4fa2648e8a202f36dae62c601719342ec12c895751590d9ef82ffc56d2a8fbbe2a87cd3f13b8a7c43343a1168d3ae6830056d7a98dd4c97aa0a1ae858e2afe254b6778b3c0d404efa6140ea9205efcaf7eaf8f2cad1b1dcb61", 0x6f}, {&(0x7f00000003c0)="2fd8275defe1fac184e208aca3f930f1b84a99e8fc166a5b8e739c63387b2631cd2fd90f79352ae490cf9029a0da83c211f636d72301c2b81bf6ce3dac3f7b641429967fd91440d7ed6fb6a9739113693aff55f03dfc95835585a8ef7cae13699fe928450af7cad239d86024bd81ff6b331b1f5506663b9ee529d700f612cb889ed9a751ed06bb9c4f3f4b4b86d4fb5af70dd09bc1144249b57845929c8f9d95a345440f509f6504cf6090196ef2b4ac5101c13db03b948fef0af26ae4fe5d83afcae6196e6cc207b934585500f86c740f9ccfd318ffe2a4092d28154a920d98515f0bac5ef74b919d70e80606e7617e0914d12b10456859fa98829622e2a2a14e6201340ca4c2616f8d26a0de8cf00fb6c8983cb3441aa93733f95eeb8d5c24abc8bd19df6bd2dd2bc4a09ea6ff36335a18a4634f78ac51700ec251c49e5852f3bfd9598dcd9b9072f13ce062270fef568dcb04421fd8c0e8bd948752ec8937b492fffc4726d26d5c2de4489fc7c1a0fe29c3bac6596ec03576e3f6e06e1aee48ba9293de8c1f565cf815ebbc53fa84fe20e8a0739f7e73db78ddc197afd79b49f7d752d771b280ccf9d98c3fc0d6f9c4c03c8c247715149427f09271904a5dda874d55536868eb561fd29b86ce066245582768d9f0064c871ea7553276a9661fe347cdb9357f192df27a1285260c45c9f114ef8b64a172087782633c4ef54c099ec021cd75d3f27929cf5c7c4e42baba8391c26095fb14ba7c2c1ecfdae3c3b7b186c2c381832e61dff72ca18da3e95f924bbe70b6155fb1f53e40405484c55e593defcac82c6c2675fd6865d24879b0ef6e58091cf949ab8fbc9dc6a1d23ec87eeabae63ce05ca3f16a378182de42814d7afc13b28260e0f9901dc3c6f88ecfd8393ceff03eff8fc59f84d163302be47e92b594a1443b4c2b35c22b38b70ead959fc2b4b4776ce391225053ab18129b9ee8144e6df5080574e8563b532976e2ec054784ef4a4fedf44bae1470fb7d78fadc54bc8f064e142e1fc8ae5157a43beca9156e958c568cd36a2d292dd1a073ef7e09e2fc7e3592728417a123bcb08a0e00658ff06870d29990f056f1fb474dcadb715d6105c3fd6c94b35bdad1f285a19cff2f229db54812d12c173c4ff25f86849fc2a6258d5c8af441bfaf26f5496b3eaab5bb48b2cf9afc4428a1d28dd930844e3533212605a80b1f4a087396dcb2247afccc7e69d7d1309a2ab7b0890760ba9eff00e6188f9d4f56c4dda7890a3f675a68e58fae248097371cfafa53a7733b88b59c42ae0d5216632229b524eabdd820823032b72c890b98ea3a270e9b7899e1e18d75602a7719743ddce2cda59a9b303b20da5135eabd881dfdf3289fa5a7cca0f2af7fc5d0eb2b1d2e5e43380a8dbbe0dbe562462a19db1ba9d556c4248c1db4ed0968cf699502dd01c91a984a42567b957c4a2e6cffc3d7771c8171c79a24dda405fd97c32c0181a04ed5ce9b202ed9c54d5ce2cf081a82613c164aac0976ef356f24d3f06804a3c0a26ed5a7543ed442c0537fd69c7a68cbf5efe65e5ac90e562d512a52fe38921eeedb2c9a5252c309269b50d405886e8cc32e1a6d75840ff8e038e503f000750d7a683a8d237e1f832e47f787caf1e368c6061c56fed7107d4540a363c1d78ba1bf59ade4630651e20969230bba7c366aa366145816e23c7c79dd46e926d239bd79f08d8633801ec2e9195194ae9af61b1f631a2096aee2be81ba4bc607814f168cc300d8e297bddef13f446554bc8f4e5a42c2cac0225d2516328e7ced4413d3b783eb64e741d12c59ecf9f1bae8adf61464b8805f91c3709d82bf17c23b1701edff6e760e1f1327f4f2f1e37140727c1dc6cfaaefddbedf14618a0298b66cda067802f3c1770b7c8cfcf83d1e92327460155e54b1363b537752c503ed3e9d257c80fde6c3e9ba77c700eabb4354298d653ba6070bafb3c8cc2307e58860623f7f49cfb76ca4a7adad294bb730073cc400daeebf2ce62445108ad2ecc989a0095d10725a00b492593015dba0a7ea795e2f99893233983972090e112f2b0485aa017f1838d312aebae551ae76845189ea4680504725328004da79b6a0ea73779da529a3817afe94726ca63be2fd247b496933363c619833ff8dff915bc976e6457244009aea42528fdc42bb9914d87e3be253fc8545c8ce478c83641365f7c58fc3b9ff54b19bb29dc2d36c7d9fe0380a298da51543af11c3a6bac2dd0f8e6ed0c055d15c66cfb8a3425b8ca3deb45f4230cb9c8f10766514e45b658d3ffb94fc8ef860a0aa2ccbb89da6bfc5c7c5b5baa6ed47980aa08ebf745fc316bcc4f4776333d6c736e4750124aff30f000ac29f56c9f5d82d5cda17d18119b3bcd3c7df33d58143fe0129e5988f616e66325595f9436ecc240f0bc0aa5b67d9d93a08673a5b33dc84f6a15f0e59e217b7999149d81bec8ebce20b8ff3cb549f77f95f0352810e74c545b5af4cd1008091cddb3ea4c180a1588a7cd9b21009fdba89c53ba217189942b37a3c69b00a4cd7ffe189ab869d167c27becc6c232ce26c4e95f82b6fda2f05648bb861dd1812ad5b13e4f3deda9502945933580d9974feeef6c4ce2a6688ac008d0303eb1f16999fdcc9138220917ec3f4cfd6d0d77ae7f28717c51b2f83d1e2a2be00de4c2075ecf1a8604779c0316e9c693b5dbd8101dec6a3b9156455b81ec782b1664335572f40123e32dec5a4f4c48a63afb18bc66ce4c81758bcb75038d86613c9be3746ef4827f5912a32793a54a1385e934fad0357d116f72a31b6de86d2c09516aa2e02c86da3e1633f8b38bf6e83153f6b781ad81092a8d35932648fb8b93f8385a6b3be5fde41413b5bea8ac53a1ebdca0a32d7394e161c8055ebe4adee8eb0b1e733e7f4d42c494b327c25834b7adf35505da9e308c4be70282be2a41d1b99b034f539db797cb6ff6186686531187d028625f8b90d975f54949706c6d994f09798793860f80566c821e0001b039446e88d7fe44f0d131d0ad3d152d112916aec52662d696bc2a1754c9f2a2e4265f1b1183a7cb5625f9c2a5ce30c5f3ca7da5d623ae9ef315f2ba704c9e26e3c744352c4c6ff01670f8f45955d9807e5ef52903f26af1594b4e8cd2eb54dbcc27956fe33daebd61f5532d55f45f2f247f7235a1463bdfebe5d9035d2449efb3284abd36f237a2ba179a999230139e41d762540763ab92eda888000b50d7b6139d2f33f596e92f1356084403c85cf22559b8d23fc5fc8d07cbce2419060ac8e08566889ebf09a22500808cd42d3dc33dd2d9297cfe2a682fff5527b5333bbd66f72ba10a993f98c5c87f17c441735b53732990fd062639d7b8d38b8df1170b9d6e292aa205db5da77109ea97b9b1c69cc0ee11ee76f098fd5ab299932929dbef43e74d73be85f59d845f1a6d9d7578b0b5a779f0d2b1e70933cf59fbfb616656cd61cd94c59feb71a97e7d7a792cde5595c8bddf1a18f128387a00d088a2c6ed8bc6a3a82c73e7431c337b9afd0744e9b0e99cceb24824c1e99166343fbaf2d4f04792539da06771323b348539ac74f6275b90302b035b95e803f4d8ee88b9c93cf02ecac5b03d187963fd1398e738e2bf80a392fa19587835f93fe7a90260780e9ea3a275431dec8a7ee982017336d241e01968cb45e3d04b347940502425f491d990ab1a7f3382ad24e85dfe3ec7415f3f761c468f2d8cd9dc24d67cedd6fd4f5fca341a79bb2b3970e8ea4c3be5f4887947ade08528907c15bd126a11f67e4ab44317b91521154931b52c51437bbda8eeea8cd74c3d8d68f45532d423d89a3895dfec406e52c07f3908936c57cf0f95c6db45384b9f7bc806008b8a7aed07aa044185cd5f09c25a09274df5a5b3f0042a8bca0b031a937d2398359d9ffb6b38cc0b10668dae5abbac372474f5bebd52a62db5f22ca38d63ecab812360904c4a5c77ec902b19dc8edc5d4ab26ef708ce65f41125b70978570636e86864b350782f73d131a77b5ddb534f2436d826dffa443ff9de452f03c58dcc1ddbe1265f1d0f270ba07dfffb7ad4d6b953fe75fd56e5d0f446bd6cdc0aad303925a452647083250cf575a283852deffd237f1330b6219f9030978186f96d99eee5152c7b5b0117f6a792aa3910f8e9ea402d5fd957643131422135206a70f6f8680eaa62d949f983bc600205fc70c896b62f875bb3d992d6128a360ba40ac6f9ba67f53d38c078d12085f31075b2adba4d5107adf5bbe2c886665c5484f3ac4077c194f7d7419e4a4ff090aef2879135bb0650b112b2ccedd25d86d21a15982285eb4c7c2f203ae345edae4d0be16714bdf1b62604f83b91f5814352469fbce5fd794c72cf620e20951d0a15bbd2a133efbd4e644a04fe3629666964ef31977eef29bd27278c97ddaa45b6613efa0305ca40e75dbabd3f420efc03d80f7fadb5320dc7a2fd85a096a473c5d64007c0c9106e9711f514162f165dedd87cb50588ff83f721cf59d404d34e740bf5e2ef9b522be76e6b6479d34c8b72f57d8a394a0e7611e1a2f80f4ba085a3d24542cee5272f5009924f563002e9ecebe2214745848d2cc6ab8e0dad5fddb57f8c8ce51335905c7da6706e596659166f2622c507dc43df426238d3abddb77ba5964a100d93e37f4de6c1de65868d8e099347ca655993a09956e29f0d4c251e061b22b8f48a44eae242fa75632ee55976530c7cf18f9b09603a568e08f0ff53ad6b7ddda29ba17950ad5b3c1923afa0773944183ed3eb288730552564b3c7b1250126660c749de71fdd45328a0a4dd32a5dda8b26665a9d21ba32a9cf6d28d892b46cca601439068618f196d65dadfc2cec86e0293dd3bf0f3168e557c691bbc92bbbd94c512663e1660f43b25a02424999c1f0cb7c888b046d82701a414c86edca44438d48747378d773ec45f91d61ae8f758bf4998993c08cc75c5ba5a56d7209c21e7ab4a7bdd2e83b2e3e44e164aedd167bda28521bb77ece7705ec10923758101d15252c1d36a6936a25cd12d7e6168d32781c4e565887d0459ad598937a7a6bee7094e0ef5462e9c8b1978220c200d22c635c7f8213a2cbdb95e92205cf28f0c6ba429738ff1c2d1f046f5d53d8a117ce557430a940924b958c19c44ea30eda79c345249c3b39fd32f7b24aa9db3a9958fbe7b11a063008288877a89adf0bc4ef49281c809219e5c49f40b07b1f226142b7d960bbd5f817123be367c3a7ff8dcadfe68c3809143f9f1ebe3ff6ab0ac33ab8660e5d8b6e0ddcedf810737133acc7bb1c53d635c1acd47f165524966d77f9759b002760fe881a90c9cef3b1b6404eac53209b88d4a2f672a9938dea270f5b1dfeabc97d3cbc4ff17cb8ed6a81cca1ddf61fc0771be891b3915f060fc1916a1b8b470db02ea5df1aab70e52d38d57269a76c47f897ee005884c284759bc1a1630db1a78ae27087188f4cf1bd4ee5e55203b8ed3894012531ff0f813bf1fe0892fe11e9ab37efc8fcbbeaf2fa12b1155238f37e800270b12c0997cde1fac94fd356e5cdf32dd90a8f2cd040b4fde38de340d2a35d00a57b576dc11efddb78b67ee4317cbaf897eec59e946dd69d0003ee6942b15931243045db93ef0cfc07bc9ebb0f03686e399442d67f64f7c170cfaf465d2e2ac0a097d73bcb3ac14bcec32e15a98580686b6c31a7eee7d8f327d80dbea1963062955e683ec5ebd03896797c70122fdce1c9facd04556cb995f05bac34529d3f7c806e9a03bef2872c82882e6671143df99c02e2f0284cc0440", 0x1000}, {&(0x7f0000000240)="00ecfe5240afbd8281d2f6492c4da0be34b2cd4cff439b5fdf2348e47ba3c661abb849fc600aecbf", 0x28}], 0x5, &(0x7f0000001440)=[{0x80, 0x10a, 0x3, "b1701429136e95c0f133dcf1b48803e9205961f93c10977553921a09f4c0650580b96c49d12484dd949d4b4364a30dce68a92114d9241972a56ea62c2f65628dc4b5479739047fe9232f9162d3098d807ac4e12e27d0eee5b55881f029353a4d6a04a1a1a46fdd765cb01c3573a3d65a"}, {0xe0, 0x84, 0x8, "76050635e32f9290f7fd6aa46863b07fb4a963b9f662d0aacf2130e0a3a45dfb17e6a778e5784c141dff26ddb5df3665ff8b81b440c80d8b8fd0af0677cc0b8b1ba91edfb4d597e66aa77303623e44d94823cb6d5dade1b194814beaa384d8ab9b2b76fce6d3e9bc5971bced5b4e1712d2c8ec40177b666e3597bdc6b9d92c83b11d438c14c06022b84e74e7d8b7598b62d84868c5498beb8604890f88ac62aae84dccb67361dacb106f4b109eee9cee09de887e3e460a080694912ae19ff4c47865bc13ca1640f19df1"}, {0xc8, 0x110, 0x1, "a674e0e4a540aaf8245f735311affc868889104582915dc9fbff3bd9e7b9d92a5c45602b9d1e80c31c7173921e7814a681660305e26de3548932f0dad8a03bd6403ae4096d09ec475cf4cb9ec3cb741343754f299415fe99b1a4e2439042fc3b8b287caace5cf0f59e31a92215efc20898d90d3bf286202c1d83c6fff1ed8ccaeabd520aa31e5487c04f702533e07cd1f41470fb3082feda1c2105b395b58f7c253cba6da8b82ebf76c2e5de13f5c5bb5db72737b38c6356"}, {0x30, 0x1, 0x2, "a9015ea876e6b0013a3ff3731c28018577baed0bd08e4fda978baa"}], 0x258}}], 0x1, 0x44800) 2.875209657s ago: executing program 0 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000900aaaaaaaaaaaa43bf91dee581aaaaaaaaaaaa0980c2000002aaaaaaaaaabbaaaaaaaaaaaa32bcaebfad9a574b6b261db7ffff"]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) 2.845887601s ago: executing program 2 (id=2996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="487000001972070008000a00", @ANYRES32=r1, @ANYBLOB="613480adfa3a8112fdca2f36ae6e216d63d9a80fc6a764f93fe05c6a"], 0x28}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae8000000000a01010000000000000000050000000900010073797a3000000000ba000600e9eec003775c64e64f439fc0b5fb34bcd039590bba579a25436e11f718b64e3e01796b9e930a3d8eefa0bccf8429a311f3ce5ec5a0a7bb9e08c60e03cbcdd726725fb9b1bd1000cf2a77ab6ab91f2294632773ea59b8de2361cdd8045c5fdb81611e843cb814e4cfe672542287ebd3b2ed48dca1a08690b05bb9bbbcc05551bd05e4c6e0625fcae04323e0f29dbad3c57456d2ca020462188e1236ebe6da1442c71ab0a8ebfaacef2710111417370a0f8cd19c5f9e1a00000900010073797a300000000014010000030a01030000000000000000050000000900010073797a30000000000800054000000000af000c008451bef8928cf9ec5c3c0fca5cedf6b9ae811484cd4abbaec9eba3118a64f7b105ab0e5c8e377ddaf98490703415da6a50c72a1434c93ef4daa32cd2b643c4ab99e8adc29f67b58cd27b71b30213e6acd60b8fa2190c3fd64f382e41b97f4b12379ce9470cbfdb02cc2a2d8e0e7aec144e2df705b37b99cafc9b141b0f3176897eba9802e14cc423ecff994b4ff320f5786bd4fba343449446d922b94ac3f8621197db4c2dc061e9278f5a000900030073797a32000000000b00070066696c746572000024000480080002406b10a6210800014000000004080002404e73b858080001400000000014000000020a030000000000000000000500000014000000110001"], 0x238}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000840)=""/73, 0x49}, {&(0x7f0000002980)=""/4098, 0x1002}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x7}, 0x80000000}], 0x4, 0x120, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0xa0280, r3}) 2.578401481s ago: executing program 2 (id=2997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010840000000fbdbdf2500000000b366ec5f074b6488e7548d89db62b52ff925c5959a2e25a67c4ca249f6975872d447adbc11c4db4a2d72d6dd24d961b6075391d49d2a18d3d8ffb797d329c310feddd6ffff13dc62c2af3dac95d3fb365bb24faec873241602f5be87c123d30211f44621e3f74bc871be410f57edad5bab784080d26d6765ccb72c718f29b3179d2719c8a56e36dec20cfb3198f2be6369bef497fd", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080003000200000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff000000007110a3000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) listen(r1, 0x3) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000200), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.559857065s ago: executing program 0 (id=2998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x0) 2.303633521s ago: executing program 0 (id=2999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000004c0)={'ip6gretap0\x00', @multicast}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='qgroup_meta_reserve\x00', r4}, 0x18) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000080), 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000008c0)={{r8, 0x5, 0x5, 0x0, 0x81, 0xffffffffffffffff, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x3, 0x0, 0xe, 0xa}}) 2.186352651s ago: executing program 2 (id=3000): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001000000000000000000ca000000", @ANYRES32=0x0, @ANYBLOB="000000000a0011"], 0x28}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x4, 0x0, 0xd, 0x5, 0x9, 0x8, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xb2, &(0x7f00000001c0)=""/178, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x3, 0x73}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000380)=[{0x4, 0x1, 0x3, 0x6}, {0x1, 0x2, 0xa, 0x6}, {0x1, 0x3, 0x9, 0xb}, {0x2, 0x1, 0x3}, {0x5, 0x2, 0x10}, {0x0, 0x3, 0x3, 0x1}, {0x4, 0x3, 0x4}, {0x5, 0x3, 0xe, 0x9}], 0x10, 0x7ff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000000)=r3, 0x4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) close(r4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0xa0, 0x80, 0x5, 0x6a05f8d, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp={0x44, 0x28, 0x83, 0x0, 0xc, [0x3, 0x400, 0x9, 0x53, 0x81, 0x5, 0x0, 0x6, 0x4]}, @generic={0x89, 0x3, "b2"}]}}}}}) 1.414591035s ago: executing program 0 (id=3001): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00'], 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1c, 0x0, &(0x7f0000000180)) 1.311052102s ago: executing program 0 (id=3002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000)={0x2, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) 1.182335363s ago: executing program 2 (id=3003): r0 = socket$can_bcm(0x1d, 0x2, 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0xf868, 0x20, 0xa783, 0x4, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, {[@lsrr={0x83, 0x23, 0x2b, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x41}, @remote]}, @rr={0x7, 0xb, 0x4d, [@rand_addr=0x64010102, @private=0xa010102]}, @noop, @rr={0x7, 0x17, 0xed, [@multicast1, @empty, @local, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x1, [0x5a3]}, @rr={0x7, 0x23, 0x4e, [@multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102, @multicast1]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r4}, 0x94) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xd120}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 1.18207537s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x6) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000003800), 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000280)={@any, 0x3ee, 0x3ff, 0x4, 0x5, 0x8, "79abc3303202e01da6a27829718385a05aa1545768aea6e9840506761cefd54953327ef52e63749d7ef132cac28e1df94030a7fc399965849ea653eb7a3e530a391c3b9001d6c5f9f4bfcb0147e09248bb8a5fde5f560bf14fb8777321825af3f63c8d967df653579b0e9fd114f509b484c6cab915376801295de91da6b2a188"}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d9ce971b1daa503}}}, &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044014) 5.987262ms ago: executing program 0 (id=3004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8980}, 0x48c0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000085) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000002c0)=0x1ff, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000300), 0x4) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c811) r5 = socket$caif_stream(0x25, 0x1, 0x0) readv(r5, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000004c0)=""/134, 0x86}], 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x40) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}]}, 0x68}, 0x1, 0x0, 0x0, 0x28001002}, 0x44080) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000840)={0xa}) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000880)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000900)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x43, r9}) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r10, 0x29, 0xcf, &(0x7f0000000940), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000980)={0x2, 'veth1_to_team\x00', {0x7fffffff}, 0x3}) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, &(0x7f00000009c0), 0x4) socket(0x11, 0x80f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 599.726µs ago: executing program 2 (id=3005): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/232, 0xe8, 0x0}}, 0x10) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x6, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, r2}, 0x94) 0s ago: executing program 3 (id=1810): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce8329ca833d2537955e9c6dd97f3b47dcf8", 0x30) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/81, 0x51}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1}, 0x8}], 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000007c0)={0x88, @private=0xa010101, 0x4e22, 0x4, 'sh\x00', 0x1, 0x4, 0x36}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e130605dcd8872a8d94b638c4244de735a3184f123d6da2f1acfac0ee2dd20600b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe077528282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cf6b707f3336336ebb7e781000000140000800d000000cfe7336f91087ba18b0000000000005fef7fa92468646951cc4f84f96f063d17d26f243ce6d23d25a23dceb4dc7b210f80d956bd5c0f4fbed207dbe7d91fa91ea29d9ab3e8446f51d949b57bcb28fb1f2b08c6c466cc505b3eece6f808cc8377a20e2a0884d76941ca8d2b04134dcc6e3f"], 0xe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0xfffffffffffffdc8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x2c, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030401000000000037005b7ebf00", @ANYRES32=0x0, @ANYBLOB="010102000000000014003500776c616e31000000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0xba01}, 0x810) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0xd32}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f00000000c0)={0xf8, 0x3b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x75}, @nested={0xd3, 0x102, 0x0, 0x1, [@generic="6973ae142c50f87a6e4dae562a65de0dadd4ee7ab4a4d8fc2536ed71ace235caa904995ea6f0f2256465462af4d176830350", @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xaf}, @nested={0x4, 0x13d}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x126}, @generic="c93e0c54d03847e73b843aafd0fc0ebec4114a648d06534ae17c3d04d6d3f61ba6d1218f315398c7427642e67fbb0facb95c3c1637f2bb7f234896f1d2968603e82be5d3a0766e500e9da8e3f79ba8aa452f432c50553926d6fb7c13b1f218c80a9b0fa0930050fe026bbbc5a9dc69b9ea", @nested={0x4, 0xe0}]}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r1}]}, 0xf8}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="180000003a00000028bd7000fcdbdf250800ea00540412f7c048a07692dafa66002a018fb4591899b7a0656f60581f51d6c7851cd872f1903ba147b85c91052520ea2653caac9fa4ae705770811d67e8f7", @ANYRES32=r13, @ANYBLOB], 0x18}], 0x3}, 0x4008000) kernel console output (not intermixed with test programs): veth0_vlan: left promiscuous mode [ 456.585712][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.602831][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.613738][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.624728][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.632883][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.005108][T15531] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2617'. [ 457.481812][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 457.530161][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 457.553023][ T5839] Bluetooth: hci1: command tx timeout [ 458.001198][T15517] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 458.053779][T15317] veth1_macvtap: entered promiscuous mode [ 458.220939][T15317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.283130][T15317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.430054][T15317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.456395][T15317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.465171][T15317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.489764][T15317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.749208][ T5839] Bluetooth: hci4: command tx timeout [ 458.918138][T15488] chnl_net:caif_netlink_parms(): no params data found [ 459.213559][ T4536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.242262][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.260751][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.355839][T15572] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2629'. [ 459.371767][ T4536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.401483][T15488] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.412225][T15488] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.420125][T15488] bridge_slave_0: entered allmulticast mode [ 459.428228][T15488] bridge_slave_0: entered promiscuous mode [ 459.466875][ T4536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.498900][T15518] chnl_net:caif_netlink_parms(): no params data found [ 459.516120][T15488] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.525973][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.545178][T15488] bridge_slave_1: entered allmulticast mode [ 459.553345][T15488] bridge_slave_1: entered promiscuous mode [ 459.575243][T15575] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 459.600301][ T4536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.617074][ T5839] Bluetooth: hci1: command tx timeout [ 459.641101][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.650346][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.692024][T15575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.722117][T15488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.805960][T15578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 459.833976][T15578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 459.844633][T15578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 459.863675][T15578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 459.874363][T15578] geneve2: entered promiscuous mode [ 459.905109][T15578] geneve2: entered allmulticast mode [ 459.940947][T15488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.195550][T15488] team0: Port device team_slave_0 added [ 460.367158][T15488] team0: Port device team_slave_1 added [ 460.552464][T15518] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.562260][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.570054][T15518] bridge_slave_0: entered allmulticast mode [ 460.578969][T15518] bridge_slave_0: entered promiscuous mode [ 460.588278][T15488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.595332][T15488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.626619][T15488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.638707][T15518] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.645879][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.657883][T15518] bridge_slave_1: entered allmulticast mode [ 460.665504][T15518] bridge_slave_1: entered promiscuous mode [ 460.682660][T15488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.690149][T15488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.716864][T15488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.748133][ T4536] bridge_slave_1: left allmulticast mode [ 460.753884][ T4536] bridge_slave_1: left promiscuous mode [ 460.759929][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.769648][ T4536] bridge_slave_0: left allmulticast mode [ 460.775301][ T4536] bridge_slave_0: left promiscuous mode [ 460.781582][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.816748][ T5839] Bluetooth: hci4: command tx timeout [ 461.180805][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.193411][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.204401][ T4536] bond0 (unregistering): Released all slaves [ 461.270306][T15518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.339017][T15518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.401659][T15488] hsr_slave_0: entered promiscuous mode [ 461.408721][T15488] hsr_slave_1: entered promiscuous mode [ 461.414921][T15488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.422667][T15488] Cannot create hsr debugfs directory [ 461.452663][T15518] team0: Port device team_slave_0 added [ 461.481746][T15518] team0: Port device team_slave_1 added [ 461.575813][T15518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.583183][T15518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.610048][T15518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.623351][T15518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.631196][T15518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.657770][T15518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.696913][ T5839] Bluetooth: hci1: command tx timeout [ 462.008520][T15518] hsr_slave_0: entered promiscuous mode [ 462.015572][T15518] hsr_slave_1: entered promiscuous mode [ 462.029437][T15518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.049783][T15518] Cannot create hsr debugfs directory [ 462.173727][ T4536] hsr_slave_0: left promiscuous mode [ 462.194757][ T4536] hsr_slave_1: left promiscuous mode [ 462.203486][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.213409][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.222117][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.230748][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.264928][ T4536] veth1_macvtap: left promiscuous mode [ 462.270767][ T4536] veth0_macvtap: left promiscuous mode [ 462.278289][ T4536] veth1_vlan: left promiscuous mode [ 462.283740][ T4536] veth0_vlan: left promiscuous mode [ 462.427820][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 462.437575][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 462.446176][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 462.462397][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 462.471017][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 462.892919][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 462.897049][ T5839] Bluetooth: hci4: command tx timeout [ 462.941240][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 463.795558][ T5839] Bluetooth: hci1: command tx timeout [ 464.038621][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2644'. [ 464.372845][ T4536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.529953][ T4536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.589919][ T5839] Bluetooth: hci2: command tx timeout [ 464.668558][ T4536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.711981][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 464.725710][T15488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.776133][T15488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.830537][ T4536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.914254][T15488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.937353][T15488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.973104][T15668] netlink: 'syz.2.2653': attribute type 4 has an invalid length. [ 464.976704][ T5839] Bluetooth: hci4: command tx timeout [ 465.214598][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2654'. [ 465.287201][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 465.416817][ T4536] bridge_slave_1: left allmulticast mode [ 465.432612][ T4536] bridge_slave_1: left promiscuous mode [ 465.440043][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.454932][ T4536] bridge_slave_0: left allmulticast mode [ 465.461163][ T4536] bridge_slave_0: left promiscuous mode [ 465.468150][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.860255][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.872405][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.883433][ T4536] bond0 (unregistering): Released all slaves [ 465.905436][T15620] chnl_net:caif_netlink_parms(): no params data found [ 466.232524][T15690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2658'. [ 466.479284][T15707] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2662'. [ 466.508275][T15518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.548704][T15518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.586264][T15518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.608340][T15620] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.615634][T15620] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.623202][T15620] bridge_slave_0: entered allmulticast mode [ 466.631422][T15620] bridge_slave_0: entered promiscuous mode [ 466.662538][ T5839] Bluetooth: hci2: command tx timeout [ 466.670722][T15518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.692589][T15620] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.700081][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.707379][T15620] bridge_slave_1: entered allmulticast mode [ 466.716334][T15620] bridge_slave_1: entered promiscuous mode [ 466.940299][T15620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.987870][T15620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.023289][ T4536] hsr_slave_0: left promiscuous mode [ 467.032941][ T4536] hsr_slave_1: left promiscuous mode [ 467.039376][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.047919][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.056863][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.064582][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.095345][ T4536] veth1_macvtap: left promiscuous mode [ 467.101136][ T4536] veth0_macvtap: left promiscuous mode [ 467.107142][ T4536] veth1_vlan: left promiscuous mode [ 467.112513][ T4536] veth0_vlan: left promiscuous mode [ 467.717309][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 467.771393][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 468.283557][T15620] team0: Port device team_slave_0 added [ 468.302266][T15620] team0: Port device team_slave_1 added [ 468.361357][T15488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.458518][T15620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.465530][T15620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.492092][T15620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.518939][T15620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.525940][T15620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.562152][T15620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.593597][T15488] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.737972][T15620] hsr_slave_0: entered promiscuous mode [ 468.744868][T15620] hsr_slave_1: entered promiscuous mode [ 468.756839][ T5839] Bluetooth: hci2: command tx timeout [ 468.769718][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.776957][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.870965][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.878247][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.125536][T15748] batadv0: Device is already in use. [ 469.172420][T15518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.353524][T15518] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.453866][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.461152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.585021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.592293][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.809416][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 469.948061][T15770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2677'. [ 470.154060][T15488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.312752][T15620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.360517][T15620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.447303][T15620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.473572][T15620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.638585][T15518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.747188][T15796] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2681'. [ 470.771884][T15797] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2681'. [ 470.818894][ T5839] Bluetooth: hci2: command tx timeout [ 470.932825][T15620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.002915][T15518] veth0_vlan: entered promiscuous mode [ 471.040471][T15620] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.108205][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.115405][T13670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.164606][T15518] veth1_vlan: entered promiscuous mode [ 471.223004][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.230263][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.253360][T15808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2685'. [ 471.422921][T15518] veth0_macvtap: entered promiscuous mode [ 471.443350][T15488] veth0_vlan: entered promiscuous mode [ 471.483820][T15518] veth1_macvtap: entered promiscuous mode [ 471.499402][T15620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.522113][T15488] veth1_vlan: entered promiscuous mode [ 471.591156][T15518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.612234][T15518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.664045][T15518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.693005][T15518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.716756][T15518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.725559][T15518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.807233][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2688'. [ 471.979605][T15488] veth0_macvtap: entered promiscuous mode [ 472.059763][T15488] veth1_macvtap: entered promiscuous mode [ 472.264262][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.279591][T15488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.293046][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.342638][T15488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.392915][T15620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.438792][T15488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.454760][T15488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.466064][T15488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.484444][T15488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.496770][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.516174][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.950806][T15620] veth0_vlan: entered promiscuous mode [ 473.028324][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.066084][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.086355][T15620] veth1_vlan: entered promiscuous mode [ 473.287901][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.451825][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.471662][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.480106][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.501204][T15620] veth0_macvtap: entered promiscuous mode [ 473.583211][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.623457][T15620] veth1_macvtap: entered promiscuous mode [ 473.675660][T15620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.712008][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.733084][T15620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.767110][T15620] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.786977][T15620] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.795761][T15620] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.804780][T15620] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.054808][ T36] bridge_slave_1: left allmulticast mode [ 474.087339][ T36] bridge_slave_1: left promiscuous mode [ 474.093334][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.133738][ T36] bridge_slave_0: left allmulticast mode [ 474.139635][ T36] bridge_slave_0: left promiscuous mode [ 474.145512][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.566033][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.575808][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.600199][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.609853][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.636625][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.788734][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.803233][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.814401][ T36] bond0 (unregistering): Released all slaves [ 474.878515][T13670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.914529][T13670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.048529][T13673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.067785][T13673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.574099][ T36] hsr_slave_0: left promiscuous mode [ 475.591926][ T36] hsr_slave_1: left promiscuous mode [ 475.604598][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.612198][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.630187][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.638304][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.697158][ T36] veth1_macvtap: left promiscuous mode [ 475.702781][ T36] veth0_macvtap: left promiscuous mode [ 475.716537][ T36] veth1_vlan: left promiscuous mode [ 475.721909][ T36] veth0_vlan: left promiscuous mode [ 475.968823][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 475.999166][T15858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.293214][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.313555][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.329374][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.339810][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.347861][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.617067][ T36] team0 (unregistering): Port device team_slave_1 removed [ 476.667367][ T36] team0 (unregistering): Port device team_slave_0 removed [ 476.746712][ T5839] Bluetooth: hci1: command tx timeout [ 477.555864][T15850] chnl_net:caif_netlink_parms(): no params data found [ 477.628795][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.640524][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.649164][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.668283][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.676054][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.994914][T15850] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.002636][T15850] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.010678][T15850] bridge_slave_0: entered allmulticast mode [ 478.023440][T15850] bridge_slave_0: entered promiscuous mode [ 478.032458][T15850] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.039670][T15850] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.049149][T15850] bridge_slave_1: entered allmulticast mode [ 478.057019][T15850] bridge_slave_1: entered promiscuous mode [ 478.211566][T15850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.253768][T15850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.418830][ T5839] Bluetooth: hci2: command tx timeout [ 478.446770][T15850] team0: Port device team_slave_0 added [ 478.505805][T15850] team0: Port device team_slave_1 added [ 478.603734][T15850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.619181][T15850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.654927][T15850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.718421][T13670] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.782502][T15902] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 478.794784][T15902] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 478.809235][T15850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.816232][T15850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.817543][ T5839] Bluetooth: hci1: command tx timeout [ 478.859821][T15850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.914666][T15907] netlink: 'syz.2.2709': attribute type 2 has an invalid length. [ 478.932281][T13670] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.945938][T15904] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 478.955445][T15904] syzkaller0: Linktype set failed because interface is up [ 479.116800][ T5913] syzkaller0: tun_net_xmit 76 [ 479.789109][ T5839] Bluetooth: hci4: command tx timeout [ 480.499321][ T5839] Bluetooth: hci2: command tx timeout [ 480.636693][T13670] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.781103][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'. [ 480.809049][T13670] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.867978][T15860] chnl_net:caif_netlink_parms(): no params data found [ 480.896972][ T5839] Bluetooth: hci1: command tx timeout [ 480.979387][T15850] hsr_slave_0: entered promiscuous mode [ 480.986255][T15850] hsr_slave_1: entered promiscuous mode [ 480.993817][T15850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.002085][T15850] Cannot create hsr debugfs directory [ 481.308479][T15932] unknown channel width for channel at 909000KHz? [ 481.333963][T15874] chnl_net:caif_netlink_parms(): no params data found [ 481.398210][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.405426][T15860] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.413117][T15860] bridge_slave_0: entered allmulticast mode [ 481.422803][T15860] bridge_slave_0: entered promiscuous mode [ 481.488223][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.495464][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.503070][T15860] bridge_slave_1: entered allmulticast mode [ 481.512043][T15860] bridge_slave_1: entered promiscuous mode [ 481.688764][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.858391][ T5839] Bluetooth: hci4: command tx timeout [ 482.361183][T15951] netlink: 'syz.2.2718': attribute type 4 has an invalid length. [ 482.413097][T15952] netlink: 'syz.2.2718': attribute type 4 has an invalid length. [ 482.582312][ T5839] Bluetooth: hci2: command tx timeout [ 482.684426][T15956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2718'. [ 482.993083][ T5839] Bluetooth: hci1: command tx timeout [ 483.518031][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.537257][T15956] !€ÿ: renamed from bond_slave_0 (while UP) [ 483.615973][T13670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.685679][T15874] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.703390][T15874] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.723355][T15874] bridge_slave_0: entered allmulticast mode [ 483.731597][T15874] bridge_slave_0: entered promiscuous mode [ 483.818804][T13670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.834374][T15874] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.842038][T15874] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.849629][T15874] bridge_slave_1: entered allmulticast mode [ 483.857413][T15874] bridge_slave_1: entered promiscuous mode [ 483.896007][T15860] team0: Port device team_slave_0 added [ 483.922830][T15965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2721'. [ 483.935366][T15965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2721'. [ 483.938303][T15967] netlink: 'syz.2.2722': attribute type 2 has an invalid length. [ 483.954878][ T5839] Bluetooth: hci4: command tx timeout [ 483.987338][T13670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.025817][T15874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.052205][T15860] team0: Port device team_slave_1 added [ 484.108180][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 484.130089][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 484.175411][T13670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.222431][T15874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.275432][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.285578][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.323115][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.410871][T15983] sctp: [Deprecated]: syz.0.2725 (pid 15983) Use of int in max_burst socket option deprecated. [ 484.410871][T15983] Use struct sctp_assoc_value instead [ 484.452484][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.461749][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.488828][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.529520][T15874] team0: Port device team_slave_0 added [ 484.549944][T15874] team0: Port device team_slave_1 added [ 484.621912][T15985] mac80211_hwsim hwsim5 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 484.632625][T15985] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 484.656739][ T5839] Bluetooth: hci2: command tx timeout [ 484.738374][T15987] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 484.773188][T15874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.780376][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.808312][T15874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.828055][T15860] hsr_slave_0: entered promiscuous mode [ 484.835031][T15860] hsr_slave_1: entered promiscuous mode [ 484.841867][T15860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.849618][T15860] Cannot create hsr debugfs directory [ 485.025473][T15874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.035106][T15874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.063489][T15874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.155067][T15874] hsr_slave_0: entered promiscuous mode [ 485.163785][T15874] hsr_slave_1: entered promiscuous mode [ 485.169162][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 485.170664][T15874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.218562][T15874] Cannot create hsr debugfs directory [ 485.378346][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2729'. [ 485.515094][T13670] bridge_slave_1: left allmulticast mode [ 485.522638][T13670] bridge_slave_1: left promiscuous mode [ 485.531753][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.544001][T13670] bridge_slave_0: left allmulticast mode [ 485.550141][T13670] bridge_slave_0: left promiscuous mode [ 485.555900][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.574037][T13670] bridge_slave_1: left allmulticast mode [ 485.580705][T13670] bridge_slave_1: left promiscuous mode [ 485.586855][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.597534][T13670] bridge_slave_0: left allmulticast mode [ 485.603620][T13670] bridge_slave_0: left promiscuous mode [ 485.611355][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.904765][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 486.016587][ T5839] Bluetooth: hci4: command tx timeout [ 486.137096][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.148967][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.159859][T13670] bond0 (unregistering): Released all slaves [ 486.488540][T13670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.500790][T13670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.511519][T13670] bond0 (unregistering): Released all slaves [ 486.655223][T16014] netlink: 'syz.2.2735': attribute type 83 has an invalid length. [ 487.030919][T16016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2736'. [ 487.068982][T16027] tipc: Started in network mode [ 487.075731][T16027] tipc: Node identity -:, cluster identity 4711 [ 487.082460][T16027] tipc: Enabling of bearer rejected, failed to enable media [ 487.096230][T15850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 487.154342][T15850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 487.288356][T15850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 487.414889][T15850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 487.645403][T16045] sctp: [Deprecated]: syz.2.2743 (pid 16045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.645403][T16045] Use struct sctp_sack_info instead [ 487.959118][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2746'. [ 488.016108][T16057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2747'. [ 488.101859][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2746'. [ 488.148724][T16054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.266741][T13670] hsr_slave_0: left promiscuous mode [ 488.283423][T13670] hsr_slave_1: left promiscuous mode [ 488.298028][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.305547][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.333838][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.346537][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.370842][T16063] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2749'. [ 488.382617][T13670] hsr_slave_0: left promiscuous mode [ 488.394792][T13670] hsr_slave_1: left promiscuous mode [ 488.405917][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.414977][T13670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.425464][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.435810][T13670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.494173][T13670] veth1_macvtap: left promiscuous mode [ 488.500289][T13670] veth0_macvtap: left promiscuous mode [ 488.505967][T13670] veth1_vlan: left promiscuous mode [ 488.512692][T13670] veth0_vlan: left promiscuous mode [ 488.520651][T13670] veth1_macvtap: left promiscuous mode [ 488.526980][T13670] veth0_macvtap: left promiscuous mode [ 488.532811][T13670] veth1_vlan: left promiscuous mode [ 488.538704][T13670] veth0_vlan: left promiscuous mode [ 489.254148][T13670] team0 (unregistering): Port device team_slave_1 removed [ 489.302992][T13670] team0 (unregistering): Port device team_slave_0 removed [ 490.192695][T13670] team0 (unregistering): Port device team_slave_1 removed [ 490.235015][T13670] team0 (unregistering): Port device team_slave_0 removed [ 490.680488][T16065] veth0: entered promiscuous mode [ 490.756975][T16066] veth0: left promiscuous mode [ 490.821216][T15850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.962859][T15850] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.025354][T13673] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.032642][T13673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.171139][T13673] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.178400][T13673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.305672][T15850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.337252][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'. [ 491.668910][T15860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 491.698003][T15860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 491.725086][T15860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 491.744129][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2757'. [ 491.772162][T15860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 491.916088][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 491.959047][T16101] netlink: 'syz.2.2758': attribute type 1 has an invalid length. [ 491.974564][T16105] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 491.981350][T15874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.004379][T15874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.035448][T15850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.062830][T15874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.088486][T15874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.253402][T15860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.295048][T15850] veth0_vlan: entered promiscuous mode [ 492.339679][T15860] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.382736][T15850] veth1_vlan: entered promiscuous mode [ 492.408589][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.415893][T13670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.471658][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.478950][T13670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.495583][T16110] infiniband syz!: set down [ 492.500318][T16110] infiniband syz!: added team_slave_0 [ 492.563221][T16110] RDS/IB: syz!: added [ 492.567579][T16110] smc: adding ib device syz! with port count 1 [ 492.573881][T16110] smc: ib device syz! port 1 has pnetid [ 492.622255][T15860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.633134][T15860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.785745][T15850] veth0_macvtap: entered promiscuous mode [ 492.845220][T15874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.900800][T15850] veth1_macvtap: entered promiscuous mode [ 492.971110][T15874] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.029301][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.036569][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.070588][T15850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.090723][T15850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.132656][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.139944][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.221608][T15850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.251751][T15850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.278178][T15850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.297374][T15850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.411426][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.710856][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.743491][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.865468][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.897981][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.027468][ T5839] Bluetooth: hci0: command tx timeout [ 494.174929][T15874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.408510][T16152] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 494.449485][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.523762][T15860] veth0_vlan: entered promiscuous mode [ 494.618858][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.779055][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.878617][T15860] veth1_vlan: entered promiscuous mode [ 494.901161][T15874] veth0_vlan: entered promiscuous mode [ 494.940895][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.993749][T15874] veth1_vlan: entered promiscuous mode [ 495.105226][T15860] veth0_macvtap: entered promiscuous mode [ 495.163873][T15874] veth0_macvtap: entered promiscuous mode [ 495.180486][T15874] veth1_macvtap: entered promiscuous mode [ 495.194671][T15860] veth1_macvtap: entered promiscuous mode [ 495.323349][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.388304][T15874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.395843][ T49] bridge_slave_1: left allmulticast mode [ 495.403039][ T49] bridge_slave_1: left promiscuous mode [ 495.410078][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.422048][ T49] bridge_slave_0: left allmulticast mode [ 495.428423][ T49] bridge_slave_0: left promiscuous mode [ 495.434414][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.974790][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.989012][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.998991][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.007521][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.023798][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.035105][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.037797][ T49] bond0 (unregistering): Released all slaves [ 496.049878][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.101680][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.114420][T15860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.123858][T15860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.133090][T15860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.142024][T15860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.170126][T15874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.189102][T15874] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.202627][T15874] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.212454][T15874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.227082][T15874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.706916][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'. [ 496.716043][T16162] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 496.794042][T16162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.811372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.834898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.929755][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.938048][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.951792][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.967316][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.145000][T13670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.176717][T16169] sctp: [Deprecated]: syz.0.2769 (pid 16169) Use of int in maxseg socket option. [ 497.176717][T16169] Use struct sctp_assoc_value instead [ 497.193071][T13670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.097285][ T5840] Bluetooth: hci1: command tx timeout [ 498.529669][ T49] hsr_slave_0: left promiscuous mode [ 498.549449][ T49] hsr_slave_1: left promiscuous mode [ 498.561612][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.571751][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.587181][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.594694][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.635574][ T49] veth1_macvtap: left promiscuous mode [ 498.641383][ T49] veth0_macvtap: left promiscuous mode [ 498.647779][ T49] veth1_vlan: left promiscuous mode [ 498.653167][ T49] veth0_vlan: left promiscuous mode [ 498.704915][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.714988][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.730093][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.739497][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.754495][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.312652][ T49] team0 (unregistering): Port device team_slave_1 removed [ 499.361534][ T49] team0 (unregistering): Port device team_slave_0 removed [ 499.790052][T16204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2775'. [ 500.048444][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.064627][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.081749][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.101209][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.109658][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.187089][ T5840] Bluetooth: hci1: command tx timeout [ 500.276363][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 500.628903][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 500.714877][T16159] chnl_net:caif_netlink_parms(): no params data found [ 500.829728][T16214] xt_hashlimit: size too large, truncated to 1048576 [ 500.831753][ T5840] Bluetooth: hci2: command tx timeout [ 500.861835][T16214] syz.2.2778: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.887332][T16214] CPU: 1 UID: 0 PID: 16214 Comm: syz.2.2778 Not tainted 6.16.0-rc3-syzkaller-00117-g8550821a1535 #0 PREEMPT(full) [ 500.887368][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.887382][T16214] Call Trace: [ 500.887392][T16214] [ 500.887402][T16214] dump_stack_lvl+0x189/0x250 [ 500.887449][T16214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.887481][T16214] ? __pfx__printk+0x10/0x10 [ 500.887504][T16214] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 500.887528][T16214] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 500.887549][T16214] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 500.887573][T16214] warn_alloc+0x214/0x310 [ 500.887610][T16214] ? __pfx_warn_alloc+0x10/0x10 [ 500.887641][T16214] ? __get_vm_area_node+0x28f/0x300 [ 500.887662][T16214] ? htable_create+0xfc/0x7a0 [ 500.887752][T16214] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 500.887813][T16214] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.887844][T16214] ? rcu_is_watching+0x15/0xb0 [ 500.887878][T16214] ? htable_create+0xfc/0x7a0 [ 500.887903][T16214] ? htable_create+0xfc/0x7a0 [ 500.887928][T16214] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 500.887949][T16214] ? htable_create+0xfc/0x7a0 [ 500.887972][T16214] ? hashlimit_pernet+0x23/0x240 [ 500.888006][T16214] htable_create+0xfc/0x7a0 [ 500.888050][T16214] hashlimit_mt_check_common+0x719/0xa10 [ 500.888091][T16214] xt_check_match+0x3ce/0xab0 [ 500.888116][T16214] ? __pfx___mutex_lock+0x10/0x10 [ 500.888156][T16214] ? __pfx_xt_check_match+0x10/0x10 [ 500.888185][T16214] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 500.888218][T16214] ? xt_find_match+0x1f7/0x250 [ 500.888250][T16214] translate_table+0x1553/0x2040 [ 500.888334][T16214] ? __pfx_translate_table+0x10/0x10 [ 500.888363][T16214] ? __might_fault+0xb0/0x130 [ 500.888411][T16214] ? _copy_from_user+0x94/0xb0 [ 500.888440][T16214] do_ip6t_set_ctl+0x970/0xce0 [ 500.888475][T16214] ? rcu_is_watching+0x15/0xb0 [ 500.888506][T16214] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 500.888585][T16214] ? __pfx___mutex_lock+0x10/0x10 [ 500.888618][T16214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.888661][T16214] ? __pfx_futex_wait+0x10/0x10 [ 500.888702][T16214] nf_setsockopt+0x26c/0x290 [ 500.888740][T16214] rawv6_setsockopt+0x23b/0x5b0 [ 500.888769][T16214] ? __lock_acquire+0xab9/0xd20 [ 500.888803][T16214] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 500.888832][T16214] ? aa_sock_opt_perm+0x74/0x110 [ 500.888861][T16214] ? sock_common_setsockopt+0x36/0xc0 [ 500.888885][T16214] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 500.888922][T16214] do_sock_setsockopt+0x25a/0x3e0 [ 500.888953][T16214] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 500.888984][T16214] ? __fget_files+0x2a/0x420 [ 500.889016][T16214] __x64_sys_setsockopt+0x18b/0x220 [ 500.889057][T16214] do_syscall_64+0xfa/0x3b0 [ 500.889091][T16214] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.889121][T16214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.889143][T16214] ? clear_bhb_loop+0x60/0xb0 [ 500.889169][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.889191][T16214] RIP: 0033:0x7f682c58e929 [ 500.889211][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.889230][T16214] RSP: 002b:00007f682a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.889252][T16214] RAX: ffffffffffffffda RBX: 00007f682c7b5fa0 RCX: 00007f682c58e929 [ 500.889268][T16214] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 500.889281][T16214] RBP: 00007f682c610b39 R08: 00000000000005c0 R09: 0000000000000000 [ 500.889294][T16214] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 500.889307][T16214] R13: 0000000000000000 R14: 00007f682c7b5fa0 R15: 00007ffd00548818 [ 500.889342][T16214] [ 501.265849][T16214] Mem-Info: [ 501.269714][T16214] active_anon:4561 inactive_anon:0 isolated_anon:0 [ 501.269714][T16214] active_file:1462 inactive_file:40077 isolated_file:0 [ 501.269714][T16214] unevictable:768 dirty:63 writeback:0 [ 501.269714][T16214] slab_reclaimable:11892 slab_unreclaimable:119096 [ 501.269714][T16214] mapped:29137 shmem:1380 pagetables:880 [ 501.269714][T16214] sec_pagetables:0 bounce:0 [ 501.269714][T16214] kernel_misc_reclaimable:0 [ 501.269714][T16214] free:1310196 free_pcp:13913 free_cma:0 [ 501.315814][T16214] Node 0 active_anon:18160kB inactive_anon:0kB active_file:5848kB inactive_file:160108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116464kB dirty:248kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11848kB pagetables:3384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 501.349589][T16214] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 501.381656][T16214] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.411429][T16214] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 501.417422][T16214] Node 0 DMA32 free:1317640kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18212kB inactive_anon:0kB active_file:5848kB inactive_file:158288kB unevictable:1536kB writepending:244kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:42968kB local_pcp:19460kB free_cma:0kB [ 501.450693][T16214] lowmem_reserve[]: 0 0 1 1 1 [ 501.455484][T16214] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 501.487327][T16214] lowmem_reserve[]: 0 0 0 0 0 [ 501.492509][T16214] Node 1 Normal free:3907832kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12064kB local_pcp:4448kB free_cma:0kB [ 501.524172][T16214] lowmem_reserve[]: 0 0 0 0 0 [ 501.529002][T16214] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 501.543032][T16214] Node 0 DMA32: 668*4kB (UME) 463*8kB (UME) 248*16kB (ME) 95*32kB (M) 73*64kB (UME) 38*128kB (ME) 20*256kB (UM) 38*512kB (UME) 32*1024kB (UM) 8*2048kB (UM) 298*4096kB (UM) = 1317256kB [ 501.561893][T16214] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 501.574014][T16214] Node 1 Normal: 200*4kB (UME) 43*8kB (UME) 42*16kB (UME) 201*32kB (UME) 55*64kB (UME) 14*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3907832kB [ 501.596496][T16214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.606163][T16214] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.615689][T16214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.625797][T16214] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.635201][T16214] 42916 total pagecache pages [ 501.639981][T16214] 0 pages in swap cache [ 501.644176][T16214] Free swap = 124996kB [ 501.648862][T16214] Total swap = 124996kB [ 501.653056][T16214] 2097051 pages RAM [ 501.657036][T16214] 0 pages HighMem/MovableOnly [ 501.674307][T16214] 424694 pages reserved [ 501.686698][T16214] 0 pages cma reserved [ 501.787779][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2780'. [ 501.896690][T16159] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.904364][T16159] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.917293][T16159] bridge_slave_0: entered allmulticast mode [ 501.930712][T16159] bridge_slave_0: entered promiscuous mode [ 501.957536][T16159] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.964832][T16159] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.972732][T16159] bridge_slave_1: entered allmulticast mode [ 502.000211][T16159] bridge_slave_1: entered promiscuous mode [ 502.079336][T16232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2782'. [ 502.110882][T16159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.177430][ T5840] Bluetooth: hci4: command tx timeout [ 502.255134][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.267112][ T5840] Bluetooth: hci1: command tx timeout [ 502.304552][T16159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.355070][T16232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2782'. [ 502.415471][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.456863][T16232] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 502.465701][T16232] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 502.475518][T16232] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 502.490123][T16232] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 502.499737][T16232] geneve3: entered promiscuous mode [ 502.505112][T16232] geneve3: entered allmulticast mode [ 502.513134][T16232] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.522870][T16232] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.532144][T16232] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.542046][T16232] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 502.577071][T16159] team0: Port device team_slave_0 added [ 502.623024][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.641609][T16159] team0: Port device team_slave_1 added [ 502.779079][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.824763][T16159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.836931][T16159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.863493][T16159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.898610][ T5840] Bluetooth: hci2: command tx timeout [ 502.901061][T16159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.931061][T16159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.959997][T16159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.154298][T16159] hsr_slave_0: entered promiscuous mode [ 503.171075][T16159] hsr_slave_1: entered promiscuous mode [ 503.567672][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.595082][T16190] chnl_net:caif_netlink_parms(): no params data found [ 503.650631][T16205] chnl_net:caif_netlink_parms(): no params data found [ 503.710524][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.825067][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.939896][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.958135][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.966148][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.973669][T16190] bridge_slave_0: entered allmulticast mode [ 503.981517][T16190] bridge_slave_0: entered promiscuous mode [ 503.991057][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.998433][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.005811][T16190] bridge_slave_1: entered allmulticast mode [ 504.028228][T16190] bridge_slave_1: entered promiscuous mode [ 504.068356][T16273] netlink: 'syz.2.2790': attribute type 1 has an invalid length. [ 504.077265][T16273] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2790'. [ 504.087023][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2790'. [ 504.185536][T16205] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.194166][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.204572][T16205] bridge_slave_0: entered allmulticast mode [ 504.212994][T16205] bridge_slave_0: entered promiscuous mode [ 504.267338][ T5840] Bluetooth: hci4: command tx timeout [ 504.303840][T16205] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.311341][T16205] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.318872][T16205] bridge_slave_1: entered allmulticast mode [ 504.327068][T16205] bridge_slave_1: entered promiscuous mode [ 504.347362][ T5840] Bluetooth: hci1: command tx timeout [ 504.363570][T16276] netlink: 'syz.0.2791': attribute type 7 has an invalid length. [ 504.381260][T16190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.408837][T16190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.501322][T16205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.602516][T16205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.636434][T16288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2795'. [ 504.742723][T16190] team0: Port device team_slave_0 added [ 504.756173][T16205] team0: Port device team_slave_0 added [ 504.792401][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 504.794505][T16190] team0: Port device team_slave_1 added [ 504.860869][T16205] team0: Port device team_slave_1 added [ 504.967065][T16296] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 504.977058][ T5840] Bluetooth: hci2: command tx timeout [ 504.987086][T16298] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 504.998909][T16190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.007885][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.035318][T16190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.085962][T16190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.093462][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.123620][T16190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.187606][T16205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.214396][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.281217][T16205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.313713][ T49] bridge_slave_1: left allmulticast mode [ 505.326586][ T49] bridge_slave_1: left promiscuous mode [ 505.332443][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.364820][ T49] bridge_slave_0: left allmulticast mode [ 505.375834][ T49] bridge_slave_0: left promiscuous mode [ 505.388409][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.411709][ T49] bridge_slave_1: left allmulticast mode [ 505.423525][ T49] bridge_slave_1: left promiscuous mode [ 505.433469][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.448165][ T49] bridge_slave_0: left allmulticast mode [ 505.454803][ T49] bridge_slave_0: left promiscuous mode [ 505.474764][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.781507][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2804'. [ 506.022888][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.034893][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.045605][ T49] bond0 (unregistering): Released all slaves [ 506.337148][ T5840] Bluetooth: hci4: command tx timeout [ 506.428554][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.440668][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.452254][ T49] bond0 (unregistering): Released all slaves [ 506.471237][T16205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.483607][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.519155][T16205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.663126][T16205] hsr_slave_0: entered promiscuous mode [ 506.671560][T16205] hsr_slave_1: entered promiscuous mode [ 506.678863][T16205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.686557][T16205] Cannot create hsr debugfs directory [ 506.943602][T16190] hsr_slave_0: entered promiscuous mode [ 506.951525][T16190] hsr_slave_1: entered promiscuous mode [ 506.958229][T16190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.965856][T16190] Cannot create hsr debugfs directory [ 507.057632][ T5840] Bluetooth: hci2: command tx timeout [ 507.154433][T16336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2808'. [ 507.245162][T16159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.268419][T16159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.340102][T16159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.345201][T16343] netlink: 'syz.2.2810': attribute type 9 has an invalid length. [ 507.486576][T16159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 507.637509][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'. [ 508.416908][ T5840] Bluetooth: hci4: command tx timeout [ 508.742081][T16159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.052331][T16159] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.186652][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.193939][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.241098][ T49] hsr_slave_0: left promiscuous mode [ 509.267833][ T49] hsr_slave_1: left promiscuous mode [ 509.274898][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.283629][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.292858][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.301318][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.314326][ T49] hsr_slave_0: left promiscuous mode [ 509.321238][ T49] hsr_slave_1: left promiscuous mode [ 509.330665][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.338643][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.347811][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.355300][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.454631][ T49] veth1_macvtap: left promiscuous mode [ 509.461576][ T49] veth0_macvtap: left promiscuous mode [ 509.467756][ T49] veth1_vlan: left promiscuous mode [ 509.473265][ T49] veth0_vlan: left promiscuous mode [ 509.480666][ T49] veth1_macvtap: left promiscuous mode [ 509.486530][ T49] veth0_macvtap: left promiscuous mode [ 509.492396][ T49] veth1_vlan: left promiscuous mode [ 509.498558][ T49] veth0_vlan: left promiscuous mode [ 510.244979][ T49] team0 (unregistering): Port device team_slave_1 removed [ 510.299861][ T49] team0 (unregistering): Port device team_slave_0 removed [ 511.230041][ T49] team0 (unregistering): Port device team_slave_1 removed [ 511.284672][ T49] team0 (unregistering): Port device team_slave_0 removed [ 511.779623][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.786850][T13670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.830312][T16398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2819'. [ 511.840283][T16402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2819'. [ 512.066242][T16412] netlink: 'syz.0.2822': attribute type 21 has an invalid length. [ 512.095359][T16412] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2822'. [ 512.141116][T16412] netlink: 'syz.0.2822': attribute type 4 has an invalid length. [ 512.141464][T16414] netlink: 'syz.0.2822': attribute type 21 has an invalid length. [ 512.177171][T16412] netlink: 'syz.0.2822': attribute type 5 has an invalid length. [ 512.185287][T16414] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2822'. [ 512.224224][T16412] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2822'. [ 512.257842][T16414] netlink: 'syz.0.2822': attribute type 4 has an invalid length. [ 512.303343][T16414] netlink: 'syz.0.2822': attribute type 5 has an invalid length. [ 512.332933][T16414] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2822'. [ 512.535783][T16205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 512.548447][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 512.580366][T16205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 512.641522][T16205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.712232][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2824'. [ 512.720935][T16159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.734321][T16205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 512.742838][T16425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2823'. [ 512.791888][T16426] netlink: 'syz.2.2824': attribute type 5 has an invalid length. [ 512.943181][T16190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.988316][T16190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.001323][T16190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.043518][T16190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.175879][T16159] veth0_vlan: entered promiscuous mode [ 513.212920][T16159] veth1_vlan: entered promiscuous mode [ 513.295441][T16205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.306033][T16159] veth0_macvtap: entered promiscuous mode [ 513.340183][T16159] veth1_macvtap: entered promiscuous mode [ 513.381341][T16205] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.393710][T16190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.412183][T16159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.434462][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.441714][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.460982][T16159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.481800][T16159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.494529][T16159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.504058][T16159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.515530][T16159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.530305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.537532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.585207][T16190] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.620790][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.628093][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.684487][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.691853][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.930534][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.957407][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.087794][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.095717][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.328589][T16205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.392930][T16464] team0: Device gtp1 is of different type [ 514.618429][T16205] veth0_vlan: entered promiscuous mode [ 514.642761][T16205] veth1_vlan: entered promiscuous mode [ 514.806222][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.822636][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 514.849921][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'. [ 514.930302][T16190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.043195][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.137718][T16205] veth0_macvtap: entered promiscuous mode [ 515.206034][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.274598][T16205] veth1_macvtap: entered promiscuous mode [ 515.389415][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.484084][T16205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.524797][T16205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.550424][T16205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.559981][T16205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.570867][T16205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.582308][T16205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.730893][T13673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.753281][T13673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.815023][T16190] veth0_vlan: entered promiscuous mode [ 515.885086][ T49] bridge_slave_1: left allmulticast mode [ 515.893924][ T49] bridge_slave_1: left promiscuous mode [ 515.900016][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.911464][ T49] bridge_slave_0: left allmulticast mode [ 515.917602][ T49] bridge_slave_0: left promiscuous mode [ 515.923376][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.110590][T16489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2835'. [ 516.159484][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 516.460079][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.482264][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.490822][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.525113][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.550906][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.658253][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.669984][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.683777][ T49] bond0 (unregistering): Released all slaves [ 516.714286][T16190] veth1_vlan: entered promiscuous mode [ 516.758097][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.766003][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.925403][T16502] netlink: 'syz.2.2838': attribute type 7 has an invalid length. [ 516.987623][T16190] veth0_macvtap: entered promiscuous mode [ 517.035490][T16190] veth1_macvtap: entered promiscuous mode [ 517.288399][T16508] __nla_validate_parse: 2 callbacks suppressed [ 517.288426][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 517.332909][T16190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.369502][T16190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.404757][T16190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.446378][T16190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.466807][T16190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.475625][T16190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.749230][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.804165][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.988115][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.010914][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.574266][ T49] hsr_slave_0: left promiscuous mode [ 518.606940][ T49] hsr_slave_1: left promiscuous mode [ 518.614402][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.628565][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.641302][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.650507][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.657804][ T5840] Bluetooth: hci1: command tx timeout [ 518.704939][ T49] veth1_macvtap: left promiscuous mode [ 518.710730][ T49] veth0_macvtap: left promiscuous mode [ 518.722161][ T49] veth1_vlan: left promiscuous mode [ 518.728212][ T49] veth0_vlan: left promiscuous mode [ 519.329197][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.338734][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.361168][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.371960][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.403170][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.667121][ T49] team0 (unregistering): Port device team_slave_1 removed [ 519.724364][ T49] team0 (unregistering): Port device team_slave_0 removed [ 520.403909][T16496] chnl_net:caif_netlink_parms(): no params data found [ 520.719111][T16496] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.737397][ T5839] Bluetooth: hci1: command tx timeout [ 520.764212][T16496] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.777578][T16496] bridge_slave_0: entered allmulticast mode [ 520.796794][T16496] bridge_slave_0: entered promiscuous mode [ 520.812841][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.846843][T16496] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.854299][T16496] bridge_slave_1: entered allmulticast mode [ 520.888180][T16496] bridge_slave_1: entered promiscuous mode [ 521.047813][T16496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.086658][T16537] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.2846'. [ 521.096090][T16537] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 521.138471][T16496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.354513][T16496] team0: Port device team_slave_0 added [ 521.376221][T16496] team0: Port device team_slave_1 added [ 521.464962][ T5840] Bluetooth: hci2: command tx timeout [ 521.477891][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.492372][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.506604][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.516179][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.527435][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.590802][T16496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.598384][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.625265][T16496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.643052][T16496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.650130][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.678530][T16496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.858766][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.991199][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.005686][T16564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2854'. [ 522.044923][T16496] hsr_slave_0: entered promiscuous mode [ 522.065012][T16496] hsr_slave_1: entered promiscuous mode [ 522.104667][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'. [ 522.150633][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.415408][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.492259][T16581] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2858'. [ 522.681692][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2860'. [ 522.878972][ T51] Bluetooth: hci1: command tx timeout [ 523.051258][T16522] chnl_net:caif_netlink_parms(): no params data found [ 523.542366][ T51] Bluetooth: hci2: command tx timeout [ 523.616456][ T51] Bluetooth: hci4: command tx timeout [ 523.821493][T16522] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.850122][T16522] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.867050][T16522] bridge_slave_0: entered allmulticast mode [ 523.882925][T16522] bridge_slave_0: entered promiscuous mode [ 523.903637][T16522] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.914779][T16522] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.928213][T16522] bridge_slave_1: entered allmulticast mode [ 523.952884][T16522] bridge_slave_1: entered promiscuous mode [ 524.054291][T16613] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 524.059965][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.232647][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.271632][T16522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.298239][T16522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.309583][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2870'. [ 524.385685][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.489703][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2872'. [ 524.503921][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.570350][T16522] team0: Port device team_slave_0 added [ 524.597626][T16624] bond0: invalid ARP target 0.0.0.0 specified for addition [ 524.598312][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'. [ 524.604943][T16624] bond0: option arp_ip_target: invalid value (0) [ 524.635135][T16522] team0: Port device team_slave_1 added [ 524.758844][T16631] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2874'. [ 524.861039][T16522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.868245][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.900455][ T51] Bluetooth: hci1: command tx timeout [ 524.904192][T16522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.920433][T16522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.927493][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.957526][T16522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.227143][T16522] hsr_slave_0: entered promiscuous mode [ 525.238799][T16522] hsr_slave_1: entered promiscuous mode [ 525.247041][T16522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.254856][T16522] Cannot create hsr debugfs directory [ 525.261362][T16548] chnl_net:caif_netlink_parms(): no params data found [ 525.304882][T16496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.332877][T16496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.360872][T16496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 525.373666][ T49] bridge_slave_1: left allmulticast mode [ 525.380547][ T49] bridge_slave_1: left promiscuous mode [ 525.386456][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.397222][ T49] bridge_slave_0: left allmulticast mode [ 525.402915][ T49] bridge_slave_0: left promiscuous mode [ 525.408822][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.421776][ T49] bridge_slave_1: left allmulticast mode [ 525.427941][ T49] bridge_slave_1: left promiscuous mode [ 525.433772][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.444856][ T49] bridge_slave_0: left allmulticast mode [ 525.451142][ T49] bridge_slave_0: left promiscuous mode [ 525.458741][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.622366][ T51] Bluetooth: hci2: command tx timeout [ 525.697404][ T51] Bluetooth: hci4: command tx timeout [ 525.994230][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.009428][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.021370][ T49] bond0 (unregistering): Released all slaves [ 526.450161][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.462838][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.473842][ T49] bond0 (unregistering): Released all slaves [ 526.533056][T16496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 526.794013][T16667] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2881'. [ 527.000324][T16677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.027688][T16548] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.034953][T16548] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.051415][T16548] bridge_slave_0: entered allmulticast mode [ 527.062019][T16548] bridge_slave_0: entered promiscuous mode [ 527.073129][T16548] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.080723][T16548] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.088629][T16548] bridge_slave_1: entered allmulticast mode [ 527.098479][T16548] bridge_slave_1: entered promiscuous mode [ 527.415312][T16548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.596933][T16700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2889'. [ 527.602549][T16548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.606676][T16700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2889'. [ 527.702956][ T51] Bluetooth: hci2: command tx timeout [ 527.762691][T16548] team0: Port device team_slave_0 added [ 527.776486][ T51] Bluetooth: hci4: command tx timeout [ 527.874973][T16548] team0: Port device team_slave_1 added [ 528.403626][T16548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.427948][T16548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.516594][T16548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.658546][T16548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.665584][T16548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.701170][T16548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.784152][T16730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.019753][T16548] hsr_slave_0: entered promiscuous mode [ 529.033961][T16548] hsr_slave_1: entered promiscuous mode [ 529.062500][T16548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.073786][T16548] Cannot create hsr debugfs directory [ 529.221434][T16496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.351139][ T49] hsr_slave_0: left promiscuous mode [ 529.374011][ T49] hsr_slave_1: left promiscuous mode [ 529.383527][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.391744][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.413514][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.421799][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.449809][ T49] hsr_slave_0: left promiscuous mode [ 529.462305][ T49] hsr_slave_1: left promiscuous mode [ 529.473529][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.489184][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.527736][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.535360][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.619861][ T49] veth1_macvtap: left promiscuous mode [ 529.627427][ T49] veth0_macvtap: left promiscuous mode [ 529.634448][ T49] veth1_vlan: left promiscuous mode [ 529.641177][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 529.643463][ T49] veth0_vlan: left promiscuous mode [ 529.655849][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 529.675708][ T49] veth1_macvtap: left promiscuous mode [ 529.681625][ T49] veth0_macvtap: left promiscuous mode [ 529.687822][ T49] veth1_vlan: left promiscuous mode [ 529.693390][ T49] veth0_vlan: left promiscuous mode [ 529.856550][ T51] Bluetooth: hci4: command tx timeout [ 530.405785][ T49] team0 (unregistering): Port device team_slave_1 removed [ 530.459513][ T49] team0 (unregistering): Port device team_slave_0 removed [ 531.442216][ T49] team0 (unregistering): Port device team_slave_1 removed [ 531.510133][ T49] team0 (unregistering): Port device team_slave_0 removed [ 532.116962][T16751] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 532.137790][T16751] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 532.138687][T16752] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 532.444710][T16496] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.640835][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.648104][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.697714][T16522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 532.736071][T16522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 532.847547][T16522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 532.889468][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.896753][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.922367][T16522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.461734][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2911'. [ 533.528360][T16796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 533.538380][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2912'. [ 533.576370][T16796] netlink: 'syz.2.2912': attribute type 13 has an invalid length. [ 533.865134][T16548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.901277][T16548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.979016][T16522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.996785][T16548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.023985][T16548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.215895][T16522] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.255942][T16496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.282945][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.290242][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.323351][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.330645][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.385387][T16827] netlink: 'syz.0.2917': attribute type 3 has an invalid length. [ 534.550538][T16496] veth0_vlan: entered promiscuous mode [ 534.615620][T16548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.684259][T16496] veth1_vlan: entered promiscuous mode [ 534.775913][T16548] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.801074][T16838] netlink: 'syz.2.2920': attribute type 2 has an invalid length. [ 534.809742][T16838] netlink: 'syz.2.2920': attribute type 8 has an invalid length. [ 534.821633][T16838] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.2920'. [ 534.854994][T16838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2920'. [ 534.878529][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.885827][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.908063][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.915370][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.048839][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 535.064883][T16496] veth0_macvtap: entered promiscuous mode [ 535.110829][T16496] veth1_macvtap: entered promiscuous mode [ 535.182117][T16522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.248190][T16496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.294185][T16496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.315668][T16496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.329279][T16496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.338490][T16496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.347765][T16496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.370205][T16845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.401943][T16846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.565838][T16522] veth0_vlan: entered promiscuous mode [ 535.694979][T16522] veth1_vlan: entered promiscuous mode [ 535.702962][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.725193][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.927809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.935725][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.945217][T16548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.971178][T16522] veth0_macvtap: entered promiscuous mode [ 536.050954][T16522] veth1_macvtap: entered promiscuous mode [ 536.157249][T16522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.241484][T16522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.335708][T16522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.356772][T16522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.365606][T16522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.375039][T16522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.693271][ T179] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.754501][T13673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.808075][T13673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.866195][ T179] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.981503][ T179] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.022856][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.043449][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.070166][T16548] veth0_vlan: entered promiscuous mode [ 537.102559][T16548] veth1_vlan: entered promiscuous mode [ 537.194593][ T179] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.291251][T16548] veth0_macvtap: entered promiscuous mode [ 537.312290][T16548] veth1_macvtap: entered promiscuous mode [ 537.335147][T16548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.357489][T16548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.376135][T16548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.391049][T16548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.400837][T16548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.410091][T16548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.552395][ T179] bridge_slave_1: left allmulticast mode [ 537.561535][ T179] bridge_slave_1: left promiscuous mode [ 537.571917][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.589221][ T179] bridge_slave_0: left allmulticast mode [ 537.594967][ T179] bridge_slave_0: left promiscuous mode [ 537.604595][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.869910][T16884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2928'. [ 538.390868][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.430621][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.439948][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.466662][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.489867][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.552730][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.570754][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.584280][ T179] bond0 (unregistering): Released all slaves [ 538.909263][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.930941][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.054337][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.064068][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.469574][T16903] netlink: 'syz.2.2931': attribute type 9 has an invalid length. [ 540.023690][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.053757][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.063993][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.074284][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.083592][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.405531][T16892] chnl_net:caif_netlink_parms(): no params data found [ 540.577341][ T51] Bluetooth: hci1: command tx timeout [ 540.794931][ T179] hsr_slave_0: left promiscuous mode [ 540.802534][ T179] hsr_slave_1: left promiscuous mode [ 540.809330][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.820072][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.831807][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.839610][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.863873][ T179] veth1_macvtap: left promiscuous mode [ 540.870054][ T179] veth0_macvtap: left promiscuous mode [ 540.875829][ T179] veth1_vlan: left promiscuous mode [ 540.881284][ T179] veth0_vlan: left promiscuous mode [ 541.462314][ T179] team0 (unregistering): Port device team_slave_1 removed [ 541.515026][ T179] team0 (unregistering): Port device team_slave_0 removed [ 542.111964][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.123697][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.136186][T16892] bridge_slave_0: entered allmulticast mode [ 542.151887][T16892] bridge_slave_0: entered promiscuous mode [ 542.164414][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.174729][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.185771][ T51] Bluetooth: hci2: command tx timeout [ 542.197608][T16892] bridge_slave_1: entered allmulticast mode [ 542.206246][T16892] bridge_slave_1: entered promiscuous mode [ 542.235476][T16916] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2932'. [ 542.351532][T16917] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 542.446774][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.509924][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.661527][ T5839] Bluetooth: hci1: command tx timeout [ 542.663751][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.698248][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.713704][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.734247][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.743580][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.754828][T16892] team0: Port device team_slave_0 added [ 542.754904][T16925] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2933'. [ 542.814852][T16892] team0: Port device team_slave_1 added [ 542.859418][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 542.873900][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2933'. [ 542.883027][T16925] netlink: 'syz.2.2933': attribute type 15 has an invalid length. [ 543.179811][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.205876][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.240513][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.261056][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.271014][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.309863][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.366568][T16929] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2935'. [ 543.598292][T16892] hsr_slave_0: entered promiscuous mode [ 543.610630][T16892] hsr_slave_1: entered promiscuous mode [ 543.751435][ T179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.759652][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 543.958679][ T179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.070133][T16905] chnl_net:caif_netlink_parms(): no params data found [ 544.091867][T16944] netlink: 'syz.2.2938': attribute type 21 has an invalid length. [ 544.134340][ T179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.222532][ T179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.257058][ T51] Bluetooth: hci2: command tx timeout [ 544.641705][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2941'. [ 544.711571][T16961] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2941'. [ 544.737988][ T51] Bluetooth: hci1: command tx timeout [ 544.751876][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2941'. [ 544.817303][ T51] Bluetooth: hci4: command tx timeout [ 544.842552][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 544.903342][T16969] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 544.913588][T16969] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 545.014726][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.025208][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.035959][T16905] bridge_slave_0: entered allmulticast mode [ 545.044227][T16905] bridge_slave_0: entered promiscuous mode [ 545.085640][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.096923][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.104725][T16905] bridge_slave_1: entered allmulticast mode [ 545.115994][T16905] bridge_slave_1: entered promiscuous mode [ 545.254632][ T179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.281713][T16980] netlink: 'syz.2.2947': attribute type 7 has an invalid length. [ 545.315547][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.353015][T16982] netlink: 'syz.2.2947': attribute type 7 has an invalid length. [ 545.389886][ T179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.395756][T16984] netlink: 'syz.0.2949': attribute type 8 has an invalid length. [ 545.410330][T16986] netlink: 'syz.0.2949': attribute type 8 has an invalid length. [ 545.432906][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.454922][T16982] : entered promiscuous mode [ 545.610496][ T179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.711442][ T179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.739310][T16905] team0: Port device team_slave_0 added [ 545.854600][T16905] team0: Port device team_slave_1 added [ 545.939069][T16892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.021697][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.046071][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.082997][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.105803][T16892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.122233][T16892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.160912][T17003] chnl_net:caif_netlink_parms(): no params data found [ 546.218036][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.225159][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.259414][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.300663][T16892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.336973][ T51] Bluetooth: hci2: command tx timeout [ 546.473872][T16921] chnl_net:caif_netlink_parms(): no params data found [ 546.565443][T16905] hsr_slave_0: entered promiscuous mode [ 546.580195][T16905] hsr_slave_1: entered promiscuous mode [ 546.591990][T16905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.599858][T16905] Cannot create hsr debugfs directory [ 546.641353][T17024] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 546.817648][ T51] Bluetooth: hci1: command tx timeout [ 546.893716][ T179] bridge_slave_1: left allmulticast mode [ 546.897055][ T51] Bluetooth: hci4: command tx timeout [ 546.900207][ T179] bridge_slave_1: left promiscuous mode [ 546.911333][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.922068][ T179] bridge_slave_0: left allmulticast mode [ 546.928223][ T179] bridge_slave_0: left promiscuous mode [ 546.934166][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.949308][ T179] bridge_slave_1: left allmulticast mode [ 546.955081][ T179] bridge_slave_1: left promiscuous mode [ 546.961808][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.972209][ T179] bridge_slave_0: left allmulticast mode [ 546.979621][ T179] bridge_slave_0: left promiscuous mode [ 546.985862][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.472454][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.484363][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.495441][ T179] bond0 (unregistering): Released all slaves [ 547.867430][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.882010][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.892635][ T179] bond0 (unregistering): Released all slaves [ 548.158712][T16921] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.168185][T16921] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.182456][T16921] bridge_slave_0: entered allmulticast mode [ 548.194716][T16921] bridge_slave_0: entered promiscuous mode [ 548.314989][T16921] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.322476][T16921] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.354625][T16921] bridge_slave_1: entered allmulticast mode [ 548.381622][T16921] bridge_slave_1: entered promiscuous mode [ 548.416597][ T51] Bluetooth: hci2: command tx timeout [ 548.515500][T16921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.591039][T16921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.661100][T16921] team0: Port device team_slave_0 added [ 548.722947][T16921] team0: Port device team_slave_1 added [ 548.783926][T17066] __nla_validate_parse: 6 callbacks suppressed [ 548.783950][T17066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2970'. [ 548.972057][T16921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.978143][ T51] Bluetooth: hci4: command tx timeout [ 549.016834][T16921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.049914][T16921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.128255][T17072] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (39785) ! [ 549.164241][T16921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.193783][T16921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.227553][T16921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.329159][T17080] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 549.430142][T16921] hsr_slave_0: entered promiscuous mode [ 549.475457][T16921] hsr_slave_1: entered promiscuous mode [ 549.517367][T16921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.556825][T16921] Cannot create hsr debugfs directory [ 549.962396][T17091] netlink: 'syz.0.2979': attribute type 3 has an invalid length. [ 550.192856][T17096] netlink: 872 bytes leftover after parsing attributes in process `syz.0.2981'. [ 550.255588][T17097] netlink: 872 bytes leftover after parsing attributes in process `syz.0.2981'. [ 550.430955][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.456970][T16905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 550.490617][T16905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 550.674294][T16905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 550.712144][T16905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 550.808189][T17113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2985'. [ 550.818646][ T179] hsr_slave_0: left promiscuous mode [ 550.824916][ T179] hsr_slave_1: left promiscuous mode [ 550.831852][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.844227][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.852679][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.865494][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.008112][T17119] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2984'. [ 551.019695][ T179] hsr_slave_0: left promiscuous mode [ 551.025701][ T179] hsr_slave_1: left promiscuous mode [ 551.032589][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.041151][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.049551][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.058856][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.066851][ T51] Bluetooth: hci4: command tx timeout [ 551.112899][ T179] veth1_macvtap: left promiscuous mode [ 551.119088][ T179] veth0_macvtap: left promiscuous mode [ 551.124880][ T179] veth1_vlan: left promiscuous mode [ 551.130615][ T179] veth0_vlan: left promiscuous mode [ 551.137639][ T179] veth1_macvtap: left promiscuous mode [ 551.145065][ T179] veth0_macvtap: left promiscuous mode [ 551.151240][ T179] veth1_vlan: left promiscuous mode [ 551.158048][ T179] veth0_vlan: left promiscuous mode [ 551.827964][ T179] team0 (unregistering): Port device team_slave_1 removed [ 551.875821][ T179] team0 (unregistering): Port device team_slave_0 removed [ 552.741455][ T179] team0 (unregistering): Port device team_slave_1 removed [ 552.792081][ T179] team0 (unregistering): Port device team_slave_0 removed [ 553.285799][T17111] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 (while UP) [ 553.385114][T17119] gretap0: entered promiscuous mode [ 553.483283][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.514594][ T4536] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.521883][ T4536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.566084][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.573385][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.084146][T16892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.294765][T16921] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 554.325182][T16921] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 554.362370][T16921] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 554.374522][T17145] xt_TCPMSS: Only works on TCP SYN packets [ 554.417344][T16921] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 554.494296][T17151] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 554.576212][T17151] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 554.637389][T16905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.700404][T16905] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.724402][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.757617][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.764869][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.819559][ T4536] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.826889][ T4536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.965511][T16921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.000913][T17173] bond0: (slave bridge0): Releasing backup interface [ 555.019417][T17173] bond0: (slave batadv0): Releasing backup interface [ 555.029369][T17174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2994'. [ 555.043763][T17173] bridge_slave_0: left allmulticast mode [ 555.050387][T17173] bridge_slave_0: left promiscuous mode [ 555.056269][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.068632][T17173] bridge_slave_1: left allmulticast mode [ 555.074402][T17173] bridge_slave_1: left promiscuous mode [ 555.080816][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.103689][T17173] bond0: (slave 1!€ÿ): Releasing backup interface [ 555.131033][T17173] bond0: (slave bond_slave_1): Releasing backup interface [ 555.182428][T17173] team0: Port device team_slave_0 removed [ 555.221260][T17173] team0: Port device team_slave_1 removed [ 555.228915][T17173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.236851][T17173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.250205][T17173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.260083][T17173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.273817][T17173] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 555.334503][ T5922] syz0: Port: 1 Link DOWN [ 555.411236][T16921] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.448868][T16892] veth0_vlan: entered promiscuous mode [ 555.479489][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.486727][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.512525][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.519743][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.574429][T16892] veth1_vlan: entered promiscuous mode [ 555.764939][T16892] veth0_macvtap: entered promiscuous mode [ 555.815640][T17188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2997'. [ 555.841198][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 555.858615][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 555.860648][T16892] veth1_macvtap: entered promiscuous mode [ 555.885137][T16905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.920299][T17191] netlink: 'syz.2.2997': attribute type 13 has an invalid length. [ 555.965499][T16892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.013202][T16892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.061176][T16892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.073585][T16892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.086079][T16892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.099708][T16892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.209761][T16905] veth0_vlan: entered promiscuous mode [ 556.262611][T16905] veth1_vlan: entered promiscuous mode [ 556.391809][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.419419][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.474620][T16905] veth0_macvtap: entered promiscuous mode [ 556.514932][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.515654][T16905] veth1_macvtap: entered promiscuous mode [ 556.529230][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.552155][T16921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.608312][T16905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.660469][T16905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.700650][T16905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.719266][T16905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.731786][T16905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.753263][T16905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.078758][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.111192][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.270713][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.502051][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.544971][T13670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.565340][T13670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.736898][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.823157][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.840641][T16921] veth0_vlan: entered promiscuous mode [ 557.874547][T16921] veth1_vlan: entered promiscuous mode [ 557.964715][T16921] veth0_macvtap: entered promiscuous mode [ 558.007791][T16921] veth1_macvtap: entered promiscuous mode [ 558.163940][T16921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.194427][T16921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.213544][ T13] bridge_slave_1: left allmulticast mode [ 558.225207][ T13] bridge_slave_1: left promiscuous mode [ 558.240916][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.254762][ T13] bridge_slave_0: left allmulticast mode [ 558.265870][ T13] bridge_slave_0: left promiscuous mode [ 558.297260][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.694233][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 558.704515][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 558.716550][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 558.729581][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 558.746367][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 558.873508][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.885493][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.898490][ T13] bond0 (unregistering): Released all slaves [ 558.923796][T16921] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.934833][T16921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.945019][T16921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.954658][T16921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.217435][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.234107][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.385446][T13673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.394248][T13673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.494963][T16921] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 559.506946][T16921] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 559.515423][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00117-g8550821a1535 #0 PREEMPT(full) [ 559.527708][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.537795][T16921] RIP: 0010:klist_remove+0x14a/0x340 [ 559.543212][T16921] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 559.562868][T16921] RSP: 0018:ffffc90003def840 EFLAGS: 00010202 [ 559.568985][T16921] RAX: 000000000000000b RBX: ffff8880249b1e00 RCX: 0000000000000000 [ 559.576979][T16921] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 559.584960][T16921] RBP: ffffc90003def928 R08: ffffffff8f8794c3 R09: 1ffffffff1f0f298 [ 559.592952][T16921] R10: dffffc0000000000 R11: fffffbfff1f0f299 R12: 0000000000000000 [ 559.600929][T16921] R13: 1ffff1100b0e2a0c R14: ffff888058715060 R15: dffffc0000000000 [ 559.608915][T16921] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 559.617857][T16921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.624448][T16921] CR2: 00007fff7ba44c50 CR3: 0000000032152000 CR4: 00000000003526f0 [ 559.632435][T16921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.640415][T16921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.648395][T16921] Call Trace: [ 559.651700][T16921] [ 559.654650][T16921] ? __pfx_klist_remove+0x10/0x10 [ 559.659716][T16921] ? __pfx_kobject_move+0x10/0x10 [ 559.664752][T16921] ? get_device_parent+0x366/0x3a0 [ 559.669893][T16921] device_move+0x193/0x700 [ 559.674355][T16921] hci_conn_del_sysfs+0xb8/0x170 [ 559.679362][T16921] hci_conn_del+0x8ff/0xcb0 [ 559.683881][T16921] hci_conn_hash_flush+0x191/0x230 [ 559.689007][T16921] hci_dev_close_sync+0xaef/0x1330 [ 559.694169][T16921] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 559.699737][T16921] ? up_write+0x1c4/0x420 [ 559.704086][T16921] hci_unregister_dev+0x21a/0x510 [ 559.709132][T16921] vhci_release+0x80/0xd0 [ 559.713565][T16921] ? __pfx_vhci_release+0x10/0x10 [ 559.718603][T16921] __fput+0x449/0xa70 [ 559.722612][T16921] task_work_run+0x1d1/0x260 [ 559.727227][T16921] ? __pfx_task_work_run+0x10/0x10 [ 559.732355][T16921] ? kmem_cache_free+0x18f/0x400 [ 559.737303][T16921] do_exit+0x6b5/0x22e0 [ 559.741469][T16921] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.746856][T16921] ? __pfx_do_exit+0x10/0x10 [ 559.751467][T16921] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.756716][T16921] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.761939][T16921] do_group_exit+0x21c/0x2d0 [ 559.766563][T16921] __x64_sys_exit_group+0x3f/0x40 [ 559.771609][T16921] x64_sys_call+0x21ba/0x21c0 [ 559.776306][T16921] do_syscall_64+0xfa/0x3b0 [ 559.780844][T16921] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.786066][T16921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.792148][T16921] ? clear_bhb_loop+0x60/0xb0 [ 559.796841][T16921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.802748][T16921] RIP: 0033:0x7f4d2e18e929 [ 559.807186][T16921] Code: Unable to access opcode bytes at 0x7f4d2e18e8ff. [ 559.814221][T16921] RSP: 002b:00007fff7ba46e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 559.822656][T16921] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d2e18e929 [ 559.830637][T16921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 559.838618][T16921] RBP: 00007f4d2e1ee8f0 R08: 00007fff7ba44bc7 R09: 0000000000000003 [ 559.846610][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.854615][T16921] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff7ba46fe0 [ 559.862629][T16921] [ 559.865695][T16921] Modules linked in: [ 559.871867][T16921] ---[ end trace 0000000000000000 ]--- [ 559.880019][T16921] RIP: 0010:klist_remove+0x14a/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 559.885385][T16921] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 559.923760][T16921] RSP: 0018:ffffc90003def840 EFLAGS: 00010202 [ 559.929974][T16921] RAX: 000000000000000b RBX: ffff8880249b1e00 RCX: 0000000000000000 [ 560.049106][T17232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3007'. [ 560.080563][T17232] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3007'. [ 560.106319][T17232] netlink: 'syz.2.3007': attribute type 5 has an invalid length. [ 560.114152][T17232] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3007'. [ 560.140887][T16921] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 560.149365][T16921] RBP: ffffc90003def928 R08: ffffffff8f8794c3 R09: 1ffffffff1f0f298 [ 560.157425][T16921] R10: dffffc0000000000 R11: fffffbfff1f0f299 R12: 0000000000000000 [ 560.165486][T17233] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3007'. [ 560.175200][T16921] R13: 1ffff1100b0e2a0c R14: ffff888058715060 R15: dffffc0000000000 [ 560.184082][T16921] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 560.193779][T16921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.200488][T16921] CR2: 00007f682a3d4f98 CR3: 0000000075cd0000 CR4: 00000000003526f0 [ 560.208989][T16921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.217068][T17233] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3007'. [ 560.226046][T17233] netlink: 'syz.2.3007': attribute type 5 has an invalid length. [ 560.233935][T16921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.242443][T16921] Kernel panic - not syncing: Fatal exception [ 560.248955][T16921] Kernel Offset: disabled [ 560.253302][T16921] Rebooting in 86400 seconds..