last executing test programs: 2m20.65997648s ago: executing program 0 (id=3453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x40408d1}, 0x20044014) 2m20.53040007s ago: executing program 0 (id=3455): recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x1}], 0x1, 0x4020, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r7, 0x7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e0000240002800800034000000001080001400000000a080004400000000608000240000000000900010073797a30000000000900020073797a320000000014000000110001000000e9ffffffffffffff000a"], 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 2m20.411821981s ago: executing program 1 (id=3456): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e23, @local}}) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056000106000000000000000007"], 0x1c}], 0x1}, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6dcd3292ea54c7daef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x60000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x20008010}, 0x40001) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000040400400", @ANYRES32=0x1, @ANYBLOB="fcffffff00000000000000f30000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)) 2m20.357823513s ago: executing program 0 (id=3457): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x1c, 0x52, 0x401, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x1c, 0x52, 0x401, 0x0, 0x0, {}, [@NETCONFA_PROXY_NEIGH={0x8}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES8=0x0, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 2m20.342835365s ago: executing program 1 (id=3458): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x11284862defe5469, @host}, 0x80, &(0x7f0000000600)=[{&(0x7f0000003880)="f9292cd1d11865c51c5447b349fe89be02e268e8d2e0f66515e514820024a3561e1ed6f2082b9f73eeeb113674f44f5c388ca9853619ebecd21f9b712a14e24054cfb9b5362493ce63a4dd2ef12bf5c67567927fb4e3e7a188b22384e8f1317f72c717a3e893800c1f1774eb42de222824e12ff880cd974848f9468cd8d632e2e95a13f5022a5b9c66d741d4b1777460a8b6e9c360813ee83f35159e8dea7ef03359d7185d560b0ae10b109a8d3fd3be6ed5cadd69e5e32e3c1f94427ba74d7baa41c3f50a7163947f366c12db05ae969ab2a821c0d1032b5dd63f43f8055201a7f4b948f48133cbf5f6c6a913bd1bc0f2cce4516e400204a25b7a750af979c0fd8fe7ee8976833c50b859681ba6fa70241ce4523e4465b60ad9219d566e31d37c6d625450600c627833750e2da54dc25d5f6e91e6a3480a01d6d056497829c4203f0c46e9e2f042576221b0e370697585c09526b0bfca89a8f12d13adb4452f5bd8e40de944e1f13b558c73a93c43c53d2844ae7fac848b8bb21cf2a5693d373a9e2127138c36358a3f9a887ff2742a3d362cbd4892844372284841f0cc08b4efd2d4053b58cd5a198a483db1148311c4b9dd265b1636ba84678d3de2b5fcd0d9c15bbc1a8dacdef6baebde85760ead205c48e1cdaf1cd32755526c96c4763547e9432c90f1a0edef156714533133a58a36fb086837415db5afaff265ee857f01d9bf57aa7a68dca561573076475803c5143cce335bd36164107e62de9184d13e3143dbc979c05365b4bac6d6a2535d79d2cd32a3bf3ee8a3fe24e5b26eaadf2460ebad780ed6116fcccb127ae741bcd2038dda3e8f2a539e40290c9f7114639fb292673e1585e6deefa5761236734811c4c0b7ede0a9f7d650d88c984d9362e4131b4cda1f2073769ce991e6f4c675c4e3235741fe78095425b0c49d6233c8f9f7ec62e2dc60e7e85056396de5927d1c825288e922f9550d3c0f302fe294f6d8dc5cc6b9db2255d1f952cf1b04de21b109badb89b1d6f5d83d46c4b5b759f80833524a0c294b83ab682903e30a241fec30aca3adcedae02305b4f5fed22167ff614e585e73422369c54a3d3239acf454ccb7293d8ea8a4fc3aa4d2d7c3c203448809474096ef5297d1225a678c271f84e65303adcda51d29a5f8b3cb28a4fb52321bc2b3d78a33de69a837a2cd2f9dab09b259ed7b12796cea41d60bf3a83e4cb9f11751c1cb7b0cf8a845b29ae2397f8305d0aba4cc8fbfff8cfbe4430af0b673191117fa42212a4b5e0632e510f1c153a402f02329214947f232090fb8e6b5d02a0d393241cf6b76d6943506d7b9898f1d9c22ac6508d9156304eeb315ee56008f3bcccb1435ab99b0b96d73a8d11f1c8bdc733e66ad08eeebf739583c19bfd331cd68c0e7613573c5c5b729e1962e35f09adc906dbeabf3aa1ad0ecbf13f2c036e7fc7a29f36b6b43650a82e3e620dc87a96f942dc68af6032cf32e0986b6b088d2b6e96c9f5fe8192949e571e2608c6ad7f65c6a17a8ea3eb81edec26f08c712e3f54eba943290b94be5ffcd2e314d3a83f9f53440e38e5c0d26284c30766b615cd45558b8dac41ab81d64f76e528988247224222f8b8a5b87d6376b216bc35fce496cf732447ac5639d38a183c283a6bdd155e2e5204e301175ddc53452ac001c11c63599ed155a6d1a4acc8be942aa689c6485e00f958376064a69766b1bf75cb2a79343f87e8c753b61fb26b217b77c1b76c3eb858326480601d58ce43b6966fb93b2dd4af17fd1ebffce00fde22a72cbe0c93c86e6376228eaf2db8d1b97d3763d78550e022d1800626adb954449200af5d036307a9c72489e78bbc27da3418591eaffbfdcc61e31d24fba8f708c12848ddf45dca5accee1a2dd7915b2d7770141df1580d1ee21c342fdae9fb46bc0b1cf2edd9ae686b81d0767cc9080a598f63b189e052dcb8e46d21ca1fc2e949eea7cfa54f27f96f27cdf673bf75cd0c8bb6277ba01ade5c313fe57ef08bec60c9bef8920d73c2e918b4234f3b5dd4559945b89c14ec986d3dea47a703d0406ee972340a1832feb6561c3891945db59fc2967e091d8b8da3610e883e9fa71eca2017e375343857971b94551b19acb28cf765e98ed37e38a582e16f297df883d598a24b5fc253c2489e1a4e683d027f064a40db035b25d7a6d69ffa37b6babb7ba80dc45516b72061ccb1550c0dc258016ec1e2a7bcfe1330ae6f07098d84e5a1680eb3ff2eeaad300776deb0e8dc03df4d26bee14b8a26b63f8c3390cae064db3086eff8b092becbe0e8256ef6fd69c673bdbc39949dd4c903a01ed88a91829142d2402a294095abfbd5058d25185004b87571c593c0ca9e0d7edc2c7c76134c62426791fa43f6604a1d66d60b71aa1bb5b5684bcb19088139159716641f0613f4fc99b6c4fabd7acfb2bd5f0db9e61da44efdc1a669ee809c95831dca2ce00cc204b976b1c333fb16d7b0aeeac5a3f360ff8b07bcd08e817aa5ac914344088f9245943b93c67f4ff35f34b4443e0a54e20bfbea3127faa3fd4ae30d0c57b8f8cc92aedbfcb36d380b7d3760f9762086a6113203dd0f7e8417ec63c03d793a19c8daf0ab0fff629390bbc7c54d342b456aa32c989e46d7cbfff456ee8f1b83309d49ca875faf005934eea9ec72746dac4f080c40e8d3743ed21785eec34b9f7a65c0b11f414e550942fb3bdb0064c59aea61824c27e5b288c910c0ae843dd9784d8679df8ffe9da8a82b567d77a9ed93608043cf9f1926129479f850d1522db538b89341ea33749a61bf82601e6e788577b6767a19a1b3a1e7f18cdd21f703c4c573e44cf9afd9064e8319328397296bc2f9806981902f653b0c56b12ac7367db25981988b8fc9a735ade4e7ff27a9a1d55ae1a9282c33bd3a4af6488494ace3d72606141d2fee50b025dc775ab1f77b9f4a9bcc678a66ce3693abc7080840509e8996663c24968a187cf77d7cf006318fa269d4194894e5850fe535cdd109b3e7b5f2fefc609f75e64e6c83f10e11dd71784d15bd2745d6e93f1660973df015aa036d22f8094530e0272393a11b5cfe4c58786e1d547f036849f4b95fe6063da9ae60a126d525b9ff97c1b98a881d16af0c77c559b6a4dd24dbcc216dec852e1a5088f4624de506fac9d8ff5e4b18a162e4f237dfcefc883a70880cf190ffbb67c7d09fcabf5daf76ed7eb1f581fbbc4a4749881db43dd6852aaf95b8a6d38bbe2a9b7aad87f0698291d25232d4d2ec232a954ca1840102bcdcb458f6f53b9e9e6f11a6a3d596f37ff7aa04027ab24132d4e7bc7e0bb07af6433396943acec98048b15d8f9b757da5f732969cac0ba14029914346cab6112fc50e4ac1858f988723edfd9a98888844c9b43973c835fbcfd3903416f7048cc0d94b68ebba06ee70105449d91a6f514420901fd6c7b4a626dc174a22769d5d1d53f7510ceb3525d94cf3885d7ff81fbf200f41ed7b3b60e0d646fef80ea125be568650c51db8aa606993c7646a0fe9bbdec83ea5db88c436269161c7d68cb71e80a8ac4aedc57e721404337634c83f73664b9861c73bea2cea0408857d3816b0378bf2efcefa4942c416c976bb6ce601eba8274fa63a440bf1fa2a83d39a94d37af2b3a4608a1ba4c66c7f70261e62b24f3cc2b76f8ab34514e93b5857877ee4fcd4cbfb164f87c52721e16c4701ff0e0f85c72dbda681b300b242edbef0a089fcb85d6dc319bdfac1b21cc30061ebbf14bd0d626b3754e368dd0629ce45c2d34b1248de10bc0d11d5f7ad63f547c4b29d40962ae33596290bdcbbc43fd8a5e4ffe798282718533fbd42437ec900a5da14d17451131cc4d833110cc0f2657d1fa465dd22f73f1326e3c5336f978497641aea775ee6fb3a22bd8f40feba40f918d23f6f6ca5e132d7a359997b1d176cde421459b797ec01c6ea821197f5383089681fab7e7804d5988d9b3aedbb3727ae81f1168afce59955ca8970802b8891b1ce0d0613c4c4549494f65c7868ea955ebc6a410ebd01ecf096fe4c3e7cae58e34a5c3e53b72ae27b25a4a3eaa5f6fe6c63beca4df6c299cf0eaf3f959a1d9729bda53e6e014964bc5e8b5fcaee1883426c4eeb2240af3ce8801e63a0d4132eb8636db3f29e09d5c4051f70ebc0c1b5ca7d4f14b38061eee2099265b914604e17f633e4d0e9bcb5eeea696c4749bd7e9d2796744423c8587cc100990e24da307ad85f92f9d0ab93e8b630bb95597aba46c3ddd99558e2fef6b717dc3a74244560af73d62155d56b4a76f7585b5e1b9519a8f21627214c181efeed8c00087a34c0d5932144fcbdb54eca72ef918004f76098aa0d16a9e8f5abdf8c83498ed0e58e34e2c63433a75602e981fdda800544608a0ca2e1ac990a8b25f6ce32f5100915f758a52ec43b7400f4da748106bc21bf2ed2bdf58fa157cc8f3e3a2112bcb735e866ae994840155dd5d825eb02702f72c1e4e4e498455556b6791f235572fbfe351ff34bbc5c53f3450f9e99cf36c56de52625237d415eeaad3067c8734fb6b29f394a2b0308271603eafeaccb137e4d9dbd61a2877b7fc6912d571b47ea376b5574f4375de1b32a2eedd3a97000994527e5c20e21359f0cb5cc6a89eb2c5df5590cabea416604d4ee647bd18238d6e2b1459eb966fbfe672722bb983403f08501411a3d4f747bd551325c4510be44499249e44461b185e86fc733d2070d149bc665dcf455cd0fd97112ec2ace16350068ac31ad2f6dca03823a80b81b792e26afe96958c2df70ade4cf71db4a61fe4b3a51104d1ad6026e93166269c9473589deca41360a6539d567ca1be5684a6b49270ee19b8ee1a5dfe7465841739431ed8fd7f8a9b8fce9ea5d02f1780dfac1a868861eb05da94cfaf1914e0b48181a0fba1389dc4e6fcc849f511b0dcf61ac2a71598740fd9cc735b5438098ca523d2bf2dc1b72ebec37ce41e0e83533cb3c93ba40a744e69aca4348928ea7bc9ec8fcb2dbd85017f6f9941c36b82b5ba0e6cb347dc03c4c30480e67541d9041c050cd16962688761cdad8d08369f545b2a1182b75853df597e14ce5fa30812f41292ca93533c4e005aa4c192b6c8d5cb143d879affb25e754c3b6f15d4d604f0376d4743edd97828ab830faea95eec3a092d728c6109a94eaee6f9b60df7a457f32d3de6b960d0ac024ccd172a7e26eb0a7de33dbe0fb1ef0110961fb039ac65dc8902bfd332542d4e49f61d520d856c804bbea32b9a542b3781fe11b35f6980710c8f11da4e2ebc1ba31c5661244c769d748d27819197da63c4bb2c9822dca86a794811fe2df8112eaad0deb2e8318e9d4ff00d7b0b3c83142ee4761144db82fc971b3ad9c63914a9e1f52d72c5dee81fcbe22d7ff55a166e1a6c473ff2b7b026376048ea8c34463465bf955f0d8a3b00dee8a8838ae03e5e36c0627aeb1ef8d2df69d2fbce32fb8c2102ab993a091b88651027b33650a7f02600873a557a9aaa6ace5258a4c9bfc29b21b6d2ecfa915e6282a12f8348370f1ef63b672d9e2b435941832f3500f10b04f91f7b5e03889c8c51dc2aff7ce80a884940544aeff735c7e3400d036c82ec9822c5e15d1b0fb5e214c6daa62930cd866c9e28d4c5184eeb4a5538b8c74b3615cdf52f6806896424b1a115abfb8fe204d4827dfdb8c0cf3a61323ae237eb78b9405cebeea6825cfcea372bb61b136e2d1f3563ca2274ad764d6f98169a0a22b9ff138d9224889c821f7d26dea0cde358fa090e274660881b6d1aca44dc56deb7107ef81ce9d272cd4df9bcfa", 0x1000}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000a40)="d139fc0ed8f1969754830c5ebbbe697fe4695c654a7243e936a2c06c19790aec42d28b20cbb373f71295942c93facb549abb71ffaf5b2e5a9de4d41642efab621f3f1b99e4a8a1d4c4534bbbde4c26b50b94ab8a6e6cdfd07a50fdfdcd87b59b355cd29eb96613c1502369dd485d3a7f5ee1bf96ee1def74fc24c18c8113c307cb24daae79295fc2a035c067a69c368a639d33fe3e70701a1109de87d84f6ee9f5444ca5fea118fab45aa7a7980d67090b1ba00785fcd830a8dc7b2a8ed3dc6921f0fd8d54555584c4c06e040fb988bc2b3b55df1280e49576adb6ff9e56", 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4", 0x5}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x204, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4008050}, 0x20) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000780)="906cb3e3c7548134e92cb017143d0e1639f4f11b9bf649af3465669dd07ca03fec91085230d80cebfa961e3ce14be9255bb6599a282eac103ffd4e4ccc3e2c0997148d965538abb34ae666327af0e9121d0321006bf2077ae4886d281f2f82508163053cb4ac36a41c20e3268d2229756f765a214895937faf68f1de319dbe75bf284e017c4bb8f119259a5e9329a186d6f6c8738a6d9125df93919d89e02e258ef68df43965c7317024573da0db28f4718cd098cd76f1476fea1549ae8881ca8094d1fdf435231f555a0802dc2f180003da9ea2b2fc7a47b8e2d400e7d2", 0xde}, {&(0x7f0000000940)="7089e6957f6fe9317c446050de8a40c0e96a98801d93648200b24428abc2e755360b15fa6e033adf56f9500d311518efba21b60ccd2bc43d654e3acdb0128d925d26a79733d70279d4045a555fae31cd856fa178a8e379cf08c22d4e19832dda3a53d374bafcf643a32316cd644056844a75b4f9afd667958be8e2a3a788f2d91106f32e557ab901c4be60f99bbcd95641f3c98defb4e200a412fb60c80b33e148982152df29607922289d4606f4839362ce0d993854cbea716b329936bd9c948cf1058d53508d5cc40312e3eb3831602c5ef24c91666598bca1b4bc76e29d226aa606790c70c57bacb1c9ae", 0xec}, {&(0x7f0000000d80)="58d13ae566a3e75c949688f1196fd11e5bbecb341888c0ee87c921a22ae7c51d122d2ed5f0763a27f82e6848af20ab63084cb5ea46865400b51c091c3dd859c948592cca9e2a153b5cf0b84a8b46353cded4f2113bac1cd2aa5fa6a0ca91c94264aa8ac0e02a3e7601c6349afc7fa41b984fb4f4282d0489bb62868781857df708dca16326e96af2d7b6971a29a142d0c3382e3c097ae4c09346a2fc1fb2bec1e7ca2da1e97705af1e", 0xa9}], 0x7, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000) 2m20.259990053s ago: executing program 2 (id=3459): syz_emit_ethernet(0x1ee, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@mpls_uc={0x8847, {[{0x5}], @ipv6=@gre_packet={0x6, 0x6, "3507ee", 0x1b4, 0x2f, 0x0, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @private0}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x200}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x96, 0x0, [], "00048a03d777d3250a7a12d68253ef1b71db8b5e5e456497f39af8d9ca83837e6085330640aeb3f069ed06e7aaf2876598818316fd9d38b832c2eeb7bf5ae4e826f1a8fb0e30cb2c8086b40010d98f91edd1ec77f19cac4ccf6cbdea6b4858180ab10ace8a8d6a06ccd8b01382ce513d3ef5d62f75da70b0a9e72fd421d8835ceaa5c1172c36f01cdee10ca08a1eadb41321dbdd7408"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "c5063b66b85ce8109a6c98ca1a8d59e46d0b410638ac68c3a3a3043b6e0e0ce0585d710af0477de971baa6c6898f933cf96ec378be7c5cb53a163d7e5a7dbbdd439ab377"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x1], "c36829e9e507d038fd9061109a1d6ef38356182467670ccafb13969872d3fe7931f261d29d02e93dc7bc8defba2c6b575ecbc03dd5a8d5b8fac46f25b5320a33e45fae7de2159470688c3b99d77aa4572dcf6d4b900e0a50819aa7156ab8a163a934cb8ad14440d5"}, {0x8, 0x88be, 0x2, {{0xc, 0x1, 0xd, 0x3, 0x0, 0x3, 0x6, 0x4}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0xf, 0x2, 0x2d, 0x1, 0x0, 0x2, 0x0, 0x9}, 0x2, {0x10001, 0x72b, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "783a1744"}}}}}}}}, 0x0) 2m20.142851285s ago: executing program 0 (id=3461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000a00)=""/4096, 0x5865}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000001a80)=""/102, 0x66}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000020, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x11, r1, 0x2000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x1, 0x2, @vifc_lcl_addr=@local, @local}, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000), 0x2) 2m20.129154787s ago: executing program 2 (id=3462): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffe, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffd}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000000000)=""/147}], 0x4d}}], 0x2, 0x0, 0x0) 2m19.961515874s ago: executing program 0 (id=3463): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000001, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x14, r1, 0x327, 0x3}, 0x14}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)) 2m19.960847446s ago: executing program 2 (id=3464): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x10) 2m19.910211076s ago: executing program 2 (id=3465): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00000200ff"], 0x38}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x8, 0x289, 0xe3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 2m19.860484009s ago: executing program 1 (id=3466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r2, 0x20, 0x70bd2a, 0xc4, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55778b6c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b54f513}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31856b1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35fe6c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x752d81b1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54f15d29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40d15c06}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21655e2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17f04b09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177ca387}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53f4261b}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32, @ANYBLOB="7ef19f550000000014001680100001800c00040045c600ef0100000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004044) 2m19.663379171s ago: executing program 0 (id=3469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x40000003, 0x1083, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m19.49189285s ago: executing program 2 (id=3470): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f13721f605a7e598e1274cb83805b0cb30c248823ed991808e0466ca24"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x10, 0x80, 0xe, 0xfffffffc, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x68, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, {[@generic={0x82, 0xd, "d31a57ad2ebce0e1483909"}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x10, r7}) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 2m19.4392463s ago: executing program 1 (id=3473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xff05, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x4a00, 0x0, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xff05, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x4a00, 0x0, 0x20002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}]}}}]}, 0x44}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/136, 0x88}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5}}, {{&(0x7f0000000380)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/148, 0x94}, {&(0x7f0000000780)=""/209, 0xd1}, {&(0x7f0000000480)=""/61, 0x3d}], 0x3, &(0x7f0000000940)=""/46, 0x2e}, 0x10000}], 0x3, 0x40000043, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) close(0x4) (async) close(0x4) unshare(0x26020480) socket$packet(0x11, 0x3, 0x300) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2m19.099952564s ago: executing program 2 (id=3476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (rerun: 64) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) (async) write(r3, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x80}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28) 2m19.024758823s ago: executing program 1 (id=3478): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x3, [@const={0xd, 0x0, 0x0, 0xa, 0x5}, @struct={0xa, 0x7, 0x0, 0x4, 0x0, 0x7, [{0x3, 0x0, 0x6bb5}, {0x4, 0x2, 0xe7}, {0x10, 0x4, 0x6}, {0xa5, 0x0, 0x5}, {0x1, 0x5, 0x1ff}, {0x6, 0x5, 0x3}, {0xb, 0x4, 0x1}]}, @enum={0xf, 0x5, 0x0, 0x6, 0x4, [{0x3, 0x2}, {0xd, 0xffffffff}, {0x2, 0x9}, {0xd, 0x7}, {0x3, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x9}, {0x0, 0x1}, {0x5, 0x3}, {0xc, 0x4}, {0x0, 0x4}, {0x5}, {0xd, 0x4}, {0x6, 0x1}, {0x9, 0x1}]}, @const]}, {0x0, [0x30]}}, &(0x7f0000000600)=""/169, 0x11b, 0xa9, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000101040002000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000001c000f"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="dd47f89c4ce4911a0000000000000000000000020000000000000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0xfffffcba, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2m10.608401165s ago: executing program 1 (id=3479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003680)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e791b1c189", 0x20}, {0x0, 0x26}], 0x2}}], 0x1, 0xc0000) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000053d11f1d8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000004000000fdff9400000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040002006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000000000)=""/4096, &(0x7f0000001040)=0x63ad82c2469e5e14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) 2m1.857044079s ago: executing program 32 (id=3469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x40000003, 0x1083, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m58.498670361s ago: executing program 33 (id=3476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (rerun: 64) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) (async) write(r3, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x80}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x8}, 0x28) 1m52.625939772s ago: executing program 34 (id=3479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003680)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e791b1c189", 0x20}, {0x0, 0x26}], 0x2}}], 0x1, 0xc0000) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000053d11f1d8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000004000000fdff9400000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040002006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000000000)=""/4096, &(0x7f0000001040)=0x63ad82c2469e5e14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) 1m26.790306361s ago: executing program 4 (id=3492): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) sendto$inet6(r2, &(0x7f00000003c0)="e9d853ded19a13e237d709a7a6cd5b6c7bc1a5b2793ccbfc8d35b23b7c59907405199b59d65379c05372ad3fe632445c31308e44ae9e84fde61be4546f178c089a7871845c1ef9382389118d79109e1b2616a655080e37ab9b7e3251773de0c9f41be37b643f49330411f843063b204fa78981a3e0e14df02a7a251ae81b6532947f99bbc2c5f45757d4a1344e09f9b7d33900d205b342a0857c1c5864ecfb765b13ef4d96f909d6934e11722fa5f20bca607e248577a74e8b", 0xb9, 0x60010, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 1m19.175127538s ago: executing program 4 (id=3493): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@in={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80, 0x80800) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x3, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)="8600a3", 0x3}], 0x1}}], 0x3, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000280)={r4, 0x1}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) clock_gettime(0x5, &(0x7f0000000300)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x70bd28, 0x0, {0xa, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000500000002af2b362e0000a891a25a00ffffffff000000000000000200000000020000000000000802000000020000000000000e03000000000000000000612e00"], 0x0, 0x55}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x4) 1m18.86222679s ago: executing program 3 (id=3494): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000008864"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x4e20, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x5}, "301ce6020000"}}}}}}}, 0x0) sendmmsg$sock(r0, &(0x7f0000002080)=[{{&(0x7f0000000280)=@generic={0x2b, "584d55d3e7972a9bcf094a140d984cdf12c0d5df3af4e9af56eb6df3a2bc3b187e2e973d53513339ae2f42414d3759f43a130f5c0c865b7174cb0ce00144341b0099b5b295f7ee33d2c8d427fe6ade0fee236fd414e755aed79ffc630ab99523666709c80d1324097663b356b56a5805fca9043b138e557848c7a5858115"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="d56fda83e699aba927eb46ed5c91e99b1b7e69ca25f91df8bea20ed139bf36ddc00524638f39d69b760945e373dc6863a7064b684c0aea4f9a24362dd62c11c968305eca162ecd2fdd76283a15fc7da7f33885d36ef67a4017ea2e6f169458d67945fd5655ad2e1aa961629a0d30040931aa259e8067d3458f4de451cb26ce8316de053dec4bfbffde25cc35e68d622b0d9d8bab37d52eaf60991cd01e02a23184dd39631a", 0xa5}, {&(0x7f00000003c0)="c4aace6c92a5659a20dad598aa29cd71b3e1e2531605ac3d971d7fb64e1df0fe446bd980bc30ce778f80f20920c18dfbaceddb711caf1e", 0x37}, {&(0x7f0000000500)="bed16cd550cd236e31cc10c1f7dc3b4d62455b3337d7e5544c0150a86e8bf42da9acb18f0fc99c2bdb4157ed7957dc03a9510dd54552de88016201bc500ecd68d487dcac7572fb8fc00fe33bc545c6c82aebdc294ca386d947939899333d3f20cab1b45fe791cf62a80b87e3b54a808ad6c8de18fb365d73a008cfd8d62bdb77d1ea4622f0bb7d3b280dbad4528f97ee29b7172ca5e9bfc3e775c177c1bfff1fd9fad6d0006fffa6ee897d30345b41cbb6c12dba625a271857ed3e2ce1a1a1ab", 0xc0}, {&(0x7f0000000600)="7274366231d6614d14896274d2161200ef9634113c253a5933a8f747b8e7ac782f2462a5e07a9cf85a8cd4cbcdcb558ad90986a15f27aa8dd8290ca209453abb84dd84fd4277a96e275843446fdfa94a4a3f58352f05819bf38b7679251cad413b63b7cb977a891b207c9cf0cae05ff642f0a22cecd4f2dc23d6aa6c5048671051242b2422b5bd825f7ca8d87cb524e4754a458e53d9ed34613fdda358f0314ce563c5f612888bba5a0dbc6289c100000000000000", 0xb5}, {&(0x7f0000000780)="60fd99b974f1aa4541f6e4631baf5e8c0d61cdf1b11395bc52b9f1eec81bf304a75b522ada69c54b872504c0209a9335d3c5b58ff99d8b9f96cdeffbea3fd04f536de9bcd4d4d9277eac2d3cb28b2091a0edf6a5ea02a772286bc02f09409674d6326b5d3ddaa26d5667134b74b4af8a3146c3c6dea2d9ebd886b27a52b3f199003b173b35933eead2e26207d96c3c251659bd260f09db7cdbc47e7e9007ee3d4b3cef", 0xa3}], 0x5, &(0x7f0000001fc0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4caed6fc}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9b}}, @mark={{0x14, 0x1, 0x24, 0x5f57bda9}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}}, {{&(0x7f0000000900)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000ac0)="ae8135a66d2780dcb51f49689817c2f7a5f281f5fecd929cf97b27d20945a098ee26bab26f69648f63ab1a92a7dc9fab230662b9eac7415a7fcc1ea259d6163f1f9cf09d923777", 0x47}, {&(0x7f0000000b40)="2ee23e914ef53b9840f485671a8a90fd3c85ec52f0fc3b405ba86bda7a27626774e5eb3147b271572345c0e8af4bab11c5cf1ef830c7489f5bc1493582f1d02a3f986618c8047dea98aa2d1c3df97b672d3813bb745a9e13af76f7221f6e90ac054114d579cb49863f68f8dcd73f7c219554d73d3c9d1287636d468883dbf18edbb415b3a2441378a47098a72231f6b19d5be823a10ad5a4681fd3e387ea827eaf2b0ddd47acb12e", 0xa8}], 0x2, &(0x7f0000000c00)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6f}}], 0x78}}, {{&(0x7f0000000c80)=@sco={0x1f, @none}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000980)="03e570b7f3", 0x5}, {&(0x7f0000001d00)="825eccbed7cfac539fee0d84b78d0e1fa073c429f0bd628e599236bf1401691f197767337890f16b26dbc0fad05b2762080f622e67c103b519a89d1b2c5465271268eb8a5cff162b09825f9708e8cfd39ed51a60c751faa6a5c4d223a3588ff9065432f835b2b58fbadfbb4e04468cd4484924dd7af8e9293ebcc3a1a81c021cedced4e94754d4479e1241bf1749b59ca43de2dde8629a1c152090c28444766f794d8a3d4145a520fa58ccf8db4eb4ee", 0xb0}, {&(0x7f0000001dc0)="73633bf3ce42592addba7432a21b519f35b63eb2122bf6d0764e080dc68885582d3f0b0546e7ea1465ef4442a54b7bf225302451d4f27728b9e10f2bbf163d9f8563e73e55d6954698cb784da1b884ff0635", 0x52}, {&(0x7f0000001e40)="6cda1122bbf140a0b4ca7df2ae258c1dfd91d70397c0cf1e8ad5eab2582d2d4cd615139145fab513b34601735af8f79abd3004a225424597cfb9821223b2bc1b50eabbbafa34bd2032967ba7f1c1fbd001dc117c2b2bc8119db0e5233532083a72c36542eb3653c5e842b9a82bf2d138015947d2c140cc01fe631b4664ce02e78a25b8b992e80092b2bb628c", 0x8c}], 0x5, &(0x7f0000001f80)=[@txtime={{0x18, 0x1, 0x3d, 0x37}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}}], 0x3, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r6, 0x5460, 0x20000000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r8) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r13, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '%%'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x10008044) 1m10.674692518s ago: executing program 4 (id=3495): syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x87) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendfile(r4, r2, 0x0, 0xf03a0005) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f00000000c0), 0x9) sendfile(r11, r10, 0x0, 0x10000) 1m6.501339967s ago: executing program 3 (id=3496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c0002800800014000000011080002400000000a0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) unshare(0x400) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x840}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) accept$ax25(r4, &(0x7f00000001c0)={{0x3, @default}, [@null, @null, @remote, @null, @bcast, @remote, @rose, @default]}, &(0x7f0000000040)=0x48) shutdown(r3, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r6, &(0x7f0000005880)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}}], 0x1, 0x800) recvmmsg(r3, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 59.403478092s ago: executing program 4 (id=3497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "b29a"}, {0x0, 0x6, "ff8f5896"}]}, @generic={0x44, 0x11, "77bf39dad417f1bc03a7c2d4017b8a"}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) unshare(0x6a040000) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x24, r5, 0x1, 0x70bd27, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020008207b8af8ff00000000bfa2000000000000070200632e1895ffb703000008000000b70400000200000085000000a600000095000000000000002c4f2f9f9dc80605a97d1dca2e1ecad5b90193db7bb561f018f61efa575d583d23f3e37a5dfd19e871b376fc8fb92d91bf49537f683361dab9faef232652d66d6e20fea00a5d765208820e6b87f2d9c0cfd36c11f8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xec, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x26}}}}, [@NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x2, 0x9, 0xb, 0x4, 0xb, 0x48, 0x2, 0xc, 0x60, 0x9, 0x30, 0x24, 0x36, 0x3, 0x4, 0x6, 0x0, 0x6, 0x6, 0x3562159f089b3f3e]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x2}, {0x6, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x6, 0x1}, {0x1}, {0x2, 0x6}, {0x3, 0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x2}, {0x7, 0x9}, {0x0, 0xa}, {0x6, 0x3}, {0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x1, 0x9}, {}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x9}, {0x3}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x4, 0x2}, {0x2, 0x4}, {}, {0x4, 0x9}, {0x6, 0x9}, {0x5, 0x3}, {0x6}, {0x4, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x5}, {0x4, 0x2}, {0x1}, {0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0xb, 0x48, 0xb, 0xd, 0x60, 0x5, 0x48, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x77, 0x18, 0x9, 0x1, 0x0, 0x2, 0x60, 0x30, 0x48, 0x5, 0x6, 0x18, 0x2, 0x0, 0x40, 0x4, 0x36, 0x6, 0x36, 0x48, 0x18, 0x18]}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048014}, 0x10) 55.730171804s ago: executing program 3 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="40180000000000002400128009000100627269646765000014000280d3001600030000000800040000000000"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000000524c4140bacc49b9bc75ea1512135d18124679684e3c10835729bfb79e1c389be2f626e9f0213f3c13c2f01dfb22c5c8e3b2e3d64aa87add32ef129d59d2f24e53926a428aa80f88778993126d3e90a7c5ac73831fe2fb6918e99b04b80d998ed7f0a4f36b70f15cbbb38197d03a7e5f00bf0032381df52a959fb4d371"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 47.870857967s ago: executing program 4 (id=3499): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xbb340d5b8f2ba18e, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x1b, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3, {0x6}}}, 0x24}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f0000002900)) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r8, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) 43.009710697s ago: executing program 3 (id=3500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 37.014540363s ago: executing program 4 (id=3501): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1700000010"], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x8, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}}, 0x1) 29.480066017s ago: executing program 3 (id=3502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x18, 0x29, &(0x7f0000000340)="bf7d7d31e508371f7ad643f6d4f95d01c647948a76a81998aa12729fde6ef1c8f9d0f4a5242224cc06aab32987f61a5869d53eab2ff8f9fd4f3cf8d2ad6d4face73225e4389598db10e609ece8f89633353852d72978600c56f333cd2e2412ce0800000000004be07e586562f26f11076b0d592d338ba8e78a578e6739c6c243d2cd81b39c055d095682f4686d7ba135dfe3abbf7fdfc21a69e5c5d370ef950385bde49567c48b988f220ded6e300ee71a2d6b1373da5a0d90fd3bf67b4ffb09b7e36196e815a2cd098ee524cb6569b7b44ed080910d999f04985d2883667fb42f22b5114683", 0x0, 0x100c, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x50) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r2, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) syz_emit_ethernet(0x18d, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @tcp={0x6, 0x6, "15227b", 0x157, 0x6, 0x1, @private2, @loopback, {[@srh={0x33, 0x4, 0x4, 0x2, 0x1, 0x8, 0x2, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x29, 0x8, 0x4, 0x4, 0x9, 0x78, 0x8000, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback]}, @routing={0x88, 0x6, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x1, 0x2, 0x4, 0x1, 0x7, 0x28, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], {{0x4e21, 0x4e22, r1, r2, 0x0, 0x0, 0x7, 0x40, 0x9, 0x0, 0x5, {[@fastopen={0x22, 0x6, "76616e90"}]}}, {"d6365ee0f2e2f1b273073e9977eb774eb0aa75d9b89a916eef110e0d0f16fd084ba90de956bee222beb86578c8d892d4a77d5902e20011819d5542f7dcebc7da22d795b87ce12eed2fb8c59d3e6fb48d4ff25d5a1b6f56d1bb2956209650830122f777fab13e6ec7b40fbf12d4cb552d4096016a10054b922f2fca"}}}}}}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0xd, @empty, 0x6}, {0xa, 0x4e20, 0x7fff, @mcast1, 0x5}, 0x0, {[0x5, 0x8, 0x80000001, 0x8, 0x10000, 0x200, 0x2, 0x2]}}, 0x5c) 19.988293793s ago: executing program 35 (id=3501): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1700000010"], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x8, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}}, 0x1) 17.661094222s ago: executing program 3 (id=3504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x141000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) unshare(0x6a040000) unshare(0x44000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc080}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) getsockopt(r4, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xea}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="6ff64368c735ea9e4d7f9e821678b1c310b4b81353eea54164f04239b63b472dfac10abca36c69769161a4bbae83ee9501ddb24fbebea52d0c99110d8749aed5c9098f33bee0f09e8e96afd4dc23e220aaff5385d25e9750af607db1470ef965fa442ffe09fde87110a1a610cc0c06a29a4c29", @ANYRES16=0x0, @ANYRESOCT, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x1000, &(0x7f00000017c0)=""/4096, 0x41000, 0x12, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x5, 0x10, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f00000002c0)=[{0x3, 0x4, 0x2}, {0x3, 0x3, 0x10, 0x7}, {0x1, 0x4, 0xa, 0x1}, {0x0, 0x3, 0xa, 0x5}, {0x1, 0x5, 0xb, 0x3}, {0x5, 0x1, 0x7, 0x5}], 0x10, 0xad9}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) 0s ago: executing program 36 (id=3504): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x141000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) unshare(0x6a040000) unshare(0x44000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc080}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) getsockopt(r4, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xea}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="6ff64368c735ea9e4d7f9e821678b1c310b4b81353eea54164f04239b63b472dfac10abca36c69769161a4bbae83ee9501ddb24fbebea52d0c99110d8749aed5c9098f33bee0f09e8e96afd4dc23e220aaff5385d25e9750af607db1470ef965fa442ffe09fde87110a1a610cc0c06a29a4c29", @ANYRES16=0x0, @ANYRESOCT, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x1000, &(0x7f00000017c0)=""/4096, 0x41000, 0x12, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x5, 0x10, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f00000002c0)=[{0x3, 0x4, 0x2}, {0x3, 0x3, 0x10, 0x7}, {0x1, 0x4, 0xa, 0x1}, {0x0, 0x3, 0xa, 0x5}, {0x1, 0x5, 0xb, 0x3}, {0x5, 0x1, 0x7, 0x5}], 0x10, 0xad9}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) kernel console output (not intermixed with test programs): 33] : Port: 1 Link DOWN [ 451.306614][T15301] syzkaller1: entered promiscuous mode [ 451.324609][T15301] syzkaller1: entered allmulticast mode [ 451.359004][T15309] bond0: entered promiscuous mode [ 451.372544][T15309] bond_slave_0: entered promiscuous mode [ 451.378678][T15309] bond_slave_1: entered promiscuous mode [ 451.385046][T15309] team0: entered promiscuous mode [ 451.390325][T15309] team_slave_0: entered promiscuous mode [ 451.397539][T15309] team_slave_1: entered promiscuous mode [ 451.406669][T15309] geneve0: entered promiscuous mode [ 451.419387][T15309] bond0: left promiscuous mode [ 451.426715][T15309] bond_slave_0: left promiscuous mode [ 451.437127][T15309] bond_slave_1: left promiscuous mode [ 451.447235][T15309] team0: left promiscuous mode [ 451.455638][T15309] team_slave_0: left promiscuous mode [ 451.474458][T15309] team_slave_1: left promiscuous mode [ 451.487274][T15309] geneve0: left promiscuous mode [ 451.508175][T15308] bond0: entered promiscuous mode [ 451.514188][T15308] bond_slave_0: entered promiscuous mode [ 451.520071][T15308] bond_slave_1: entered promiscuous mode [ 451.528686][T15308] team0: entered promiscuous mode [ 451.534311][T15308] team_slave_0: entered promiscuous mode [ 451.540445][T15308] team_slave_1: entered promiscuous mode [ 451.548724][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2402'. [ 451.548812][T15308] geneve0: entered promiscuous mode [ 451.560031][T15329] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 451.565805][T15308] bond0: left promiscuous mode [ 451.577141][T15308] bond_slave_0: left promiscuous mode [ 451.583833][T15308] bond_slave_1: left promiscuous mode [ 451.589612][T15308] team0: left promiscuous mode [ 451.594890][T15308] team_slave_0: left promiscuous mode [ 451.600691][T15308] team_slave_1: left promiscuous mode [ 451.606468][T15308] geneve0: left promiscuous mode [ 451.631826][ T5912] wg1 speed is unknown, defaulting to 1000 [ 451.638569][ T5912] syz0: Port: 1 Link DOWN [ 451.726240][T15333] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 451.743278][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.764632][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.857052][T15330] bond8: (slave bridge2): making interface the new active one [ 451.868902][T15330] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 451.879628][T15299] wg1 speed is unknown, defaulting to 1000 [ 451.885980][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.984930][ T9601] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.550404][T15381] syzkaller1: entered promiscuous mode [ 452.577380][T15381] syzkaller1: entered allmulticast mode [ 452.772009][T15384] bond13: (slave erspan0): Releasing active interface [ 452.792522][T15384] bridge_slave_0: left allmulticast mode [ 452.799505][T15384] bridge_slave_0: left promiscuous mode [ 452.806894][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.821053][T15384] bridge_slave_1: left allmulticast mode [ 452.827756][T15384] bridge_slave_1: left promiscuous mode [ 452.833905][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.849438][T15384] veth0_to_bond: left allmulticast mode [ 452.866383][T15384] veth0_to_bond: left promiscuous mode [ 452.873854][T15384] bridge2: port 2(veth0_to_bond) entered disabled state [ 452.884818][T15384] bond0: (slave bond_slave_0): Releasing backup interface [ 452.897798][T15384] bond0: (slave bond_slave_1): Releasing backup interface [ 452.920757][T15384] team0: Port device team_slave_0 removed [ 452.937776][T15384] team0: Port device team_slave_1 removed [ 452.958068][T15384] bond0: (slave wlan1): Releasing backup interface [ 452.968439][T15384] veth7: left allmulticast mode [ 452.976018][T15384] veth7: left promiscuous mode [ 452.981011][T15384] bridge2: port 1(veth7) entered disabled state [ 452.993336][T15384] vlan2: left promiscuous mode [ 452.998400][T15384] veth1: left promiscuous mode [ 453.004131][T15384] bridge2: port 3(vlan2) entered disabled state [ 453.017659][T15384] bond12: (slave gretap2): Releasing active interface [ 453.030891][T15384] bond13: (slave veth9): Releasing active interface [ 453.049493][T15384] bond14: (slave vcan1): Releasing backup interface [ 453.057092][T15384] bond14: (slave vcan2): making interface the new active one [ 453.069460][T15384] bond14: (slave vcan2): Releasing backup interface [ 453.081358][T15384] bond15: (slave geneve2): Releasing active interface [ 453.099515][T15384] bond16: (slave veth13): Releasing active interface [ 453.121693][T15384] bond17: (slave ip6gretap1): Removing an active aggregator [ 453.133470][T15384] bond17: (slave ip6gretap1): Releasing backup interface [ 453.140623][T15384] bond17: (slave ip6gretap1): the permanent HWaddr of slave - c2:cd:b1:b9:05:6c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 453.179796][T15384] bond17: (slave veth15): Releasing backup interface [ 453.218649][ T6362] tipc: Resetting bearer [ 453.392945][T15404] netlink: 336 bytes leftover after parsing attributes in process `syz.4.2418'. [ 453.474911][T15410] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 453.483030][T15410] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2421'. [ 453.521246][T15409] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2420'. [ 453.538351][T15409] 0ªX¹¦À: renamed from caif0 [ 453.550410][T15409] 0ªX¹¦À: entered allmulticast mode [ 453.562852][T15409] net_ratelimit: 12 callbacks suppressed [ 453.562873][T15409] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 453.692712][T15403] wg1 speed is unknown, defaulting to 1000 [ 453.856168][T15419] netlink: 'syz.0.2422': attribute type 4 has an invalid length. [ 454.089349][T15412] wg1 speed is unknown, defaulting to 1000 [ 454.220805][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 454.257017][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 454.338078][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2425'. [ 454.439653][T15445] skbuff: bad partial csum: csum=65506/2 headroom=162 headlen=65526 [ 454.453149][T15445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2429'. [ 454.534357][T15449] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.2430'. [ 454.607388][T15453] netlink: 'syz.2.2431': attribute type 28 has an invalid length. [ 455.342768][T15428] wg1 speed is unknown, defaulting to 1000 [ 455.546185][T15476] delete_channel: no stack [ 455.586961][T15439] netlink: 'syz.3.2425': attribute type 17 has an invalid length. [ 455.713349][T15439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.272440][T15482] vxcan3: entered allmulticast mode [ 456.690063][T15437] wg1 speed is unknown, defaulting to 1000 [ 457.035251][T15492] __nla_validate_parse: 2 callbacks suppressed [ 457.035273][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2437'. [ 457.221801][T15463] wg1 speed is unknown, defaulting to 1000 [ 457.979860][T15495] tipc: Resetting bearer [ 459.056107][T15495] ip6gretap0: left allmulticast mode [ 459.100095][T15495] tipc: Resetting bearer [ 459.152007][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.169114][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.199689][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.221176][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.292458][ T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.312305][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.337081][ T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.357298][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.815949][T15527] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2445'. [ 459.829898][T15528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2445'. [ 460.091300][T15521] wg1 speed is unknown, defaulting to 1000 [ 460.188468][T15534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2448'. [ 460.330845][T15542] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2448'. [ 460.389446][T15542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.722131][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 461.113555][T15560] syzkaller1: entered promiscuous mode [ 461.142695][T15560] syzkaller1: entered allmulticast mode [ 461.493200][T15588] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 461.495979][T15588] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'. [ 461.531340][T15588] unsupported nlmsg_type 40 [ 461.716433][T15597] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 461.725011][T15597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2467'. [ 461.743450][T15599] sctp: [Deprecated]: syz.1.2468 (pid 15599) Use of int in max_burst socket option. [ 461.743450][T15599] Use struct sctp_assoc_value instead [ 461.832910][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 462.046345][T15624] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2472'. [ 462.525563][T15575] wg1 speed is unknown, defaulting to 1000 [ 463.075852][T15654] tipc: Enabled bearer , priority 26 [ 463.524061][T15623] wg1 speed is unknown, defaulting to 1000 [ 463.576558][T15659] wg1 speed is unknown, defaulting to 1000 [ 463.734276][T15676] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 463.826918][T15676] 8021q: adding VLAN 0 to HW filter on device bond12 [ 463.860293][T15677] bond12: (slave geneve5): making interface the new active one [ 463.869401][T15677] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 463.891220][T15684] bond0: Error: Cannot enslave bond to itself. [ 463.893991][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2485'. [ 463.987167][ T6362] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.003947][ T6362] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.028704][ T6362] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.051357][ T6362] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.146848][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 464.467418][T15694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2489'. [ 464.830268][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'. [ 464.884542][T15690] wg1 speed is unknown, defaulting to 1000 [ 465.028416][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2494'. [ 465.175624][T15716] bond14: entered promiscuous mode [ 465.191641][T15716] 8021q: adding VLAN 0 to HW filter on device bond14 [ 465.206087][T15726] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2497'. [ 465.377013][T15721] bond15 (unregistering): Released all slaves [ 465.401767][T15735] tipc: Enabling of bearer rejected, already enabled [ 465.410609][T15712] wg1 speed is unknown, defaulting to 1000 [ 465.535953][T15739] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2500'. [ 465.750656][T15742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2501'. [ 465.767298][T15745] tipc: Enabling of bearer rejected, already enabled [ 465.804103][T15742] vlan0: entered promiscuous mode [ 465.809301][T15742] bond0: entered promiscuous mode [ 465.842467][T15747] tipc: Enabling of bearer rejected, already enabled [ 465.853600][T15746] syzkaller0: entered promiscuous mode [ 465.860100][T15746] syzkaller0: entered allmulticast mode [ 465.984759][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 466.498343][T15790] netlink: 'syz.2.2513': attribute type 7 has an invalid length. [ 466.605165][T15795] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 466.627551][T15795] netlink: 'syz.0.2514': attribute type 10 has an invalid length. [ 466.646307][T15795] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 466.936968][T15772] wg1 speed is unknown, defaulting to 1000 [ 466.986921][T15808] tipc: Enabling of bearer rejected, already enabled [ 467.080747][T15814] netlink: 'syz.4.2521': attribute type 5 has an invalid length. [ 467.405475][T15830] netlink: 'syz.2.2526': attribute type 1 has an invalid length. [ 467.452184][T15830] __nla_validate_parse: 4 callbacks suppressed [ 467.452203][T15830] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2526'. [ 467.648140][T15837] vlan0: entered allmulticast mode [ 467.664184][T15837] bridge_slave_0: entered allmulticast mode [ 468.063351][T15850] pim6reg: entered allmulticast mode [ 468.098724][T15850] pim6reg: left allmulticast mode [ 468.784280][T15876] netlink: 'syz.1.2539': attribute type 83 has an invalid length. [ 469.114144][T15894] macvtap1: entered allmulticast mode [ 469.130688][T15894] veth1_vlan: entered allmulticast mode [ 469.159107][T15894] veth1_vlan: left allmulticast mode [ 469.469381][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2548'. [ 469.543583][T15886] wg1 speed is unknown, defaulting to 1000 [ 470.187986][T15888] wg1 speed is unknown, defaulting to 1000 [ 470.387763][T15929] sit2: entered promiscuous mode [ 470.446899][T15932] macvtap1: entered allmulticast mode [ 470.453978][T15932] veth1_vlan: entered allmulticast mode [ 470.477351][T15932] veth1_vlan: left allmulticast mode [ 470.697864][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2560'. [ 470.741584][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2560'. [ 470.913655][T15952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2562'. [ 470.928475][T15952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2562'. [ 471.106233][T15934] wg1 speed is unknown, defaulting to 1000 [ 471.419959][T15971] netlink: 'syz.3.2566': attribute type 2 has an invalid length. [ 471.785324][T15944] wg1 speed is unknown, defaulting to 1000 [ 472.391422][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 472.499281][T15988] wg1 speed is unknown, defaulting to 1000 [ 472.676920][T16006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2573'. [ 472.771671][T16006] nbd: socks must be embedded in a SOCK_ITEM attr [ 473.337412][T16032] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 473.356896][T16034] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 473.368873][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 473.380344][T16034] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 473.388650][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 473.455144][T16039] gretap4: entered allmulticast mode [ 473.479258][T16039] bond18: (slave gretap4): making interface the new active one [ 473.503275][T16039] bond18: (slave gretap4): Enslaving as an active interface with an up link [ 473.524313][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2583'. [ 473.551023][T16045] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 473.667419][T16054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2588'. [ 473.821190][T16066] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2583'. [ 473.877552][T16064] vlan0: entered allmulticast mode [ 473.884372][T16064] bridge_slave_0: entered allmulticast mode [ 473.947097][T16068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.979578][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'. [ 474.001667][T16070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2592'. [ 474.028631][T16070] tipc: Enabling of bearer rejected, already enabled [ 474.198175][T16074] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2594'. [ 474.315615][T16088] netlink: 'syz.4.2599': attribute type 5 has an invalid length. [ 474.332008][T16086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2597'. [ 474.373772][T16088] vlan3: entered allmulticast mode [ 474.378940][T16088] bridge_slave_0: entered allmulticast mode [ 474.474217][ T6366] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 474.491400][ T6366] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 474.504084][ T6366] bond0: now running without any active interface! [ 474.624394][T16103] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 475.005470][T16127] tipc: Enabling of bearer rejected, already enabled [ 475.053662][T16127] tipc: Resetting bearer [ 475.099772][T16130] vlan0: entered promiscuous mode [ 475.105746][T16130] macvtap0: entered promiscuous mode [ 475.479424][T16158] bridge7: entered allmulticast mode [ 475.496104][T16158] bond0: (slave rose0): Enslaving as an active interface with an up link [ 475.539140][T16163] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 475.624253][T16173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 475.643097][T16173] tipc: Enabling of bearer rejected, already enabled [ 476.030905][T16193] bond10: option mode: unable to set because the bond device is up [ 476.129175][T16195] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 477.043235][T16205] wg1 speed is unknown, defaulting to 1000 [ 477.357901][T16204] wg1 speed is unknown, defaulting to 1000 [ 477.536520][T16241] netlink: 'syz.4.2639': attribute type 13 has an invalid length. [ 477.547741][T16241] netlink: 'syz.4.2639': attribute type 17 has an invalid length. [ 477.557085][T16241] netlink: 'syz.4.2639': attribute type 27 has an invalid length. [ 477.658211][T16207] wg1 speed is unknown, defaulting to 1000 [ 477.665450][T16193] infiniband syz1: set active [ 477.671089][T16193] infiniband syz1: added syz_tun [ 477.687206][T16193] syz1: rxe_create_cq: returned err = -12 [ 477.702535][T16193] infiniband syz1: Couldn't create ib_mad CQ [ 477.708883][T16193] infiniband syz1: Couldn't open port 1 [ 477.798305][T16193] RDS/IB: syz1: added [ 478.841584][T16256] gre1: entered promiscuous mode [ 478.847259][T16256] gre1: entered allmulticast mode [ 479.915523][T16225] wg1 speed is unknown, defaulting to 1000 [ 480.152155][T16269] __nla_validate_parse: 6 callbacks suppressed [ 480.152175][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2646'. [ 481.027543][T16275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2648'. [ 481.146002][T16278] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2649'. [ 481.376027][T16263] wg1 speed is unknown, defaulting to 1000 [ 481.754547][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 481.847225][T16283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.867738][T16283] batman_adv: batadv0: Removing interface: virt_wifi0 [ 482.116191][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2655'. [ 482.256942][T16301] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 482.266854][T16301] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2656'. [ 482.279030][T16301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2656'. [ 482.292993][T16303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2657'. [ 482.303171][T16285] wg1 speed is unknown, defaulting to 1000 [ 482.394015][T16306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2658'. [ 483.256846][T16318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2661'. [ 484.524403][T16312] wg1 speed is unknown, defaulting to 1000 [ 484.847712][T16381] bridge4: entered allmulticast mode [ 485.077684][T16355] wg1 speed is unknown, defaulting to 1000 [ 485.165738][T16390] __nla_validate_parse: 4 callbacks suppressed [ 485.165756][T16390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2680'. [ 485.274557][T16391] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 485.681367][T16384] wg1 speed is unknown, defaulting to 1000 [ 485.883380][T16378] wg1 speed is unknown, defaulting to 1000 [ 486.275781][T16412] IPv6: addrconf: prefix option has invalid lifetime [ 486.898611][T16434] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 486.921714][T16434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2687'. [ 487.220969][T16434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 488.194114][T16461] vlan0: entered promiscuous mode [ 488.202769][T16461] veth0: entered promiscuous mode [ 488.267110][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'. [ 488.279694][T16429] wg1 speed is unknown, defaulting to 1000 [ 488.290080][T16466] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2695'. [ 488.300534][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'. [ 488.478833][T16470] netlink: 'syz.0.2697': attribute type 1 has an invalid length. [ 488.492227][T16470] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2697'. [ 488.501534][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 488.534448][T16477] tipc: Enabling of bearer rejected, already enabled [ 489.568534][T16494] netlink: 'syz.0.2704': attribute type 6 has an invalid length. [ 489.703281][T16503] wg1 speed is unknown, defaulting to 1000 [ 489.981402][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2708'. [ 490.015058][T16518] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2708'. [ 490.261870][T16514] wg1 speed is unknown, defaulting to 1000 [ 491.353869][T16527] wg1 speed is unknown, defaulting to 1000 [ 491.364472][T16521] wg1 speed is unknown, defaulting to 1000 [ 491.384112][T16525] wg1 speed is unknown, defaulting to 1000 [ 491.619776][T16543] bond4: option mode: unable to set because the bond device has slaves [ 492.014210][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2716'. [ 492.159508][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'. [ 492.174514][T16557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'. [ 493.470310][T16573] netlink: 'syz.0.2721': attribute type 13 has an invalid length. [ 493.613970][T16573] veth0: left allmulticast mode [ 493.621836][T16573] veth0: left promiscuous mode [ 493.710987][T16579] vxcan1: entered allmulticast mode [ 493.744858][ T9599] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.782276][ T9599] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.790691][ T9599] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.825525][ T9599] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.509604][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 494.543308][T16606] syzkaller1: entered promiscuous mode [ 494.548913][T16606] syzkaller1: entered allmulticast mode [ 494.865962][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2734'. [ 494.997839][T16606] wg1 speed is unknown, defaulting to 1000 [ 495.033757][T16629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2734'. [ 495.123505][T16632] netlink: 'syz.3.2735': attribute type 11 has an invalid length. [ 495.538569][T16646] netlink: 'syz.1.2738': attribute type 21 has an invalid length. [ 495.562691][T16646] netlink: 'syz.1.2738': attribute type 22 has an invalid length. [ 495.570548][T16646] netlink: 'syz.1.2738': attribute type 23 has an invalid length. [ 495.612812][T16646] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2738'. [ 495.648473][T16628] wg1 speed is unknown, defaulting to 1000 [ 496.029301][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 496.554264][T16673] wg1 speed is unknown, defaulting to 1000 [ 496.568920][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 496.597646][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 496.939946][T16694] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 497.062812][T16694] bond16: entered promiscuous mode [ 497.078771][T16694] 8021q: adding VLAN 0 to HW filter on device bond16 [ 498.112638][T16740] vxcan3: entered allmulticast mode [ 498.128288][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 498.425845][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'. [ 498.885654][T16771] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 499.252799][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 499.284464][T16798] tipc: Resetting bearer [ 499.300514][T16798] tipc: Resetting bearer [ 499.336693][T16800] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 499.384453][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 499.409182][T16769] wg1 speed is unknown, defaulting to 1000 [ 499.423369][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2777'. [ 499.447508][T16813] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 500.449980][T16767] wg1 speed is unknown, defaulting to 1000 [ 501.259265][T16838] wg1 speed is unknown, defaulting to 1000 [ 501.268672][T16780] wg1 speed is unknown, defaulting to 1000 [ 501.305046][T16829] wg1 speed is unknown, defaulting to 1000 [ 501.314720][T16824] wg1 speed is unknown, defaulting to 1000 [ 502.545546][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 502.572419][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 503.207149][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2788'. [ 503.257792][T16863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2788'. [ 503.396774][T16868] netlink: 'syz.0.2789': attribute type 142 has an invalid length. [ 503.429107][T16850] wg1 speed is unknown, defaulting to 1000 [ 503.465837][T16873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2790'. [ 503.577035][T16878] netlink: 'syz.0.2791': attribute type 39 has an invalid length. [ 503.586858][ T30] audit: type=1800 audit(1759493146.609:6): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2791" name="memory.events" dev="tmpfs" ino=2835 res=0 errno=0 [ 503.883158][T16883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2792'. [ 503.924173][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 504.290852][T16886] netlink: 'syz.2.2793': attribute type 13 has an invalid length. [ 504.322821][T16886] netlink: 'syz.2.2793': attribute type 17 has an invalid length. [ 504.343128][T16886] gretap0: refused to change device tx_queue_len [ 504.358058][T16886] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.746087][T16894] tipc: Enabled bearer , priority 0 [ 504.780476][T16896] syzkaller0: entered promiscuous mode [ 504.786318][T16896] syzkaller0: entered allmulticast mode [ 505.064464][T16890] tipc: Resetting bearer [ 505.110008][T16889] tipc: Resetting bearer [ 505.314192][T16889] tipc: Disabling bearer [ 506.028517][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2802'. [ 506.090353][T16933] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2804'. [ 506.145263][T16937] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2805'. [ 506.215917][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 506.301159][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2808'. [ 506.310474][T16945] netem: change failed [ 506.944664][T16980] tun0: tun_chr_ioctl cmd 1074812117 [ 507.090721][T16983] netlink: 'syz.0.2815': attribute type 13 has an invalid length. [ 507.099277][T16983] netlink: 'syz.0.2815': attribute type 17 has an invalid length. [ 507.100168][T16985] netlink: 'syz.0.2815': attribute type 13 has an invalid length. [ 507.153018][T16985] netlink: 'syz.0.2815': attribute type 17 has an invalid length. [ 507.220667][T16989] netlink: 'syz.1.2816': attribute type 13 has an invalid length. [ 507.271597][T16988] netlink: 'syz.1.2816': attribute type 13 has an invalid length. [ 508.390740][T17026] __nla_validate_parse: 6 callbacks suppressed [ 508.390759][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2827'. [ 508.422259][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 508.671714][T17037] vlan3: entered promiscuous mode [ 508.679130][T17037] bond0: entered promiscuous mode [ 508.779715][T17046] sctp: [Deprecated]: syz.3.2832 (pid 17046) Use of int in max_burst socket option deprecated. [ 508.779715][T17046] Use struct sctp_assoc_value instead [ 508.880880][T17050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2833'. [ 509.188110][T17061] validate_nla: 2 callbacks suppressed [ 509.188133][T17061] netlink: 'syz.4.2836': attribute type 1 has an invalid length. [ 509.277112][T17061] 8021q: adding VLAN 0 to HW filter on device bond19 [ 509.365071][T17065] bond19: (slave veth17): Enslaving as an active interface with a down link [ 509.420126][T17061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.434968][T17061] bond19: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 509.550799][T17044] wg1 speed is unknown, defaulting to 1000 [ 510.004380][T17098] tipc: Failed to remove unknown binding: 66,1,1/0:136525945/136525947 [ 510.055553][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2846'. [ 510.068698][T17104] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 510.076322][T17104] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 511.113168][T17158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 511.164729][T17160] FAULT_INJECTION: forcing a failure. [ 511.164729][T17160] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 511.212866][T17160] CPU: 0 UID: 0 PID: 17160 Comm: syz.4.2859 Not tainted syzkaller #0 PREEMPT(full) [ 511.212914][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.212940][T17160] Call Trace: [ 511.212948][T17160] [ 511.212957][T17160] dump_stack_lvl+0x189/0x250 [ 511.212986][T17160] ? __pfx____ratelimit+0x10/0x10 [ 511.213014][T17160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.213035][T17160] ? __pfx__printk+0x10/0x10 [ 511.213062][T17160] ? __might_fault+0xb0/0x130 [ 511.213096][T17160] should_fail_ex+0x414/0x560 [ 511.213127][T17160] _copy_from_user+0x2d/0xb0 [ 511.213150][T17160] ___sys_sendmsg+0x158/0x2a0 [ 511.213177][T17160] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.213239][T17160] ? __fget_files+0x2a/0x420 [ 511.213264][T17160] ? __fget_files+0x3a0/0x420 [ 511.213300][T17160] __sys_sendmmsg+0x227/0x430 [ 511.213329][T17160] ? __pfx___sys_sendmmsg+0x10/0x10 [ 511.213349][T17160] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 511.213398][T17160] ? ksys_write+0x22a/0x250 [ 511.213433][T17160] ? __pfx_ksys_write+0x10/0x10 [ 511.213450][T17160] ? rcu_is_watching+0x15/0xb0 [ 511.213477][T17160] __x64_sys_sendmmsg+0xa0/0xc0 [ 511.213500][T17160] do_syscall_64+0xfa/0x3b0 [ 511.213518][T17160] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.213545][T17160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.213564][T17160] ? clear_bhb_loop+0x60/0xb0 [ 511.213587][T17160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.213606][T17160] RIP: 0033:0x7f33ea58eec9 [ 511.213624][T17160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.213641][T17160] RSP: 002b:00007f33eb50d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 511.213661][T17160] RAX: ffffffffffffffda RBX: 00007f33ea7e5fa0 RCX: 00007f33ea58eec9 [ 511.213673][T17160] RDX: 0000000000000002 RSI: 0000200000002cc0 RDI: 0000000000000003 [ 511.213686][T17160] RBP: 00007f33eb50d090 R08: 0000000000000000 R09: 0000000000000000 [ 511.213698][T17160] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 511.213710][T17160] R13: 00007f33ea7e6038 R14: 00007f33ea7e5fa0 R15: 00007ffd19f95fb8 [ 511.213742][T17160] [ 511.810846][T13284] syz1: Port: 1 Link DOWN [ 511.817867][T17170] syzkaller0: left promiscuous mode [ 511.824133][T17170] syzkaller0: left allmulticast mode [ 511.924787][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.953548][T17171] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 511.998941][T17179] tipc: Resetting bearer [ 512.058518][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.070090][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.079180][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.090035][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.113607][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.828504][T17226] tipc: Enabling of bearer rejected, already enabled [ 513.121861][T17181] wg1 speed is unknown, defaulting to 1000 [ 513.121914][T17238] netlink: 'syz.1.2878': attribute type 10 has an invalid length. [ 513.144482][T17248] netlink: 'syz.1.2878': attribute type 10 has an invalid length. [ 514.011985][T17279] IPVS: Unknown mcast interface: syz_tun [ 514.124751][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'. [ 514.203303][ T5859] Bluetooth: hci1: command tx timeout [ 514.350545][T17181] chnl_net:caif_netlink_parms(): no params data found [ 514.574182][T17298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2895'. [ 514.588372][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 514.695934][T17181] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.705265][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.720505][T17181] bridge_slave_0: entered allmulticast mode [ 514.737698][T17181] bridge_slave_0: entered promiscuous mode [ 514.760660][T17181] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.776064][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.794991][T17181] bridge_slave_1: entered allmulticast mode [ 514.810245][T17181] bridge_slave_1: entered promiscuous mode [ 514.840372][T17312] netlink: 'syz.4.2898': attribute type 13 has an invalid length. [ 514.904045][T17181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.941976][T17181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.996435][T17181] team0: Port device team_slave_0 added [ 515.026076][T17181] team0: Port device team_slave_1 added [ 515.183524][T17317] bond10: (slave bond_slave_1): Device is not bonding slave [ 515.191378][T17317] bond10: option active_slave: invalid value (bond_slave_1) [ 515.205485][T17317] bond10 (unregistering): Released all slaves [ 515.244932][T17181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.252873][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.291024][T17181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.308227][T17181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.335622][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.422396][T17181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.453709][T17312] wg1 speed is unknown, defaulting to 1000 [ 515.538464][T17324] netlink: 'syz.1.2903': attribute type 3 has an invalid length. [ 515.640832][T17181] hsr_slave_0: entered promiscuous mode [ 515.651365][T17181] hsr_slave_1: entered promiscuous mode [ 515.658919][T17181] debugfs: 'hsr0' already exists in 'hsr' [ 515.668287][T17181] Cannot create hsr debugfs directory [ 515.698827][T17332] bond10: option downdelay: invalid value (18446744073709551615) [ 515.707094][T17332] bond10: option downdelay: allowed values 0 - 2147483647 [ 515.716391][T17332] bond10 (unregistering): Released all slaves [ 515.759188][T17324] siw: device registration error -23 [ 515.867880][T17324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.283561][ T5859] Bluetooth: hci1: command tx timeout [ 516.519615][T17181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 516.538738][T17181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.678150][T17181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 516.697854][T17181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.754500][T17379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2915'. [ 516.795757][T17379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2915'. [ 516.824884][T17181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 516.842269][T17181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.853211][T17384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2917'. [ 516.872603][T17359] wg1 speed is unknown, defaulting to 1000 [ 516.958331][T17388] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 517.003507][T17181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 517.040555][T17181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 517.463336][T17181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.561359][T17181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.573523][T17364] wg1 speed is unknown, defaulting to 1000 [ 517.574018][T17181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.584719][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 517.600606][T17181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.622001][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2922'. [ 517.956281][T17417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2924'. [ 517.988334][T17417] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 518.090665][T17425] IPVS: Unknown mcast interface: vcan0 [ 518.330626][T17181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.360939][T17181] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.368918][ T5859] Bluetooth: hci1: command tx timeout [ 518.387765][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.394993][ T9599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.417005][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.424273][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.182994][T17422] wg1 speed is unknown, defaulting to 1000 [ 519.380391][T17181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.454133][T17447] wg1 speed is unknown, defaulting to 1000 [ 519.885551][T17181] veth0_vlan: entered promiscuous mode [ 520.036749][T17476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 520.059657][T17476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2938'. [ 520.063616][T17181] veth1_vlan: entered promiscuous mode [ 520.099365][T17476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2938'. [ 520.183675][T17181] veth0_macvtap: entered promiscuous mode [ 520.197095][T17181] veth1_macvtap: entered promiscuous mode [ 520.288256][T17181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.344651][T17181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.443551][ T5859] Bluetooth: hci1: command tx timeout [ 520.550811][ T6362] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.565655][ T6362] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.624716][ T6362] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.635331][ T6362] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.084733][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.098671][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.260643][ T6366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.281943][ T6366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.515087][T17520] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2948'. [ 521.529192][T17520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.692262][T17501] wg1 speed is unknown, defaulting to 1000 [ 521.724313][T17525] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 522.236200][T17540] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2955'. [ 522.258759][T17542] netlink: 'syz.3.2956': attribute type 15 has an invalid length. [ 522.278097][T17542] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2956'. [ 522.350195][T17539] vlan2: entered allmulticast mode [ 522.398648][T17546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'. [ 522.419173][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2957'. [ 522.743122][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.753998][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.765222][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.774877][T17550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 522.775893][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.784794][T17550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'. [ 522.793905][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.807936][T17504] wg1 speed is unknown, defaulting to 1000 [ 523.071433][T17571] netlink: 'syz.2.2963': attribute type 10 has an invalid length. [ 523.096188][T17570] netlink: 'syz.0.2964': attribute type 21 has an invalid length. [ 523.104644][T17570] netlink: 'syz.0.2964': attribute type 22 has an invalid length. [ 523.113542][T17570] netlink: 'syz.0.2964': attribute type 23 has an invalid length. [ 523.125459][T17568] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 523.143122][T17570] netlink: 'syz.0.2964': attribute type 25 has an invalid length. [ 523.151272][T17570] netlink: 'syz.0.2964': attribute type 26 has an invalid length. [ 523.160218][T17571] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 523.174909][T17571] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 523.368538][T17576] bond10: option ad_select: invalid value (34) [ 523.397762][T17576] bond10 (unregistering): Released all slaves [ 523.543200][ T9601] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 523.549581][T17583] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 523.562910][T17582] bond_slave_0: entered promiscuous mode [ 523.607407][ T3599] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 523.623087][T17561] wg1 speed is unknown, defaulting to 1000 [ 523.661355][T17583] bond_slave_0: left promiscuous mode [ 523.697040][ T9607] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 523.771427][ T9607] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 523.955644][ T6366] tipc: Resetting bearer [ 524.374387][ T6366] bond18 (unregistering): (slave gretap4): Releasing active interface [ 524.591556][T17592] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 524.794252][ T6366] tipc: Disabling bearer [ 525.195992][ T6366] bond0 (unregistering): Released all slaves [ 525.210560][ T6366] bond1 (unregistering): Released all slaves [ 525.224536][ T6366] bond2 (unregistering): Released all slaves [ 525.238574][ T6366] bond3 (unregistering): Released all slaves [ 525.258272][ T6366] bond4 (unregistering): Released all slaves [ 525.271526][ T6366] bond5 (unregistering): Released all slaves [ 525.285167][ T6366] bond6 (unregistering): Released all slaves [ 525.299089][ T6366] bond7 (unregistering): Released all slaves [ 525.318788][ T6366] bond8 (unregistering): Released all slaves [ 525.334570][ T6366] bond9 (unregistering): Released all slaves [ 525.447096][ T6366] bond10 (unregistering): Released all slaves [ 525.599119][ T6366] bond11 (unregistering): Released all slaves [ 525.719482][ T6366] bond12 (unregistering): Released all slaves [ 525.835144][ T6366] bond13 (unregistering): Released all slaves [ 525.848304][ T6366] bond14 (unregistering): Released all slaves [ 525.961730][ T6366] bond15 (unregistering): Released all slaves [ 526.075836][ T6366] bond16 (unregistering): Released all slaves [ 526.185771][ T6366] bond17 (unregistering): Released all slaves [ 526.199785][ T6366] bond18 (unregistering): Released all slaves [ 526.310893][ T6366] bond19 (unregistering): (slave veth17): Releasing active interface [ 526.323244][ T6366] bond19 (unregistering): Released all slaves [ 526.627367][ T6366] tipc: Disabling bearer [ 526.636889][ T6366] tipc: Left network mode [ 526.717795][T17629] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 526.959235][T17561] chnl_net:caif_netlink_parms(): no params data found [ 527.437364][T17668] netlink: 'syz.3.2986': attribute type 1 has an invalid length. [ 527.505340][T17673] __nla_validate_parse: 3 callbacks suppressed [ 527.505359][T17673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2986'. [ 527.727406][T17561] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.741975][T17561] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.758888][T17561] bridge_slave_0: entered allmulticast mode [ 527.773215][T17561] bridge_slave_0: entered promiscuous mode [ 527.795191][T17561] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.819776][T17561] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.836340][T17561] bridge_slave_1: entered allmulticast mode [ 527.851874][T17561] bridge_slave_1: entered promiscuous mode [ 527.898172][T17680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.925219][T17680] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.945767][T17680] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 527.996123][ T5905] : Port: 1 Link ACTIVE [ 528.091341][T17561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.127358][T17561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.172694][T17683] netlink: 'syz.3.2989': attribute type 33 has an invalid length. [ 528.187878][T17561] team0: Port device team_slave_0 added [ 528.192290][T17683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2989'. [ 528.197813][T17561] team0: Port device team_slave_1 added [ 528.236812][T17683] `: renamed from team0 (while UP) [ 528.278937][T17561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.286994][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.315143][T17561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.329856][T17561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.338262][T17561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.386908][T17561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.489303][T17561] hsr_slave_0: entered promiscuous mode [ 528.511547][T17561] hsr_slave_1: entered promiscuous mode [ 528.528859][T17561] debugfs: 'hsr0' already exists in 'hsr' [ 528.542703][T17561] Cannot create hsr debugfs directory [ 528.826788][T17674] wg1 speed is unknown, defaulting to 1000 [ 528.881378][T17646] wg1 speed is unknown, defaulting to 1000 [ 528.898894][T17561] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 528.992923][T17642] wg1 speed is unknown, defaulting to 1000 [ 530.078930][T17692] wg1 speed is unknown, defaulting to 1000 [ 530.141413][T17561] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 530.398766][T17561] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 530.618589][T17561] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 530.660638][ T6366] IPVS: stop unused estimator thread 0... [ 530.928660][T17695] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2992'. [ 531.105061][T17561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 531.120919][T17561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 531.144120][T17561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 531.165450][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 531.180539][T17561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.364240][T17711] netlink: 'syz.0.2996': attribute type 2 has an invalid length. [ 531.390764][T17561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.405336][T17711] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 531.460841][T17561] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.495702][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.502903][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.548593][T17720] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 531.557067][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.564302][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.720920][T17729] bond0: option miimon: invalid value (18446744072937799680) [ 531.731551][T17729] bond0: option miimon: allowed values 0 - 2147483647 [ 531.766345][T17729] tipc: Started in network mode [ 531.771433][T17729] tipc: Node identity 1a6d8f6c7dc7, cluster identity 4711 [ 531.779866][T17729] tipc: Enabled bearer , priority 0 [ 531.788882][T17729] syzkaller0: entered promiscuous mode [ 531.799083][T17729] syzkaller0: entered allmulticast mode [ 531.861366][T17726] tipc: Resetting bearer [ 531.947023][T17726] tipc: Disabling bearer [ 532.183835][T17561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.514817][T17771] nbd: nbd0 already in use [ 532.688634][T17782] Bluetooth: MGMT ver 1.23 [ 533.225271][T17561] veth0_vlan: entered promiscuous mode [ 533.277160][T17561] veth1_vlan: entered promiscuous mode [ 533.389887][T17561] veth0_macvtap: entered promiscuous mode [ 533.401640][T17561] veth1_macvtap: entered promiscuous mode [ 533.441290][T17561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.466734][T17561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.506227][ T9607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.523606][ T9607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.543530][ T9607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.580452][ T9607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.699785][ T9607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.709615][ T9607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.795064][T17821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3017'. [ 533.804943][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.824271][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.126485][T17802] wg1 speed is unknown, defaulting to 1000 [ 534.210845][T17837] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 534.227518][T17842] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3022'. [ 534.525288][T17846] bridge0: port 1(vlan4) entered blocking state [ 534.583120][T17846] bridge0: port 1(vlan4) entered disabled state [ 534.622395][T17846] vlan4: entered allmulticast mode [ 534.647992][T17846] bridge0: entered allmulticast mode [ 534.725169][T17846] vlan4: left allmulticast mode [ 534.730080][T17846] bridge0: left allmulticast mode [ 534.917104][T17860] netlink: 'syz.4.3026': attribute type 1 has an invalid length. [ 534.927577][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'. [ 535.294791][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.308598][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.319064][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.332147][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.340261][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.526361][T17873] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3028'. [ 535.894117][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 535.934047][T17868] wg1 speed is unknown, defaulting to 1000 [ 536.002618][T17893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3036'. [ 536.100710][T17885] can: request_module (can-proto-4) failed. [ 536.179573][T17899] netlink: 'syz.2.3037': attribute type 29 has an invalid length. [ 536.313598][T17911] netlink: 'syz.4.3039': attribute type 1 has an invalid length. [ 536.444453][T17912] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 536.483371][T17911] erspan0: entered allmulticast mode [ 536.494522][ T5988] : Port: 1 Link DOWN [ 536.494531][T17882] wg1 speed is unknown, defaulting to 1000 [ 536.616482][T17868] chnl_net:caif_netlink_parms(): no params data found [ 536.651018][T17926] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 537.311792][T17947] 8021q: adding VLAN 0 to HW filter on device bond17 [ 537.358338][T17950] bond11: (slave erspan0): Releasing active interface [ 537.396373][T17950] bond0: (slave bond_slave_0): Releasing backup interface [ 537.414848][ T5859] Bluetooth: hci2: command tx timeout [ 537.433311][T17950] bond0: (slave bond_slave_1): Releasing backup interface [ 537.450009][T17950] team0: Port device team_slave_0 removed [ 537.467560][T17950] team0: Port device team_slave_1 removed [ 537.493987][T17950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.509825][T17950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.524084][T17950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 537.621521][T17868] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.634789][T17868] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.662651][T17868] bridge_slave_0: entered allmulticast mode [ 537.744420][T17868] bridge_slave_0: entered promiscuous mode [ 537.755392][T17868] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.788964][T17868] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.831804][T17868] bridge_slave_1: entered allmulticast mode [ 537.878051][T17979] netlink: 'syz.3.3056': attribute type 1 has an invalid length. [ 537.889717][T17868] bridge_slave_1: entered promiscuous mode [ 537.929502][T17984] openvswitch: netlink: Flow key attr not present in new flow. [ 537.937458][T17985] openvswitch: netlink: Flow key attr not present in new flow. [ 537.987649][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 538.186645][T17996] netlink: 'syz.1.3060': attribute type 10 has an invalid length. [ 538.229045][T17996] team0: Port device dummy0 added [ 538.256006][T17868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.268968][T17996] netlink: 'syz.1.3060': attribute type 10 has an invalid length. [ 538.277397][T17868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.334296][T17996] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 538.358248][T17996] team0: Failed to send options change via netlink (err -105) [ 538.366957][T17996] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 538.379280][T17996] team0: Port device dummy0 removed [ 538.390131][T17996] dummy0: entered promiscuous mode [ 538.410291][T17868] team0: Port device team_slave_0 added [ 538.423569][T18000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'. [ 538.461883][T17868] team0: Port device team_slave_1 added [ 538.725466][T17868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.743640][T17868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.800811][T17868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.829004][T17868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.856155][T17868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.884069][T17868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.973872][T18028] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 539.011943][T18028] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3069'. [ 539.128657][T17868] hsr_slave_0: entered promiscuous mode [ 539.140738][T17868] hsr_slave_1: entered promiscuous mode [ 539.153530][T17868] debugfs: 'hsr0' already exists in 'hsr' [ 539.165265][T17868] Cannot create hsr debugfs directory [ 539.444699][T18049] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 539.474971][T18049] 8021q: adding VLAN 0 to HW filter on device bond18 [ 539.482822][ T5859] Bluetooth: hci2: command tx timeout [ 539.509645][T18052] netlink: 'syz.3.3076': attribute type 12 has an invalid length. [ 539.530370][T18052] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3076'. [ 539.567502][T18056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.676131][T18062] tipc: Enabling of bearer rejected, already enabled [ 539.700051][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 539.756197][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3079'. [ 540.118170][T17868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.130116][T17868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.147218][T17868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.159002][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3088'. [ 540.162823][T17868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.181115][T18088] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 540.389387][T17868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.435910][T17868] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.455601][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.463939][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.480766][T18073] wg1 speed is unknown, defaulting to 1000 [ 540.506860][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.514139][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.740100][T18078] wg1 speed is unknown, defaulting to 1000 [ 541.297832][T18119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3094'. [ 541.336474][T17868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.465373][T17868] veth0_vlan: entered promiscuous mode [ 541.476892][T18121] netlink: 5444 bytes leftover after parsing attributes in process `syz.2.3095'. [ 541.486763][T18121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.489710][T17868] veth1_vlan: entered promiscuous mode [ 541.506284][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 541.515478][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3095'. [ 541.532945][T18121] netlink: 'syz.2.3095': attribute type 5 has an invalid length. [ 541.562955][ T5859] Bluetooth: hci2: command tx timeout [ 541.605628][T17868] veth0_macvtap: entered promiscuous mode [ 541.636860][T18081] wg1 speed is unknown, defaulting to 1000 [ 541.655102][T17868] veth1_macvtap: entered promiscuous mode [ 541.729008][T18102] wg1 speed is unknown, defaulting to 1000 [ 541.741869][T17868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.765520][T18124] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3096'. [ 541.919208][T17868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.145028][T18130] vlan2: entered promiscuous mode [ 542.150108][T18130] bond0: entered promiscuous mode [ 542.157218][T18130] bond_slave_0: entered promiscuous mode [ 542.163392][T18130] bond_slave_1: entered promiscuous mode [ 542.169329][T18130] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 542.182702][ T6362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.194957][ T6362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.240772][ T6362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.260554][ T6362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.481587][T18135] netlink: 'syz.2.3100': attribute type 7 has an invalid length. [ 542.561582][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.578272][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.693114][T18143] netlink: 'syz.4.3101': attribute type 16 has an invalid length. [ 542.711584][T18143] netlink: 'syz.4.3101': attribute type 17 has an invalid length. [ 542.766902][T18143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.870833][ T6366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.884435][ T6366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.644304][ T5859] Bluetooth: hci2: command tx timeout [ 544.059797][T18160] __nla_validate_parse: 20 callbacks suppressed [ 544.059816][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.132570][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.187131][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.231868][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.266863][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.291392][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 544.303693][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 544.304559][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.313866][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 544.325050][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.331099][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 544.334533][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.343438][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.373188][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.383090][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.394602][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.404108][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3108'. [ 544.631992][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.656639][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.163655][ T6362] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.203712][ T6362] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.368554][ T6362] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.417263][T18198] wg1 speed is unknown, defaulting to 1000 [ 545.440141][T18193] wg1 speed is unknown, defaulting to 1000 [ 545.463430][ T6362] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.297018][T18196] mpoa:mpoad_close: () going down [ 546.369912][ T5859] Bluetooth: hci3: command tx timeout [ 546.764304][ T30] audit: type=1800 audit(1759493189.799:7): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3126" name="memory.events" dev="tmpfs" ino=3178 res=0 errno=0 [ 546.863293][ T30] audit: type=1804 audit(1759493189.889:8): pid=18254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3126" name="/newroot/615/memory.events" dev="tmpfs" ino=3178 res=1 errno=0 [ 547.366873][T18193] chnl_net:caif_netlink_parms(): no params data found [ 547.737485][T18269] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 548.045978][T18193] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.062829][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.081546][T18193] bridge_slave_0: entered allmulticast mode [ 548.105634][T18193] bridge_slave_0: entered promiscuous mode [ 548.124983][T18193] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.141233][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.187383][T18193] bridge_slave_1: entered allmulticast mode [ 548.214394][T18193] bridge_slave_1: entered promiscuous mode [ 548.253780][T18285] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.442836][ T5859] Bluetooth: hci3: command tx timeout [ 548.486272][T18193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.519133][T18193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.635304][T18193] team0: Port device team_slave_0 added [ 548.656082][T18193] team0: Port device team_slave_1 added [ 548.666367][T18310] netlink: 'syz.2.3138': attribute type 4 has an invalid length. [ 548.786448][T18193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.808666][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.881909][T18193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.915114][T18193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.933164][T18193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.012274][T18193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.173938][T18193] hsr_slave_0: entered promiscuous mode [ 549.180772][T18193] hsr_slave_1: entered promiscuous mode [ 549.203490][T18193] debugfs: 'hsr0' already exists in 'hsr' [ 549.209260][T18193] Cannot create hsr debugfs directory [ 549.329323][T18314] __nla_validate_parse: 130 callbacks suppressed [ 549.329347][T18314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3137'. [ 549.556976][ T9607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 549.579960][T18327] ip6gre1: entered allmulticast mode [ 549.689326][ T9607] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 549.715427][T18337] tipc: Invalid UDP bearer configuration [ 549.715479][T18337] tipc: Enabling of bearer rejected, failed to enable media [ 549.784169][ T9607] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 549.817658][ T9599] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 549.859471][T18342] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3147'. [ 549.890936][ T3599] tipc: Resetting bearer [ 550.370792][ T3599] `: Port device geneve0 removed [ 550.399429][ T3599] bond6 (unregistering): (slave bridge1): Releasing active interface [ 550.472778][ T3599] tipc: Disabling bearer [ 550.525504][ T5859] Bluetooth: hci3: command tx timeout [ 550.533326][ T3599] bond8 (unregistering): (slave bridge2): Releasing active interface [ 550.620130][ T3599] bond4 (unregistering): (slave macvlan2): Releasing backup interface [ 550.637059][ T3599] bond0 (unregistering): (slave 0!): Releasing backup interface [ 550.649497][ T3599] bond0 (unregistering): Released all slaves [ 550.798042][ T3599] bond1 (unregistering): Released all slaves [ 550.817991][ T3599] bond2 (unregistering): Released all slaves [ 550.836754][ T3599] bond3 (unregistering): Released all slaves [ 550.985816][ T3599] bond4 (unregistering): Released all slaves [ 551.005507][ T3599] bond5 (unregistering): Released all slaves [ 551.024470][ T3599] bond6 (unregistering): Released all slaves [ 551.184381][ T3599] bond7 (unregistering): Released all slaves [ 551.205281][ T3599] bond8 (unregistering): Released all slaves [ 551.227902][ T3599] bond9 (unregistering): Released all slaves [ 551.253076][ T3599] bond10 (unregistering): Released all slaves [ 551.299132][T18193] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 551.448401][T18193] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 551.594418][T18362] netlink: 'syz.0.3152': attribute type 3 has an invalid length. [ 551.596102][T18193] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 551.655258][T18363] sctp: [Deprecated]: syz.1.3153 (pid 18363) Use of int in maxseg socket option. [ 551.655258][T18363] Use struct sctp_assoc_value instead [ 551.706991][T18365] netlink: 'syz.4.3154': attribute type 11 has an invalid length. [ 551.716514][T18365] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3154'. [ 551.749002][T18193] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 552.018183][T18193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 552.050349][T18193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 552.081203][T18193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 552.105700][T18193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.171424][T18383] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3161'. [ 552.396624][T18193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.463598][T18193] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.493442][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.500654][ T9601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.572538][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.579735][ T9601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.602759][ T5859] Bluetooth: hci3: command tx timeout [ 552.653048][T18412] wg1 speed is unknown, defaulting to 1000 [ 552.906066][T18193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.917369][T18193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.175285][T18431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3171'. [ 553.311579][ T3599] tipc: Left network mode [ 553.384355][T18438] IPVS: set_ctl: invalid protocol: 114 255.255.255.255:20001 [ 553.477635][ T3599] IPVS: stopping backup sync thread 10717 ... [ 553.491345][T18443] wg1 speed is unknown, defaulting to 1000 [ 553.521052][T18447] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 553.535355][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3173'. [ 553.782777][T18452] wg1 speed is unknown, defaulting to 1000 [ 553.849391][T18193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.932743][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'. [ 554.149091][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'. [ 554.460424][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 554.489683][T18193] veth0_vlan: entered promiscuous mode [ 554.525170][T18483] netlink: 'syz.1.3181': attribute type 1 has an invalid length. [ 554.547857][T18480] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 554.594064][T18483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3181'. [ 554.644526][T18478] veth11: entered promiscuous mode [ 554.823600][T18489] !: renamed from dummy0 [ 554.839641][T18193] veth1_vlan: entered promiscuous mode [ 554.994453][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3191'. [ 555.085500][T18193] veth0_macvtap: entered promiscuous mode [ 555.168932][T18193] veth1_macvtap: entered promiscuous mode [ 555.189027][T18519] tipc: Enabled bearer , priority 0 [ 555.214391][T18519] syzkaller0: entered promiscuous mode [ 555.230140][T18519] syzkaller0: entered allmulticast mode [ 555.270127][T18527] netlink: 'syz.4.3196': attribute type 1 has an invalid length. [ 555.315731][T18527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.331534][T18519] tipc: Resetting bearer [ 555.385717][T18527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.394181][T18527] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 555.408316][T18527] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 555.447114][T18531] veth5: entered promiscuous mode [ 555.456590][T18531] bond1: (slave veth5): Enslaving as an active interface with a down link [ 555.470226][ T9599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.494342][T18519] tipc: Resetting bearer [ 555.500790][ T9599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.523140][T18519] tipc: Disabling bearer [ 555.539601][T18193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.608760][T18193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.654372][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.665379][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.706447][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.708490][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3199'. [ 555.733056][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 555.736420][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.766815][ T10] IPVS: starting estimator thread 0... [ 555.819575][ T3599] hsr_slave_0: left promiscuous mode [ 555.827243][ T3599] hsr_slave_1: left promiscuous mode [ 555.834847][ T3599] batman_adv: batadv0: Removing interface: virt_wifi0 [ 555.882632][T18540] IPVS: using max 49 ests per chain, 117600 per kthread [ 555.949112][ T3599] pim6reg99999999 (unregistering): left allmulticast mode [ 556.603828][ T3599] vxcan1 (unregistering): left allmulticast mode [ 556.993855][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.019057][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.154177][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.166614][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.431448][T18574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3210'. [ 557.480886][ T3599] IPVS: stop unused estimator thread 0... [ 558.181547][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.194683][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.215316][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.226696][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.242888][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.539338][ T3599] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 558.583702][ T3599] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 558.724380][ T3599] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 558.736596][ T3599] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 558.800788][ T3599] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 558.810987][ T3599] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 558.841978][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3221'. [ 558.899846][ T3599] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 558.920139][ T3599] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 559.085505][T18591] chnl_net:caif_netlink_parms(): no params data found [ 559.195083][T18630] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 559.223017][T18630] bond1 (unregistering): Released all slaves [ 559.279625][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 559.337692][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 559.376971][T18640] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3228'. [ 559.409146][ T6366] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 559.438474][T18643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 559.463143][ T6366] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 559.488438][T18640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3228'. [ 559.527455][T18648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3230'. [ 559.675408][ T6366] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 559.715623][T18648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3230'. [ 559.854025][ T3599] tipc: Resetting bearer [ 559.977388][T18677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3235'. [ 560.211652][ T3599] bond7 (unregistering): (slave gretap2): Releasing active interface [ 560.283007][ T5859] Bluetooth: hci4: command tx timeout [ 560.395615][ T3599] bond7 (unregistering): (slave bridge0): Releasing active interface [ 560.460753][ T3599] tipc: Disabling bearer [ 560.525806][ T3599] bond5 (unregistering): (slave macvlan2): Releasing active interface [ 560.541723][ T3599] bond0 (unregistering): Released all slaves [ 560.679390][ T3599] bond1 (unregistering): Released all slaves [ 560.699291][ T3599] bond2 (unregistering): Released all slaves [ 560.713391][ T3599] bond3 (unregistering): Released all slaves [ 560.852987][ T3599] bond4 (unregistering): Released all slaves [ 560.866361][ T3599] bond5 (unregistering): Released all slaves [ 561.017254][ T3599] bond6 (unregistering): Released all slaves [ 561.030053][ T3599] bond7 (unregistering): Released all slaves [ 561.043910][ T3599] bond8 (unregistering): Released all slaves [ 561.199565][ T3599] bond9 (unregistering): Released all slaves [ 561.213291][ T3599] bond10 (unregistering): Released all slaves [ 561.361239][ T3599] bond11 (unregistering): Released all slaves [ 561.489712][ T3599] bond12 (unregistering): Released all slaves [ 561.502998][ T3599] bond13 (unregistering): Released all slaves [ 561.634790][ T3599] bond14 (unregistering): Released all slaves [ 561.650829][ T3599] bond15 (unregistering): Released all slaves [ 561.789411][ T3599] bond16 (unregistering): Released all slaves [ 561.961292][ T3599] bond17 (unregistering): Released all slaves [ 562.082951][ T3599] bond18 (unregistering): Released all slaves [ 562.186471][T18591] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.194367][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.201737][T18591] bridge_slave_0: entered allmulticast mode [ 562.210180][T18591] bridge_slave_0: entered promiscuous mode [ 562.229387][T18676] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 562.267833][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'. [ 562.293622][T18685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3237'. [ 562.311960][T18591] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.322706][T18685] netlink: 'syz.3.3237': attribute type 1 has an invalid length. [ 562.323525][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.355352][T18591] bridge_slave_1: entered allmulticast mode [ 562.362649][ T5859] Bluetooth: hci4: command tx timeout [ 562.390931][T18591] bridge_slave_1: entered promiscuous mode [ 562.540294][ T3599] tipc: Left network mode [ 562.580604][T18685] veth3: entered promiscuous mode [ 562.646365][T18591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.698640][T18591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.815151][ T3599] IPVS: stopping backup sync thread 13885 ... [ 562.905227][T18591] team0: Port device team_slave_0 added [ 562.929139][T18591] team0: Port device team_slave_1 added [ 563.251562][T18591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.269749][T18591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.274450][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3246'. [ 563.310580][T18591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.319818][T18715] nbd: couldn't find a device at index 65546 [ 563.428124][T18591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.435906][T18591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.480535][T18591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.876612][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 563.926365][T18591] hsr_slave_0: entered promiscuous mode [ 563.947898][T18591] hsr_slave_1: entered promiscuous mode [ 564.223466][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3250'. [ 564.315995][T18742] !: renamed from dummy0 (while UP) [ 564.442738][ T5859] Bluetooth: hci4: command tx timeout [ 564.574812][T18753] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3254'. [ 564.584892][ T3599] hsr_slave_0: left promiscuous mode [ 564.591253][ T3599] hsr_slave_1: left promiscuous mode [ 566.163554][T18591] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 566.349153][T18591] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 566.526997][ T5859] Bluetooth: hci4: command tx timeout [ 566.540839][T18761] infiniband syz1: set down [ 566.546243][T18761] infiniband syz1: added syz_tun [ 566.552432][T18761] syz1: rxe_create_cq: returned err = -12 [ 566.558389][T18761] infiniband syz1: Couldn't create ib_mad CQ [ 566.565440][T18761] infiniband syz1: Couldn't open port 1 [ 566.582939][T18591] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 566.614340][T18761] RDS/IB: syz1: added [ 566.661397][T18591] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 566.745651][ T3599] IPVS: stop unused estimator thread 0... [ 567.092612][T18591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.107793][T18591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.129730][T18591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.191873][T18591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.407260][T18591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.448396][T18591] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.466622][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.473878][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.507431][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.514793][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.550252][T18591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.574877][T18591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.733254][T18805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.974984][T18805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.059809][T18805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.109322][T18591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.156512][T18805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.234934][T18591] veth0_vlan: entered promiscuous mode [ 568.249673][T18591] veth1_vlan: entered promiscuous mode [ 568.290437][T18591] veth0_macvtap: entered promiscuous mode [ 568.326798][ T3599] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.349753][ T9607] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.374385][T18591] veth1_macvtap: entered promiscuous mode [ 568.388783][ T3599] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.404746][ T3599] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.446744][T18591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.471933][T18591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.500755][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.512999][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.562977][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.571890][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.700490][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.713019][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.760169][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.768942][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.071608][T18824] netlink: 'syz.1.3267': attribute type 13 has an invalid length. [ 569.286091][T18827] sctp: [Deprecated]: syz.1.3268 (pid 18827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.286091][T18827] Use struct sctp_sack_info instead [ 569.411397][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3269'. [ 569.491727][T18832] bond0: Caught tx_queue_len zero misconfig [ 569.916442][T18844] syzkaller1: entered promiscuous mode [ 569.921966][T18844] syzkaller1: entered allmulticast mode [ 569.961023][T18845] netlink: 'syz.0.3273': attribute type 13 has an invalid length. [ 569.972969][T18845] netlink: 'syz.0.3273': attribute type 17 has an invalid length. [ 570.262871][T18845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.271892][T18865] netlink: 'syz.1.3278': attribute type 4 has an invalid length. [ 571.302924][T18866] netlink: 'syz.1.3278': attribute type 4 has an invalid length. [ 571.310782][T18866] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3278'. [ 571.319027][T18865] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3278'. [ 571.750489][T18878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.801796][T18878] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 571.963475][T18891] tipc: Started in network mode [ 571.972663][T18891] tipc: Node identity fa2094b8eef7, cluster identity 4711 [ 571.981860][T18891] tipc: Enabled bearer , priority 0 [ 571.998665][T18891] syzkaller0: entered promiscuous mode [ 572.004835][T18891] syzkaller0: entered allmulticast mode [ 572.061575][T18896] mac80211_hwsim hwsim50 ªªªªª;: renamed from wlan0 (while UP) [ 572.098266][T18891] tipc: Resetting bearer [ 572.334610][T18897] tipc: Resetting bearer [ 572.369132][T18907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3288'. [ 572.379696][T18897] tipc: Disabling bearer [ 572.661566][T18914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.709294][T18918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3291'. [ 572.726427][T18918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3291'. [ 573.121568][T18932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3294'. [ 573.154236][T18932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.161581][T18932] IPv6: NLM_F_CREATE should be set when creating new route [ 574.068154][T18951] tipc: Enabled bearer , priority 0 [ 574.266167][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 574.299699][T18961] erspan0: left allmulticast mode [ 574.349958][T18961] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 574.487550][T18961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.507621][T18961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.625909][T18961] veth5: left promiscuous mode [ 574.684162][T18941] tipc: Disabling bearer [ 574.720045][ T9599] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.762876][ T9599] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.783646][ T9599] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.825298][ T9599] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.852592][T18969] netlink: 'syz.4.3301': attribute type 29 has an invalid length. [ 574.968179][T18967] netlink: 'syz.4.3301': attribute type 29 has an invalid length. [ 574.977207][T18971] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 575.219566][T18982] netlink: 'syz.0.3305': attribute type 11 has an invalid length. [ 575.259307][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 575.423243][T18986] FAULT_INJECTION: forcing a failure. [ 575.423243][T18986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.454338][T18986] CPU: 1 UID: 0 PID: 18986 Comm: syz.0.3307 Not tainted syzkaller #0 PREEMPT(full) [ 575.454372][T18986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.454385][T18986] Call Trace: [ 575.454393][T18986] [ 575.454402][T18986] dump_stack_lvl+0x189/0x250 [ 575.454430][T18986] ? __pfx____ratelimit+0x10/0x10 [ 575.454461][T18986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.454485][T18986] ? __pfx__printk+0x10/0x10 [ 575.454514][T18986] ? __might_fault+0xb0/0x130 [ 575.454550][T18986] should_fail_ex+0x414/0x560 [ 575.454582][T18986] _copy_from_user+0x2d/0xb0 [ 575.454606][T18986] ___sys_sendmsg+0x158/0x2a0 [ 575.454632][T18986] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.454722][T18986] ? __fget_files+0x2a/0x420 [ 575.454746][T18986] ? __fget_files+0x3a0/0x420 [ 575.454783][T18986] __x64_sys_sendmsg+0x19b/0x260 [ 575.454810][T18986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.454844][T18986] ? __pfx_ksys_write+0x10/0x10 [ 575.454863][T18986] ? rcu_is_watching+0x15/0xb0 [ 575.454892][T18986] ? do_syscall_64+0xbe/0x3b0 [ 575.454916][T18986] do_syscall_64+0xfa/0x3b0 [ 575.454934][T18986] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.454963][T18986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.454982][T18986] ? clear_bhb_loop+0x60/0xb0 [ 575.455006][T18986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.455025][T18986] RIP: 0033:0x7fe138d8eec9 [ 575.455043][T18986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.455060][T18986] RSP: 002b:00007fe139b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.455080][T18986] RAX: ffffffffffffffda RBX: 00007fe138fe5fa0 RCX: 00007fe138d8eec9 [ 575.455095][T18986] RDX: 0000000002004804 RSI: 0000200000000400 RDI: 0000000000000003 [ 575.455113][T18986] RBP: 00007fe139b60090 R08: 0000000000000000 R09: 0000000000000000 [ 575.455125][T18986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.455137][T18986] R13: 00007fe138fe6038 R14: 00007fe138fe5fa0 R15: 00007ffedebe1968 [ 575.455170][T18986] [ 576.138436][T18991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3309'. [ 577.217937][T19011] FAULT_INJECTION: forcing a failure. [ 577.217937][T19011] name failslab, interval 1, probability 0, space 0, times 1 [ 577.246246][T19011] CPU: 0 UID: 0 PID: 19011 Comm: syz.3.3318 Not tainted syzkaller #0 PREEMPT(full) [ 577.246275][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.246287][T19011] Call Trace: [ 577.246295][T19011] [ 577.246304][T19011] dump_stack_lvl+0x189/0x250 [ 577.246332][T19011] ? __pfx____ratelimit+0x10/0x10 [ 577.246363][T19011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.246392][T19011] ? __pfx__printk+0x10/0x10 [ 577.246425][T19011] ? __pfx___might_resched+0x10/0x10 [ 577.246451][T19011] should_fail_ex+0x414/0x560 [ 577.246483][T19011] should_failslab+0xa8/0x100 [ 577.246510][T19011] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 577.246535][T19011] ? __alloc_skb+0x112/0x2d0 [ 577.246560][T19011] __alloc_skb+0x112/0x2d0 [ 577.246584][T19011] netlink_sendmsg+0x5c6/0xb30 [ 577.246615][T19011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.246645][T19011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 577.246673][T19011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.246701][T19011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.246723][T19011] __sock_sendmsg+0x21c/0x270 [ 577.246755][T19011] ____sys_sendmsg+0x505/0x830 [ 577.246784][T19011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.246818][T19011] ? import_iovec+0x74/0xa0 [ 577.246844][T19011] ___sys_sendmsg+0x21f/0x2a0 [ 577.246869][T19011] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.246931][T19011] ? __fget_files+0x2a/0x420 [ 577.246955][T19011] ? __fget_files+0x3a0/0x420 [ 577.246991][T19011] __x64_sys_sendmsg+0x19b/0x260 [ 577.247016][T19011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.247049][T19011] ? __pfx_ksys_write+0x10/0x10 [ 577.247069][T19011] ? rcu_is_watching+0x15/0xb0 [ 577.247097][T19011] ? do_syscall_64+0xbe/0x3b0 [ 577.247121][T19011] do_syscall_64+0xfa/0x3b0 [ 577.247138][T19011] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.247164][T19011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.247181][T19011] ? clear_bhb_loop+0x60/0xb0 [ 577.247203][T19011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.247222][T19011] RIP: 0033:0x7f8dfa98eec9 [ 577.247240][T19011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.247257][T19011] RSP: 002b:00007f8dfb8b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.247278][T19011] RAX: ffffffffffffffda RBX: 00007f8dfabe5fa0 RCX: 00007f8dfa98eec9 [ 577.247292][T19011] RDX: 0000000002004804 RSI: 0000200000000400 RDI: 0000000000000003 [ 577.247305][T19011] RBP: 00007f8dfb8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 577.247318][T19011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.247329][T19011] R13: 00007f8dfabe6038 R14: 00007f8dfabe5fa0 R15: 00007ffe567a1f78 [ 577.247362][T19011] [ 578.279932][T19026] netlink: 'syz.4.3321': attribute type 1 has an invalid length. [ 578.316736][T19026] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3321'. [ 578.752351][ T30] audit: type=1800 audit(1759493221.779:9): pid=19008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3316" name="memory.events" dev="tmpfs" ino=253 res=0 errno=0 [ 579.010472][T19039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.179800][T19039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.353236][T19062] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3329'. [ 579.365432][T19039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.396548][T19056] netlink: 'syz.2.3330': attribute type 10 has an invalid length. [ 579.456107][T19056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.475709][T19067] netlink: 'syz.2.3330': attribute type 10 has an invalid length. [ 579.485764][T19067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3330'. [ 579.498304][T19056] batadv0: entered promiscuous mode [ 579.505358][T19056] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 579.575637][T19039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.620056][T19067] batadv0: entered allmulticast mode [ 579.629052][T19067] bond0: (slave batadv0): Releasing backup interface [ 579.649444][T19067] bridge0: port 3(batadv0) entered blocking state [ 579.666914][T19067] bridge0: port 3(batadv0) entered disabled state [ 579.935988][ T9599] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.040743][ T9599] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.082768][ T6362] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 580.092989][ T6362] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 580.176048][ T9599] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.204997][ T9599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.606142][T19102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3339'. [ 580.829622][T19108] geneve2: entered promiscuous mode [ 580.852619][T19108] geneve2: entered allmulticast mode [ 580.859940][ T6362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 580.872002][ T6362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.001228][ T6362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.087699][ T6362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 581.135630][T19095] geneve2: entered promiscuous mode [ 581.324139][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 581.383395][T19122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3346'. [ 581.393342][T19124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3347'. [ 581.553008][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 581.567418][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 581.871636][T19139] netlink: 'syz.3.3352': attribute type 1 has an invalid length. [ 582.451968][T19155] IPVS: length: 4096 != 8 [ 582.457581][T19153] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3355'. [ 582.494724][T19153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.539301][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 583.394225][ T43] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 583.411882][ T43] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 583.475338][ T43] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 583.524585][T19196] openvswitch: netlink: Flow key attr not present in new flow. [ 584.945512][T19239] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 584.971960][T19248] IPVS: length: 172 != 8 [ 585.089871][T19255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3377'. [ 585.334024][T19269] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3381'. [ 585.680031][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 586.734338][T19297] netlink: 'syz.2.3388': attribute type 6 has an invalid length. [ 586.760362][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.777042][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.786175][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.795568][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.807575][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.817853][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 586.836485][T19297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3388'. [ 588.886864][T19338] veth0_to_bridge: entered promiscuous mode [ 590.479098][T19349] __nla_validate_parse: 163 callbacks suppressed [ 590.479117][T19349] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3401'. [ 590.503285][T19349] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3401'. [ 590.513080][T19349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3401'. [ 590.544774][T19351] tipc: Enabling of bearer rejected, media not registered [ 590.564654][T19351] tipc: Started in network mode [ 590.576441][T19351] tipc: Node identity 0eafb55f3378, cluster identity 4711 [ 590.594217][T19351] tipc: Enabled bearer , priority 0 [ 590.614211][T19351] syzkaller0: entered promiscuous mode [ 590.631370][T19351] syzkaller0: entered allmulticast mode [ 590.689765][T19351] tipc: Resetting bearer [ 590.721913][T19350] tipc: Resetting bearer [ 590.790173][T19350] tipc: Disabling bearer [ 590.843144][T19361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3404'. [ 590.901234][T19361] veth0_macvtap: left promiscuous mode [ 590.945736][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'. [ 591.121263][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3407'. [ 591.146685][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3407'. [ 591.193095][T19376] netlink: 508 bytes leftover after parsing attributes in process `syz.3.3409'. [ 591.232963][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'. [ 591.288804][T19376] team1: entered promiscuous mode [ 591.303842][T19376] team1: entered allmulticast mode [ 591.310483][T19381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3411'. [ 591.331683][T19376] 8021q: adding VLAN 0 to HW filter on device team1 [ 592.456651][T19434] netlink: 'syz.4.3425': attribute type 21 has an invalid length. [ 592.476441][T19434] netlink: 'syz.4.3425': attribute type 6 has an invalid length. [ 595.674014][T19517] __nla_validate_parse: 8 callbacks suppressed [ 595.674032][T19517] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3447'. [ 595.721351][T19517] batman_adv: batadv0: Adding interface: dummy0 [ 595.755495][T19517] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.807345][T19517] batman_adv: batadv0: Interface activated: dummy0 [ 595.830848][T19520] batadv0: mtu less than device minimum [ 595.844746][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.857110][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.869147][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.881075][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.893336][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.900916][T19525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3447'. [ 595.906074][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.926526][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.937926][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.949247][T19520] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 595.973761][T19523] batadv_slave_1: entered promiscuous mode [ 596.017953][T19523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3449'. [ 596.054647][T19522] batadv_slave_1: left promiscuous mode [ 596.263540][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3453'. [ 596.276215][T19538] netlink: 'syz.4.3452': attribute type 12 has an invalid length. [ 596.595430][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 596.639808][T19551] netlink: 'syz.1.3458': attribute type 1 has an invalid length. [ 596.654110][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 596.887508][T19551] bond1: (slave gretap1): making interface the new active one [ 596.897527][T19551] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 597.024565][T19570] netlink: 'syz.2.3465': attribute type 32 has an invalid length. [ 597.071140][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 597.188139][T19570] bond1: option coupled_control: invalid value (12) [ 597.210395][T19570] bond1 (unregistering): Released all slaves [ 597.420725][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 597.449403][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 597.465055][ T30] audit: type=1800 audit(1759493240.499:10): pid=19591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3470" name="memory.events" dev="tmpfs" ino=621 res=0 errno=0 [ 597.466436][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 597.505862][ T30] audit: type=1804 audit(1759493240.529:11): pid=19591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3470" name="/newroot/116/memory.events" dev="tmpfs" ino=621 res=1 errno=0 [ 624.691723][T19633] __nla_validate_parse: 15 callbacks suppressed [ 624.691746][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3484'. [ 625.161645][T19633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3484'. [ 634.511740][ T30] audit: type=1804 audit(1759493277.299:12): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3487" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=310 res=1 errno=0 [ 634.910373][ T30] audit: type=1800 audit(1759493277.459:13): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3487" name="cgroup.controllers" dev="tmpfs" ino=310 res=0 errno=0 [ 635.340306][ T30] audit: type=1800 audit(1759493277.859:14): pid=19645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3487" name="cgroup.controllers" dev="tmpfs" ino=310 res=0 errno=0 [ 636.190062][ T30] audit: type=1804 audit(1759493278.969:15): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3487" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=310 res=1 errno=0 [ 640.729928][T19649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 640.890193][T19649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 641.151301][T19649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 641.570954][T17185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 641.859219][T17185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 642.020633][T17185] Bluetooth: hci1: command 0x0406 tx timeout [ 645.089799][ T5859] Bluetooth: hci5: command tx timeout [ 647.169588][ T5859] Bluetooth: hci5: command tx timeout [ 649.259369][ T5859] Bluetooth: hci5: command tx timeout [ 651.340024][ T51] Bluetooth: hci5: command tx timeout [ 651.650600][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 651.931365][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 652.106750][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 652.570676][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 653.009404][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 655.891420][ T51] Bluetooth: hci6: command tx timeout [ 657.969042][ T51] Bluetooth: hci6: command tx timeout [ 659.779861][ T5859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 659.880950][ T5859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 660.019038][ T5859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 660.071433][T17185] Bluetooth: hci6: command tx timeout [ 660.740393][T17185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 660.971890][T17185] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 662.140424][ T51] Bluetooth: hci6: command tx timeout [ 662.449304][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 664.061896][ T5859] Bluetooth: hci7: command tx timeout [ 666.140658][ T5859] Bluetooth: hci7: command tx timeout [ 668.229287][ T5859] Bluetooth: hci7: command tx timeout [ 670.290159][ T5859] Bluetooth: hci7: command tx timeout [ 688.059984][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 707.668273][T17185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.059977][T17185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.180252][T17185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.541238][T17185] Bluetooth: hci4: command 0x0405 tx timeout [ 708.950230][T17185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 709.300423][T19649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.071457][ T9601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.739263][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 712.899113][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 713.180320][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 713.810274][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 714.060690][ T51] Bluetooth: hci2: command tx timeout [ 714.219050][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 715.289691][ T9601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.140254][ T51] Bluetooth: hci2: command tx timeout [ 717.990541][ T51] Bluetooth: hci8: command tx timeout [ 718.225876][ T51] Bluetooth: hci2: command tx timeout [ 720.061233][ T51] Bluetooth: hci8: command tx timeout [ 720.307070][ T51] Bluetooth: hci2: command tx timeout [ 721.571024][ T9601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.929056][ T5859] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 722.130482][ T5859] Bluetooth: hci8: command tx timeout [ 722.151741][T19649] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 722.411183][T19649] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 723.359305][T19649] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 723.639196][T19649] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 724.220158][ T51] Bluetooth: hci8: command tx timeout [ 726.780441][T19649] Bluetooth: hci9: command tx timeout [ 728.417947][ T9601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.861282][T19649] Bluetooth: hci9: command tx timeout [ 730.938825][T19649] Bluetooth: hci9: command tx timeout [ 733.010005][T19649] Bluetooth: hci9: command tx timeout [ 741.850879][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.040910][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.150263][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.961876][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.131049][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 745.660902][T19649] Bluetooth: hci0: command tx timeout [ 747.741216][T19649] Bluetooth: hci0: command tx timeout [ 749.829389][T19649] Bluetooth: hci0: command tx timeout [ 751.900932][T19649] Bluetooth: hci0: command tx timeout [ 755.019047][ T9592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 756.740915][ T6366] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 763.200457][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 763.360684][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.480176][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 764.320715][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 764.579509][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 764.711355][ T5859] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 764.801353][T17185] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 764.950980][T17185] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 765.560054][T19649] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 765.879505][T19649] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 766.731894][ T9607] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 766.819014][ T9607] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 767.079781][ T9601] bridge_slave_1: left allmulticast mode [ 767.190090][T19649] Bluetooth: hci1: command tx timeout [ 767.321051][ T9601] bridge_slave_1: left promiscuous mode [ 767.460497][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.781652][ T9601] bridge_slave_0: left allmulticast mode [ 768.960062][ T9601] bridge_slave_0: left promiscuous mode [ 769.119924][ T51] Bluetooth: hci10: command tx timeout [ 769.251568][ T51] Bluetooth: hci1: command tx timeout [ 769.307493][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.011100][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 771.181193][T19649] Bluetooth: hci10: command tx timeout [ 771.330649][T19649] Bluetooth: hci1: command tx timeout [ 771.891633][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 772.190574][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 772.300013][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 772.900051][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 773.249516][ T51] Bluetooth: hci10: command tx timeout [ 773.409689][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 773.420605][T17185] Bluetooth: hci1: command tx timeout [ 775.340383][ T51] Bluetooth: hci10: command tx timeout [ 776.608922][T19649] Bluetooth: hci11: command tx timeout [ 776.827139][T19649] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 777.069262][T19649] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 777.211763][T19649] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 777.640524][T19649] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 777.871331][T19649] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 778.690192][ T51] Bluetooth: hci11: command tx timeout [ 780.219456][T19649] Bluetooth: hci6: command 0x0406 tx timeout [ 780.771712][T17185] Bluetooth: hci11: command tx timeout [ 781.430155][T17185] Bluetooth: hci12: command tx timeout [ 782.860039][T17185] Bluetooth: hci11: command tx timeout [ 783.490380][T17185] Bluetooth: hci12: command tx timeout [ 785.370187][T17185] Bluetooth: hci7: command 0x0406 tx timeout [ 785.577508][T17185] Bluetooth: hci12: command tx timeout [ 787.649454][T19649] Bluetooth: hci12: command tx timeout [ 791.701768][T17185] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 791.840411][T17185] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 792.181157][T17185] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 792.731332][T17185] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 793.030037][T17185] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 795.499509][T17185] Bluetooth: hci13: command tx timeout [ 797.601635][T17185] Bluetooth: hci13: command tx timeout [ 799.660446][T17185] Bluetooth: hci13: command tx timeout [ 801.729743][T17185] Bluetooth: hci13: command tx timeout [ 814.090089][ T9601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.137383][ T9601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.901473][ T9601] bond0 (unregistering): Released all slaves [ 821.521126][T19649] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 821.690553][T19649] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 821.989896][T19649] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 822.319579][T19649] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 822.651259][T19649] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 825.968626][T19649] Bluetooth: hci14: command tx timeout [ 827.791248][T17185] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 828.079274][T17185] Bluetooth: hci14: command tx timeout [ 828.380065][T17185] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 828.661472][T17185] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 829.329158][T17185] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 829.699820][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 830.140215][ T51] Bluetooth: hci14: command tx timeout [ 832.219871][ T51] Bluetooth: hci14: command tx timeout [ 833.501784][ T51] Bluetooth: hci15: command tx timeout [ 834.650485][ T5859] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 835.051638][ T5859] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 835.209200][ T5859] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 835.589733][ T5859] Bluetooth: hci15: command tx timeout [ 835.770613][ T5859] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 836.159901][ T5859] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 836.530308][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 837.669579][T17185] Bluetooth: hci15: command tx timeout [ 839.751619][ T5859] Bluetooth: hci15: command tx timeout [ 839.979583][ T5859] Bluetooth: hci16: command tx timeout [ 841.678920][ T5859] Bluetooth: hci8: command 0x0406 tx timeout [ 842.069938][ T5859] Bluetooth: hci16: command tx timeout [ 844.149552][T19649] Bluetooth: hci16: command tx timeout [ 844.541685][ T5859] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 844.721221][ T5859] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 844.809867][ T5859] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 845.260724][ T5859] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 845.679936][ T5859] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 846.210072][T19649] Bluetooth: hci16: command tx timeout [ 848.451963][T19649] Bluetooth: hci17: command tx timeout [ 850.539346][T17185] Bluetooth: hci17: command tx timeout [ 851.901244][T17185] Bluetooth: hci9: command 0x0406 tx timeout [ 852.620753][T17185] Bluetooth: hci17: command tx timeout [ 854.711011][T17185] Bluetooth: hci17: command tx timeout [ 866.891889][T17185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.991074][T17185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 867.191902][T17185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 867.260499][T17185] Bluetooth: hci0: command 0x0406 tx timeout [ 867.801566][T17185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.190699][T19649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 871.980094][T19649] Bluetooth: hci1: command tx timeout [ 874.058665][T19649] Bluetooth: hci1: command tx timeout [ 876.138939][T19649] Bluetooth: hci1: command tx timeout [ 878.220736][T19649] Bluetooth: hci1: command tx timeout [ 885.500911][ T5859] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 885.709179][ T5859] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 885.820786][ T5859] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 886.250488][ T5859] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 886.500808][ T5859] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 889.500520][T19649] Bluetooth: hci10: command tx timeout [ 889.689385][T19649] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 889.830695][T19649] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 890.000733][T19649] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 890.470740][T19649] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 890.899767][T19649] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 891.570605][ T5859] Bluetooth: hci10: command tx timeout [ 893.681451][T19649] Bluetooth: hci10: command tx timeout [ 893.879731][ T5859] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 893.951175][ T5859] Bluetooth: hci11: command tx timeout [ 894.121805][ T5859] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 894.220845][ T5859] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 894.721435][ T5859] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 895.039578][ T5859] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 895.737222][T19649] Bluetooth: hci10: command tx timeout [ 896.070274][ T5859] Bluetooth: hci11: command tx timeout [ 897.899235][ T5859] Bluetooth: hci12: command tx timeout [ 898.129721][ T5859] Bluetooth: hci11: command tx timeout [ 899.260627][ T31] INFO: task syz-executor:19647 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.440149][ T31] Not tainted syzkaller #0 [ 899.629839][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.880209][ T31] task:syz-executor state:D stack:23880 pid:19647 tgid:19647 ppid:1 task_flags:0x400140 flags:0x00080003 [ 899.980575][ T5859] Bluetooth: hci12: command tx timeout [ 900.229644][ T5859] Bluetooth: hci11: command tx timeout [ 900.239690][ T31] Call Trace: [ 900.360239][ T31] [ 900.600750][ T31] __schedule+0x1798/0x4cc0 [ 900.749071][ T31] ? __lock_acquire+0xab9/0xd20 [ 901.169940][ T31] ? __lock_acquire+0xab9/0xd20 [ 901.279309][ T31] ? __pfx___schedule+0x10/0x10 [ 901.441395][ T31] ? schedule+0x91/0x360 [ 901.601135][ T31] schedule+0x165/0x360 [ 901.860245][ T31] schedule_preempt_disabled+0x13/0x30 [ 902.020667][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 902.051167][ T5859] Bluetooth: hci12: command tx timeout [ 902.250048][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 902.379427][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 902.570764][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 902.701704][ T31] ? __lock_acquire+0xab9/0xd20 [ 902.771584][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 903.021869][ T31] down_write+0x1ab/0x1f0 [ 903.301780][ T31] ? __pfx_down_write+0x10/0x10 [ 903.440940][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 903.571901][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 903.640587][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 903.700180][ T31] rdma_dev_exit_net+0x8c/0x340 [ 903.760411][ T31] ? __pfx___might_resched+0x10/0x10 [ 903.870138][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 904.101670][ T31] ? net_generic+0x1e/0x240 [ 904.131429][ T5859] Bluetooth: hci12: command tx timeout [ 904.271281][ T31] ? mutex_is_locked+0x17/0x50 [ 904.311947][ T31] ? rtnl_is_locked+0x15/0x20 [ 904.390530][ T31] ops_undo_list+0x49a/0x990 [ 904.690229][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 904.771235][ T31] ? ops_init+0x469/0x5c0 [ 904.800564][ T31] setup_net+0x2d6/0x320 [ 904.970998][ T31] ? __pfx_setup_net+0x10/0x10 [ 905.111400][ T31] ? copy_net_ns+0x337/0x4e0 [ 905.190753][ T31] ? down_read_killable+0x1d1/0x350 [ 905.299435][ T31] ? preinit_net+0x47d/0x740 [ 905.520662][ T31] copy_net_ns+0x34e/0x4e0 [ 905.620309][ T31] create_new_namespaces+0x3f3/0x720 [ 905.720311][ T31] ? security_capable+0x7e/0x2e0 [ 905.810702][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 905.889636][ T31] ksys_unshare+0x4c8/0x8c0 [ 906.030744][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 906.150184][ T31] __x64_sys_unshare+0x38/0x50 [ 906.240321][ T31] do_syscall_64+0xfa/0x3b0 [ 906.359903][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 906.470790][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.610030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 906.779552][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.889603][ T31] RIP: 0033:0x7f240db906c7 [ 907.001416][ T31] RSP: 002b:00007ffe56e31868 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 907.209185][ T31] RAX: ffffffffffffffda RBX: 00007f240dde5f40 RCX: 00007f240db906c7 [ 907.340288][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 907.569621][ T31] RBP: 00007f240dde67b8 R08: 0000000000000000 R09: 0000000000000000 [ 907.719681][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 907.850081][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 908.019023][ T31] [ 908.261656][ T31] INFO: task syz-executor:19655 blocked for more than 152 seconds. [ 908.429354][ T31] Not tainted syzkaller #0 [ 908.531088][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 908.769467][ T31] task:syz-executor state:D stack:23880 pid:19655 tgid:19655 ppid:1 task_flags:0x400140 flags:0x00080003 [ 908.978632][ T31] Call Trace: [ 908.981962][ T31] [ 909.060072][ T31] __schedule+0x1798/0x4cc0 [ 909.261260][ T31] ? __lock_acquire+0xab9/0xd20