last executing test programs: 4.924258262s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x25000000, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x90) 4.81145756s ago: executing program 0: unshare(0x2000400) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x200) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000600000000c00990000000000000000000600b100000000000600b100000200007c002a006512136589511b8cffffffffffff0802110000002d1a00000000000000000000000000000000000000000000000000008246000000fdffffff0802110000000000000000000000feffffff040008021100000000000000000802110000010000000000ffffffffffff000000000008021100000000000000"], 0xac}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x20, 0x80, 0x1dac, 0x40, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x64, 0x0, 0xff, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}, {[@ssrr={0x89, 0xf, 0x67, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x6, 0x11, "e25cc99d61f1106a62df800a815565"}, {0x6, 0xa, "43230ad6c1cd19c8"}]}, @end]}}}}}) r6 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'ip6gre0\x00', &(0x7f0000001c40)={'ip6tnl0\x00', r5, 0x2f, 0x0, 0xcc, 0x9, 0x64, @mcast1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7800, 0x20, 0xfffffffa, 0x5}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr, @remote}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', r5, 0x4, 0x0, 0xff, 0x0, 0x1c, @mcast1, @loopback, 0x80, 0x7, 0x1466, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000004200)={'syztnl1\x00', r5, 0x2f, 0x1f, 0x2, 0x800, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8, 0x10, 0x1, 0xa5}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000004040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x5, 0x8000, 0x40, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x40, 0x0, 0xffffffff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000041c0)={@ifindex=r10, 0x32, 0x1, 0x239166c7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000004140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004180)=[0x0, 0x0, 0x0]}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000004280)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x3f, 0x7f, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x8000, 0x700, 0x0, 0x4}}) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0xab, 0x0, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400}, 0x14}}, 0x0) 4.564358175s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=0x0], &(0x7f0000000140)='syzkaller\x00'}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67b}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)='d', 0xf000}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) write$binfmt_misc(r2, 0x0, 0xfffffc8f) splice(r1, 0x0, r4, 0x0, 0x800, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xa) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) pipe(0x0) r9 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.653855272s ago: executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000000006c2500000000002020207b1af8ff00000000bfa1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f00000002c0)={@empty, 0x0, 0x0, 0x80, 0x0, [{@loopback}, {@remote}, {@remote}, {@broadcast}, {@remote}, {@multicast1}, {@multicast1}, {@empty}]}}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1d, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) r3 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@isdn, &(0x7f00000001c0)=0x80) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1d, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.503555485s ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x43, 0xa0, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x68}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYRESDEC=r7, @ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000040)="b90103600040f000009e0f0200017f020001be3e7d2a182fff", 0x0, 0x9, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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", &(0x7f0000000000), 0x3}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x13, {{0x29, 0x0, 0x3e000000, @mcast1, 0x80000000}}}, 0x88) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r5) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000400)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r9, 0x800, 0x70bd2e, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x2000c004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f00000006c0)={@private2, @mcast1, @loopback={0xfec0ffff03000300}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80046, r3}) 3.417362123s ago: executing program 0: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)=0x100000001, 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0}, {&(0x7f0000000d00)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000d40)="257753698106255593cc9b3b89a89e35c92bfb971fa0b9b5c8c9542ecd148feba12c69c5d5f39fd44602356df719075325b51cd4465d365fd89bab486cb3b4bced92d232e04d5c3df03513eb2e9e70e48ab852d201805956400f28267fbd54338b6412c2b9e61c38dcb4ec87d63b7f965b3e55e59ac2a44a78039b753af41fec7503aca310fa013bdef9be32afd726fb7fe60ff59989c4d8f49315a6c1bedc38c0d174", 0xa3}, {&(0x7f0000000e00)="a5d8a3e3a14c2a325681f6c7337887abe71cfdab8f05baa1d6543dc7cbf8796b0e42a4a07b5b76b0e930936004fd08bda8ac7993c9c33abc7d61307d1c6190aaf2b4273add60ded5949118081fe5ea64b2163a56d67f58fff1f9278e9486e045dd2f6348518cf07f37cad1c9238eea03a53f4114f03685cafdcdf85d5d7363611b70beea521f5d1206968b1136da280a63b88843c0", 0x95}, {&(0x7f0000000ec0)="67a74b2dbc7c600c4651de0dabf2ed804a575b1d8808e029c0af3898403e7a47eebcc59a810882ffcfa3cdb3604848cd6cf4705580049e9138656d9992cf49c89234ca46fcd54634a3446d79c941d36baacd9e1c96ef87ddf5bc9eefbf5a9bf132ea909b0363fe55b5d3c4f4ff23bbaae518187a0fc0f9bb7304cc53fc3347b1d525992dbd8a92b2e537288e83b04719af69811d6acf061e2b10ba4e53bf18708a3e9d09cf3c6c9c2c84020abbdfa93c4e34e1311267e944e12d0e737e4ee4021ce0222cd61b9a43a4d9dc5195", 0xcd}, {&(0x7f0000000340)="3ab8d2284d4bf8a4b0c8b561436830962a06d2d8add412f522eb3670d05bcb751dc15ff4ec70a6b4a1d36f2dbcb47fe4b79712f729de22da394f119fa9160104000000000000d19bd5a753d41d969c3b5bf2db4425a302152c8b8ed3e6fe408357611f08f2d3dfd8b99f36d5329ed34fa1592b69c41c3e2b9f547754e75f92d3b5c988b7", 0x84}], 0x4}, {&(0x7f0000001040)=@in6={0xa, 0x4e22, 0x1000, @local, 0x400}, 0x1c, &(0x7f00000001c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000500000000000000f9ffffff01000000810000000300000007000000", @ANYRES32=0x0], 0x90, 0x800}], 0x3, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000002c0), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'macsec0\x00', 0xfffffffe}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) socket(0x2c, 0x4, 0x6a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000911821000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 3.337262674s ago: executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xe0, &(0x7f0000000580)=""/224, 0x40f00, 0x20, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000800)=[{0x0, 0x2, 0x10, 0x2}, {0x3, 0x1, 0xb}, {0x2, 0x4, 0x9, 0x5}], 0x10, 0x2b04a862}, 0x90) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000980)='afs_make_fs_call1\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, 0x1402, 0x1, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x90, 0xeb0}, [@map_fd={0x18, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x3ff}, 0x90) 2.913002471s ago: executing program 2: unshare(0x20000400) r0 = socket(0x29, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x119, 0x39, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000140), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x8100, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 2.550319181s ago: executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendmmsg$sock(r0, &(0x7f000000a840)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0xa, 0xfffffecd, @private0, 0x12}, 0x80, 0x0}}], 0x1, 0x0) 2.500556066s ago: executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r3}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 2.456140627s ago: executing program 3: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x21, 0x803, 0xfffffffc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000045) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x18848b48}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@can, 0x80, &(0x7f0000000900)=[{&(0x7f0000000080)="ce5fe7100a4bd288db2f28ab17368f933b868cffa0e54ee01b", 0x19}, {&(0x7f00000002c0)="4d66cf9b6e19b9698b16b8ea0bb969266b158d499fd23a2e40037f3164c4deeae2ec28b2eaf1a6ebe7e8c74aa668feee537bcee518c50be4ba28837a04a62298a6dfd2682567f621e17b62d8e4686f50cb847cb3f0ab49555ffe62", 0x5b}, {&(0x7f0000000340)="26d9e47adb9b3b6aea952877d3cdd38f12df23381bdaea5736b2b5191e99bb8bda7511e871faa15de1203d08ff2f0309b9fd03f0baf7b69bc7e527911c18c8e4f1fe4eff2ab37cb188d185d352476b9520e45c92914c4241469454a501dc9bf725eb037f48bda9a82194de2ccc610d3f3462c3a152a041c6f3adb3a9a48b33b0c983b898acc58ecc44ed14220bf8e57219bea1dfa3b006ebddd6ca2e6b2c5e37db955b9bc96b7f917cb054683cb29c9961bab8a00e26cb876c03ecbaeb17ccce3691e611c2e0", 0xc6}, {&(0x7f0000000480)="50988b8ea875c80dba61396e876fcb8e80dc45224211b54e1385a6ee88fe70f2acc7044435ca53b9c7c6a66a57ab6ccfb2b95ab4304bcef8877ab62d038008b8376e96d0e75f17fd5002b2c20578e0dc31f0c76b9f0e4a72eb224da4aef4e6d4df86a43672", 0x65}, {&(0x7f0000000500)="bde77895dac6e6c4ec797046145cf140bb80d1a0e3a2d3cf37fd3208aaf9df448d9478284e31cbcf3c562805f807f47b26fe05821e6e30377db47594eb1fa24ecc80f34e6996609d3f4e89cfccbdf70f30a4cb727a01626a352347e46b73ae614397cfcc6a1ffe22dd50f7eaa6eea222067b103eaf1d9cdf93faad252e765044794a2f9d5b4bdf80234afa91de899d3eff1beb659fce9d55a49ebe1ce068", 0x9e}, {&(0x7f00000005c0)="a9acf640d8b5c22c3505159b30db0c2adacc533de657db99cbaecefe723a606549143a2a0f8a6f939115e45f353faf062e9541d87164d65ac97244bfe9b5f4639d0700ccd5bb37f83beec834", 0x4c}, {&(0x7f0000000140)="e0", 0x1}, {&(0x7f0000000640)="adf71fccc41ab81111080d39c566f133bc7300ca8f07091f3b18d13e459cb9e1ba42bc08a568db482b7dcb420b3ffc85908feb282f366082b57120b92908701364b91b60f8b42af5d9881ad49e5e19df6c76a4e2ec96d30f5077fa175fb5f1eef0c67780da", 0x65}, {&(0x7f00000009c0)="d3d576f513205ec32915c94791c73f60ac5065acaf43c182481ba8cfa7b1a33f553c0f867f990d5d81f063313438fc8ac0269c3c48f892ed46046d745f50175c9f1ebdff02a16e8ca665c24a084e434a4f9131001ce45672850d1ca2d64e41fdfa0e4999ad097d7c5928c32ea5c736db2c354dcfbc001380b9bb8b3bc3fccec780f897fa68a73dbb0d5fde67c215b48a108e2046da755fe764b93a0bd084c9963efcb9f8631aabb2d478869fa80a3dfa23c75621be6c5579318fd19904eb06118c27126fc2001c0c94f97653bcc26d000699472397c60747e1cc6f70bbdcca768c45954d51bf1fc90424fa05f7ec03c8d3524a836991cd45bef615b8ffb4d78a64fa4b8e6216c4163175e5c04265fce50045c3d0ea5a8c94f341276c10b413ebe426d0b79b464ab73584841b2bcbb127e0e5a9cde7aa627468bc3c47fc83a7a1acc2e920e319972eeea3cd13e98e08d0f86d5032afbdfef27597ecb1c0918330faf3ce39e8ec9d305015be472d99f608562853ec65527d7ac71aec9d6ecc993caf86be8ead511d379616540cdd8aaab58206803295f28ef26df0876c9fc0197b6740d59964c71909e3d32f6de8982c53206b57d83b6c5d27bc6ad3a67f89bc9cfa3ea777ab74283ed8c79a2ddf82f1fd6d393544dcf64aeedaf1c4c23ad5c1d1405e858f3bf41fce50ac", 0xffffffffffffff72}], 0x9, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$inet6(0xa, 0x2, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x20) 2.417655233s ago: executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_MPU={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x28000600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffc}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r5) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.343980859s ago: executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xfffffffffffffea9) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000040601020000e96f1b3cc6ce18b80002"], 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @rand_addr, 0x1fffe}, 0x1c) (async) listen(0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4a24, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x0, @mcast2, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYRES16=r1], 0x248}}], 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) (async) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2.279478028s ago: executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbffb, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="47d36966856a", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "720b6398b5165a93"}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000640)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x8b, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "e9f89e0878f95643e7cdaf53bdc49c471b0be7dc7b1300adcff3056e1588537fa48cda5b9888a24b7c8e706faa368bf7eb5109eeba2dd57138755efb3aac71ef62c0e332a601cc98a417f8540e149546c086745069de5c61eb2d868b9d0c560dbe76c5978a474d85382abcc7a6044d2be1873fc959a8e27f2b75e6fe5f4564"}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendto$inet6(r1, &(0x7f0000002580)="b0", 0xfffffffffffffd57, 0x200000c1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="2a000000010000", 0x7) 2.269790837s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) socketpair(0x5, 0xa, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$AUDIT_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x3, &(0x7f00000033c0)={&(0x7f0000000000)=""/5}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000001c0)={0x20002008}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000100)={@random="856b934629fa", @local, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "dbb8ce9e6605a27c868b8e8e33d6fe620e5a33d756f58c13e02dc3367e02bdaeb492fc752fe7ab1f46d2fd825736b62c8c3cd58e9df46ee23294836e83302e92"}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) sendmsg$NFT_BATCH(r6, 0x0, 0x4040044) 1.61880912s ago: executing program 2: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000200000061116a00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3200000000050004"], 0x64}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb20, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, &(0x7f00000012c0)=ANY=[@ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, r0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xb, 0x0, &(0x7f00000007c0)="9f44948721919580684010", 0x0, 0x241, 0x0, 0xb0, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c"}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008003a"], 0x44}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0202000220000000000000000000000005000600000000000a004e20000000000000000000000000000000000000000000000000000000000200010000000400000006021800004005000500000000000a00000000000000ff01000000000000000000000000000100000000000000001200080008"], 0x100}}, 0x0) 1.507351032s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003540)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="31ab732abda06e22281b2f0df75394f09d", 0x11}], 0x1, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a00)=""/166, 0xa6}], 0x1}}], 0x1, 0x60, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0)="98e47c90dc1e126a0eba0a72ca0c02b676895bae342789bafa687cc08702b484a9e2b8b6cdda6a035ac9309bb01283c80b8d6c5316edf22133c47e3316ff7c0cbeea9db59026353d684a258d1dc4c044471fa385c35c7c7ba1dd16bf4494d86c5a8b2cb9bb4063908c6a32d03039fb64c6e7cd9c334143fc82957a8e723e678630c37baac53c90995feeb151", &(0x7f0000000200)=@udp=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) 1.453843502s ago: executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1000000) 1.303096811s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8}]}}}]}, 0x3c}}, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r6, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newtclass={0x2c, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xf}, {0xa, 0x10}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x58, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c044}, 0x80) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) write(r9, &(0x7f0000000300)="42f5d00b5115c3162d539386e28a4b58d4374b08d7be40c262b212c7ae13ae76558ba92f731bb9f3da7d5eed8d528927060b638b0aaea8dd914059d02b1f40f122cae09938b28af84804bdc10bf723e20ff8b2a8edf4aafc6ec260352bbb09d3698b6bf7ea5689a6a0fb2386937d52e31051540bcf70671e76f76d9c2440f2a456b1613221f0dad1b409ec51ecd01f9ab57b81d5ac2f1bde1cf84a85a8e228542f3acb0f9f1c6a35b3fc7064da6b80764cc1dec34fe2fb9bf63910c014b9288d8fd85920e043989151711c4ff5", 0xcd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x48100}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) 1.126703779s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local}, "170b95e8d972fe0a"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003780)={0xfec, 0x33, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xf7d, 0x0, 0x0, 0x1, [@generic, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x1d}, @generic, @generic="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", @generic="534eddf2cca966c265f6e83e1738eabd01284edc3dfd44684357c1cceea8c09c7d8f00d9a87f96ebbdc9785ad05a9f6409af", @generic]}, @nested={0x58, 0x0, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88G'}, @generic="1dd99b22ddc3ecca84bbda80c41ccc93273ef949ff5b88a8f1de839fe72ba09fb06573f24395f4a011625b4b3033fb320ae7f810a3a9644131a5402062a799c10f5039a01b6cf593dbac0ee9"]}]}, 0xfec}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4888, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0xff72}}, 0x4004) 1.098991894s ago: executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xe0, &(0x7f0000000580)=""/224, 0x40f00, 0x20, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000800)=[{0x0, 0x2, 0x10, 0x2}, {0x3, 0x1, 0xb}, {0x2, 0x4, 0x9, 0x5}], 0x10, 0x2b04a862}, 0x90) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socket(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000980)='afs_make_fs_call1\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, 0x1402, 0x1, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x90, 0xeb0}, [@map_fd={0x18, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x3ff}, 0x90) 978.917486ms ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0200000157a1f6ca367582e2156bf3613b23a9a6d300"/31], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) sendmsg$nl_route(r6, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006b00)={&(0x7f0000006980)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000039055dd96f5bb08704000000006100611e00"], 0x0, 0x2a}, 0x20) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) bind$unix(r9, &(0x7f0000000440)=@abs={0x1}, 0x6e) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r1, @ANYBLOB="9a"], 0x20}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r8) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xc0, r11, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 653.501618ms ago: executing program 1: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) (async) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)='\a', 0x1}, {&(0x7f0000000200)="ba", 0x1}], 0x3, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) unshare(0x20000600) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x7ec, 0x14, 0x2, 0x3, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x3}, [@generic="8f9e5d099f3f21489f82f8031a61dee2ddbd6553d33151cad13c29d7aab93dec2ace8f6390cc181bc464533e9439eb9dd534f66e2d8804212aca3e44e1b61e231ff746a0ce3afb5e6cdd1f07bbeea972f69a7deeb603b7b878aeb1dd814c3f34f33b4bbf84ea6402c49aed9d21c850cc61d2a5d5e0fc7088a50f62685c2ca6a694c121a8ecaf1f8bb5dbf4daf06d62bf10a683c09c1c24bf16581c752f181b42", @generic="80fbd6029796abcf6e7e88502873b2c8568b2d6a3d71c9815cc086337c24c7e8dc6e5b0f70198b53ad9d753a7bc59a6b7a5c67ae44262ff7988c27f535689cbfab7a748bc153d5c79e65", @generic="9456a01d1599c6bb587acb0f3ea0ee0d007e2eba0be75cae21b44adce28d80434cd38a4ce95cd7d1867f6aff0b76d57c94ccdd6c9a7e5db646bef414d559c8da4669601324b521a8c1b7136e90ae2034c69a7dd20d851f9daa69353f4a25ecd9b188f220a276a4ccf9b2bfc77d6dba3770baa624236539", @nested={0x2c8, 0xdc, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @uid=0xee00}, @generic="c42c9e6e52ce8a6fe2dbb6a4c1bd964db94eb34b17c5a54aac918513d1d795f66030975ad69ebd678e40f0c8c1fde3051a5fea9fe914a4a449000f67f24cf2ec88eefc8544f5fd481cebe63077d010a7817d4c016968a20293a6bf619b84e076864488bc611eaad5322ebcb21ae56cf2daa435bc07ad0cbb02865b4f48b93afa462335681fa4101f1faf1c668d1b9cc98a22680071e1d2e9bf4796979fcc6736d84b0cfe461a957c2c655404d8a9a09ab22f4fcf44a20391b2a338c3211cb368bcd764f4e59d0cf8545b3fcd6a5bdafd8fd030a8825f21c67c", @generic="915fc3be434ff2b5d9285c4f97f5d50d7a5674300b9c352b17a9f3c8bd23d2daad012931fb6ac98745a9b57f0dc405f566c6503a048f6ae34f08ecad8fda215772fbb9f5b9966dbb07056f1840470e73cad48f4d6e0fe275dc23ddf25bc98cb04cac62e5cab54c87c1b26471051ba5e448eebc7a92985164e1709ca4dddd0d8f1d26f09c5d5d7226f1d7ca611239297ffdb7", @generic="df61fdeb7939ec8bca783daef1e703888574a33b8ffe342eb44eb1da7524786b10a59228a5d88c43e797f8d4e92a0de31575159ee71c4daf5ab311f3067bac5c0742a58a6d10cbe5c824ff7e4c3562ee88f6ed35f56b7a26084456d9bae36ec036a37333858c1af9d289fad952b8881e431a0c8a10df65124f035b7bee379544c3b9f1c050fdd9e463d241a7f8", @generic="c9914a007171ce0f2684e6fe6322d2f3b37e3717f3c9ea45a842d703ece6ede46dc4aa2e74f5c65f18cd42f9e8a085ef6c56343874c0a788fbee3396300eef59c17cd22bb9b53335d2e7c1c162e4685b1365bc51a2eaf47f8c54e43060c881a73106a3326be07f7f9482cf4db473a9ea11a889eb972176", @generic="fb5793ad09d0253a379ca9e1c72c7c933a3b91f7026272255eb8df3347343d1c40fdcc61ac666895e98826eef4782a180fc9e491ab8b2f17df7d40e9b0f36ebb4e95d47d02f1e5c3a4c3354242"]}, @nested={0x20e, 0xb6, 0x0, 0x1, [@generic="b06d0081578c1013b52991f59ec31843a4acc915391715761b42aa87448ced5cf99eada8e6a228e3240fe051c1ff0c56cd2a3e3868abeb4893675ac699d5ec0402", @generic="eaa502b2cbdfa958a763d524eb1d458476ac33dde975be15154709503b713e6eaa5fa1bca7e4d4e121305d94c4579c5e0868890b611a8c8eed937b1e81735707ad94c3eb94dfd224", @generic="0721f8b88582bbaa809bcc10111456ac1f186f5aa1ebf5cb06aa2d4057ccaf8f5bb062be010a18d0e6e11b18b29a165a7a9b3c91b82ce0e69d77c2b7aef9e6101c513963da22652fba47f444b7cc765a24cacbd286ba3635b980ee08fd5509b648a2fbe91ded", @typed={0x8, 0xe9, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x1}, @generic, @generic="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"]}, @nested={0x10c, 0x35, 0x0, 0x1, [@generic="0e2e70ff1a235dba9d17b4ae4fae26a58167d9c7b981b0601b546ea21cd2372fb1a5344e4f107cc57fab8441afd6150eb282b510e41e8d0e08fa29e794c51a2f108ffd650ffd518762f6a8e4f20972e8323d688ee0384d85abe1241a8bf7f4a5909e7df3c5f207115ed98480ef5ec4c567e03ab531d68a4d37ec17a7906290052c954f1cc492061323e6328685a1854f607bbbc6e999e8a79e976514beaca9f862c9ca2801e4518404d8bc0d3dd9d7aad8f86fc8d152abf4c956487368d361c44c0039a1081efba9feeb4b4a200e96d6a2c2cb61169d50397d969e4fe82a2dce60f8cb31e5faf33c56077781", @typed={0x4, 0x71}, @typed={0x8, 0x113, 0x0, 0x0, @u32=0x3a6}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x86, 0x0, 0x0, @fd=r0}]}, @typed={0x7, 0x117, 0x0, 0x0, @str='*$\x00'}, @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="8d9699f3ff5533b5fcfd5a00780f190b12aba27694e1534cbf1c71313e137847e1d57f50dbb4ac169e93156e3e076b66a67cc899be05b6f074ad4753d565b059d45ef371f7ef4f9d47440790630d371576fce381dc80a1b82defd1e21ee0c5680624965f3d2954216601441295c4b2cd1af941e1fe21bb7c6caa03733125cf2f288c"]}, 0x7ec}, 0x1, 0x0, 0x0, 0x80}, 0x40011) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001e0001ffffa8d9f0c838070007"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r3) sendto$inet6(r6, 0x0, 0x0, 0x20008845, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x18) 613.645857ms ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/211, 0xd3}], 0x1}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus640-sse2)\x00'}, 0x21) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}) 611.27043ms ago: executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400010000000000000000", @ANYRES32], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001700)=@newtfilter={0x1410, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xd}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0x3}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x13bc, 0x2, [@TCA_U32_POLICE={0x474, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x9, 0x9, 0x0, {0x2, 0x2, 0x3, 0x9d, 0xfffa, 0x1}, {0xff, 0x1, 0x0, 0xae5c, 0x4, 0x4beb}, 0x6, 0x343, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x8001, 0x1, 0x3, 0x5, 0x34, 0x9, 0x1ff, 0x2, 0x7fff, 0xfffffff9, 0x2, 0x3ff, 0x40, 0x23c9, 0x4, 0x7fff, 0x9, 0x10000, 0x20, 0x3f, 0x9, 0x1f, 0xffffff80, 0x5, 0x1, 0xba7, 0x6, 0xc0, 0x1, 0x9d51, 0x9, 0x7, 0x4, 0x76e, 0xfffffff9, 0x0, 0xb5de, 0x3, 0x7fffffff, 0x4, 0x7, 0xfffffffb, 0x0, 0x1, 0x4, 0x4, 0x81, 0xffff, 0x800, 0x7, 0x5, 0x10000, 0x401, 0xffff, 0x101, 0x149, 0x15e0, 0x5, 0x4, 0x7, 0x10001, 0x0, 0x81, 0x9, 0x3, 0x67a1, 0x953, 0x3, 0x0, 0x7f, 0x7c70000, 0x3, 0x1, 0x8000, 0x10001, 0xed, 0xb7f2, 0x0, 0xfffffffe, 0x9, 0x1f, 0x3, 0xfffffff8, 0x80000000, 0xfffffffc, 0xffffffd9, 0xfc4, 0x2, 0xfffffffd, 0x1, 0x80, 0x3, 0x4, 0x3f, 0x3235, 0x7f, 0x10001, 0x4, 0x5, 0x0, 0xca1, 0x5, 0x3, 0x8, 0xffffff7f, 0xffffffff, 0x8, 0x91ca, 0x8, 0x1000, 0x51, 0x8001, 0xffffffff, 0x3, 0x4, 0x1, 0x1, 0x5, 0xfffeffff, 0xfa, 0x6, 0x7, 0x29, 0x55, 0x7, 0x6, 0x1ff, 0x7600000, 0xffffffff, 0x4, 0x7, 0x5, 0x100, 0x8, 0x200, 0x9, 0x1, 0x8, 0x80, 0x1f, 0x6, 0x7, 0x0, 0xffffffff, 0x0, 0x4, 0x5, 0x7f, 0x6, 0x4, 0x3a4, 0x2, 0x60, 0x6, 0x0, 0xfffffff8, 0x1f, 0x7, 0x2800000, 0x3bb0, 0xc9ba, 0x800, 0x20, 0x7, 0x4, 0x8cc, 0x800, 0x0, 0xfff, 0x8, 0x7, 0x3f, 0x7ff, 0x1, 0x6, 0x9, 0xfff, 0x1, 0x9, 0xfc4, 0x25, 0x1000, 0xffffffff, 0x3f, 0x7, 0x9, 0x2, 0x5, 0x3, 0x4, 0xe0, 0x400, 0x5, 0x1, 0x10001, 0x8, 0x10001, 0x8, 0x7, 0xfffffffe, 0x1, 0x7f, 0x4, 0xc8a2, 0xfffffc01, 0x10001, 0x8001, 0xe9, 0x200, 0x10000, 0x1, 0x200, 0x6, 0x20, 0x7, 0x80, 0xfffffffc, 0x8, 0x7f, 0xffffffff, 0x4, 0x0, 0x0, 0x7fff, 0x10001, 0x80000000, 0x0, 0xffffffff, 0x9, 0x1000, 0xffff8001, 0x2fc1eb30, 0x80, 0x300000, 0x5, 0x4, 0x9c49, 0x0, 0x7, 0x800, 0x8, 0x7, 0x9d, 0x3, 0x9, 0x9c88, 0x2, 0x4, 0x7, 0x7fffffff, 0x82, 0x1f, 0x0, 0xffffd9e6]}]}, @TCA_U32_ACT={0xa90, 0x7, [@m_police={0x8f8, 0x11, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7fffffff, 0x3, 0xf53, 0x40, 0x6, 0x4, 0x4, 0x5, 0x20, 0x1000, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x9, 0x0, 0x8, 0x2, 0xfffffff8, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60, 0x3, 0x6, 0xfffffffe, 0x80, 0x5, 0x9, 0x0, 0x5, 0x7ff, 0x0, 0x61, 0x2, 0x0, 0x9, 0x4, 0x0, 0x1, 0x915, 0x20, 0xfffffff9, 0x7fff, 0x0, 0x101, 0x401, 0x2355ef64, 0x80, 0x6, 0x0, 0xffffffff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7ea, 0x3bf1c916, 0x9, 0xfffff801, 0x6eb0000, 0x8, 0x5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x8, 0x400, 0x0, 0x80000001, 0x8, 0x100, 0xff, 0x9, 0x1f, 0x5, 0x0, 0x0, 0xe51a, 0x6f, 0xe6d, 0x3, 0x2000, 0x7fffffff, 0x10001, 0x7, 0x0, 0x7, 0x0, 0x800, 0x8000, 0x8, 0x2bab, 0x2, 0x3, 0xf401, 0xfffffffa, 0xd5fe, 0xccaa, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x0, 0x2, 0xff, 0x98, 0x5, 0x5, 0x27, 0x0, 0xe6, 0x401, 0x8001, 0x1, 0x3, 0x7fff, 0x20, 0xffff31ec, 0x5, 0x4, 0x1b2, 0xffffffff, 0x0, 0xf3cf, 0x1, 0xf, 0x401, 0x0, 0x4, 0x7f, 0xfc0, 0x9, 0x1, 0x7, 0x7f, 0x1, 0x1000, 0x7, 0x0, 0x8ce, 0xff, 0x4, 0x9, 0x800, 0x0, 0x6, 0x0, 0x0, 0xd74, 0x5, 0x0, 0xda, 0x5, 0x0, 0x3, 0x1f, 0x0, 0x200, 0x8, 0x0, 0x400, 0x7ff, 0x0, 0x3f, 0x800, 0x10000, 0x51700000, 0x0, 0x8745, 0x0, 0xfffffff7, 0x100, 0x6, 0x0, 0x100, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4, 0x4, 0x3b, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x8, 0x7, 0x0, 0x80000001, 0x3ff, 0x0, 0x6, 0x4, 0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x400, 0x48f, 0x2, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x1000, 0x4, 0x10000, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x14, 0x0, 0x20, 0x0, 0x5, {0x0, 0x0, 0x8a65, 0x0, 0x0, 0x1f}, {0x0, 0x0, 0x0, 0x3, 0x9, 0x283}, 0xd81d, 0x7, 0x10001}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0xff, 0x528, 0x7fff, 0xaf1, 0x7, 0x9, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x200, 0xb547, 0x5, 0x4, 0x5, 0x6, 0x100, 0x0, 0x7, 0x0, 0xfffffffc, 0x3, 0x8, 0x7fffffff, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3f, 0xb7c, 0x0, 0x81, 0x5, 0x3ff, 0x7ff, 0x7fff, 0x81, 0x4, 0x2000000, 0x5a00, 0x8, 0x20, 0x0, 0x0, 0x3, 0x7f, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x40, 0x7, 0x3, 0x0, 0x8000, 0x0, 0x0, 0x46, 0x10000, 0xe00, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x4, 0x2, 0x0, 0x82a0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x6, 0xcd, 0x0, 0x1, 0x693a758d, 0x3f, 0xab, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0xfb3, 0x81, 0x8ae, 0xfffffff7, 0xf343, 0x400, 0xab44, 0x40, 0x0, 0x8, 0x1, 0x4, 0x9, 0x864b7c5d, 0x669, 0x4, 0x6, 0x0, 0x0, 0x4, 0xb079, 0x3, 0x3ff, 0x100, 0xfffffffb, 0x10001, 0x5, 0x0, 0x0, 0x9b0, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x0, 0xfffffcd6, 0xb5, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3f, 0x0, 0x11, 0x101, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x8000, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x13, 0x8, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0xe56, 0x8, 0x0, 0x0, 0x18000, 0x400, 0x401, 0x2, 0x2, 0x1, 0xffff, 0x4, 0xfc2, 0x3, 0x0, 0x280, 0xea, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x4, 0x7, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b8, 0x80000001, 0x4, 0x0, 0x2, 0x0, 0x10001, 0x603, 0x40, 0xe2, 0x7, 0x1000, 0xf1, 0x0, 0x0, 0xbe02, 0x401]}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x6d, 0x6, "7859625aadf040bb3e191119a8696df1e50e4a4c4f97db9660055010a18ea41caec1f79e3b7b65f04b18dc577bed0e16abffe87a2dfd637784888848318be68450fa594049019694d522eb7e615c92271edeaae6586b632dc9757e820b13a41fcf5d0b78dc031eaf65"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x6c, 0xe, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xb314, 0x0, 0x6c35, 0x5, 0x0, {0x0, 0x1, 0xf64a, 0x0, 0x8}, {0x1}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xe0, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x0, 0x800, 0x4}}}]}, {0x94, 0x6, "d750526e0de33581f78b366176ee7a27196b97b0a4bd12d4353b441d28389cca82b6126a644cc24a635aade4ad483f676bd5f6edde5e8d37a8350bc1f8a735a4610f8a39d5c273973eb426eba8a249544147b2137e5a164404cfd90392e57260ca651e6f57f40fe0e6d2fee3dcddf7572b3ea14de93889353dca5a057a1a4641fdbc26e1f1690298e900a85c2d6e9ec0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x1}}, @TCA_U32_HASH={0x8}, @TCA_U32_SEL={0x44, 0x5, {0x5, 0x3d, 0xfe, 0x8, 0x0, 0x9, 0x0, 0x4, [{0x7, 0x3, 0x0, 0x15f8}, {0x7, 0x999a}, {0x100, 0x2}]}}, @TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0xb5cc, 0x7ff, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7a0d, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x80000000, 0x8, 0x0, 0x4, 0x8, 0x0, 0x2, 0x400, 0x3, 0x1f, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x5, 0x101, 0x1, 0x0, 0xffff, 0x6, 0x1, 0x7, 0x5, 0x60cc2584, 0x4, 0x3, 0x6, 0x8, 0x7, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x101, 0x81, 0x7ff, 0x250, 0x0, 0x1f, 0x0, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0xb3, 0x7fffffff, 0x0, 0x3, 0x80, 0x3, 0x0, 0x0, 0xc05, 0x1ff, 0x20, 0x40, 0x3, 0x0, 0x4, 0x6, 0xfffffffe, 0xbcab, 0x1, 0x800, 0x2, 0x0, 0x0, 0x0, 0xb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x7, 0x0, 0x0, 0x222, 0x100, 0x8001, 0xf1, 0x6, 0x1, 0x7, 0x3d, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x6, 0x7, 0xffa, 0x0, 0x1ae0, 0x7, 0x0, 0x9, 0x1, 0x3f, 0x5, 0x0, 0x0, 0x4, 0xf9, 0x4, 0x401, 0x4, 0x0, 0x0, 0x0, 0x2, 0xacf, 0x0, 0x1, 0x0, 0x35bf9e56, 0x2, 0x0, 0x20, 0x19, 0x0, 0x20, 0xb456, 0x0, 0x8, 0xf4b, 0x1, 0x1, 0x0, 0x5, 0x2, 0x9, 0x1, 0x0, 0x777b482d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfd8b, 0x601a, 0x9883, 0x0, 0x7, 0x2, 0x0, 0x0, 0x2, 0xffffffff, 0x200, 0x251f, 0x6, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20, 0x7fffffff, 0xf3a, 0x8000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x3, 0x0, 0x2, 0x2, 0x0, 0x0, 0x81, 0x0, 0xffffff00, 0x0, 0x3f, 0x200, 0x8, 0x401, 0x0, 0x697, 0x10001, 0x0, 0x0, 0x2bce, 0x0, 0xde01]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x6, 0x0, 0x0, {}, {0x0, 0x5, 0x0, 0x7}, 0x0, 0x1f}}]}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x90}}]}, 0x1410}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 496.407358ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000240)=0x8) 472.597232ms ago: executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r1}, 0x5e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000010000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xc4}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 290.937257ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@null, @remote, @netrom, @netrom, @rose, @netrom, @null, @null]}, &(0x7f0000000000)=0x48, 0xa4ada168598ee614) r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 270.548589ms ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x34}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x2, 0x0, [{@local}]}]}}}], 0x20}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000007, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x0) 0s ago: executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xe9, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2dc}, {&(0x7f0000000bc0)="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", 0x1dd}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000001e80)="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", 0x294}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. 2024/06/12 13:35:30 fuzzer started 2024/06/12 13:35:30 dialing manager at 10.128.0.169:30018 [ 71.103766][ T5102] cgroup: Unknown subsys name 'net' [ 71.294031][ T5102] cgroup: Unknown subsys name 'rlimit' [ 71.624347][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.632451][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/12 13:35:32 starting 5 executor processes [ 72.768524][ T5113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.022487][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.042953][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.052118][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.072154][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.080139][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.088596][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.096511][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.107679][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.115076][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.122621][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.130697][ T5138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.130917][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.140443][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.149049][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.155516][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.161175][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.169469][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.176834][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.183571][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.188989][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.195759][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.204695][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.212092][ T5138] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.224342][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.224471][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.232651][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.239617][ T5140] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.267471][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.279746][ T5138] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.319339][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.905918][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 75.005042][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 75.059541][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 75.181332][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.191183][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.199772][ T5123] bridge_slave_0: entered allmulticast mode [ 75.207864][ T5123] bridge_slave_0: entered promiscuous mode [ 75.228244][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 75.277301][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.285180][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.292848][ T5123] bridge_slave_1: entered allmulticast mode [ 75.301384][ T5123] bridge_slave_1: entered promiscuous mode [ 75.381134][ T5135] chnl_net:caif_netlink_parms(): no params data found [ 75.393389][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.401785][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.409353][ T5122] bridge_slave_0: entered allmulticast mode [ 75.417762][ T5122] bridge_slave_0: entered promiscuous mode [ 75.426353][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.433649][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.441062][ T5122] bridge_slave_1: entered allmulticast mode [ 75.448480][ T5122] bridge_slave_1: entered promiscuous mode [ 75.522268][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.535493][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.584543][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.597647][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.606359][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.615452][ T5127] bridge_slave_0: entered allmulticast mode [ 75.624549][ T5127] bridge_slave_0: entered promiscuous mode [ 75.703330][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.714875][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.723679][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.731426][ T5127] bridge_slave_1: entered allmulticast mode [ 75.740860][ T5127] bridge_slave_1: entered promiscuous mode [ 75.764833][ T5123] team0: Port device team_slave_0 added [ 75.776211][ T5123] team0: Port device team_slave_1 added [ 75.797306][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.805130][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.813577][ T5132] bridge_slave_0: entered allmulticast mode [ 75.821764][ T5132] bridge_slave_0: entered promiscuous mode [ 75.831566][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.841611][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.849389][ T5132] bridge_slave_1: entered allmulticast mode [ 75.856987][ T5132] bridge_slave_1: entered promiscuous mode [ 75.896473][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.974950][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.999725][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.007457][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.036395][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.052644][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.061468][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.088366][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.153994][ T5122] team0: Port device team_slave_0 added [ 76.186074][ T5127] team0: Port device team_slave_0 added [ 76.195051][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.205218][ T5135] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.214049][ T5135] bridge_slave_0: entered allmulticast mode [ 76.221382][ T5135] bridge_slave_0: entered promiscuous mode [ 76.231137][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.238595][ T5135] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.245803][ T5135] bridge_slave_1: entered allmulticast mode [ 76.253072][ T5135] bridge_slave_1: entered promiscuous mode [ 76.260782][ T5134] Bluetooth: hci0: command tx timeout [ 76.268542][ T5134] Bluetooth: hci1: command tx timeout [ 76.276421][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.289129][ T5122] team0: Port device team_slave_1 added [ 76.325776][ T5127] team0: Port device team_slave_1 added [ 76.338763][ T5134] Bluetooth: hci3: command tx timeout [ 76.338788][ T5138] Bluetooth: hci2: command tx timeout [ 76.367835][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.418515][ T5134] Bluetooth: hci4: command tx timeout [ 76.466539][ T5132] team0: Port device team_slave_0 added [ 76.474975][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.483503][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.513498][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.533972][ T5123] hsr_slave_0: entered promiscuous mode [ 76.541069][ T5123] hsr_slave_1: entered promiscuous mode [ 76.552693][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.563111][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.594988][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.612212][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.620478][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.651868][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.670824][ T5135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.683754][ T5132] team0: Port device team_slave_1 added [ 76.705891][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.713592][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.740652][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.767431][ T5135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.871399][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.879146][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.906989][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.920773][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.928120][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.955138][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.067696][ T5127] hsr_slave_0: entered promiscuous mode [ 77.076318][ T5127] hsr_slave_1: entered promiscuous mode [ 77.084504][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.092861][ T5127] Cannot create hsr debugfs directory [ 77.119748][ T5122] hsr_slave_0: entered promiscuous mode [ 77.127777][ T5122] hsr_slave_1: entered promiscuous mode [ 77.136520][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.146175][ T5122] Cannot create hsr debugfs directory [ 77.165988][ T5135] team0: Port device team_slave_0 added [ 77.224691][ T5135] team0: Port device team_slave_1 added [ 77.250144][ T5132] hsr_slave_0: entered promiscuous mode [ 77.257104][ T5132] hsr_slave_1: entered promiscuous mode [ 77.264543][ T5132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.272575][ T5132] Cannot create hsr debugfs directory [ 77.375406][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.383107][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.410703][ T5135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.493200][ T5135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.500905][ T5135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.528640][ T5135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.735103][ T5135] hsr_slave_0: entered promiscuous mode [ 77.742606][ T5135] hsr_slave_1: entered promiscuous mode [ 77.749974][ T5135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.757852][ T5135] Cannot create hsr debugfs directory [ 77.872347][ T5123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.885765][ T5123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.920566][ T5123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.935177][ T5123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.041989][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.056350][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.101541][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.145738][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.210001][ T5132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.247153][ T5132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.262895][ T5132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.288113][ T5132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.340536][ T5138] Bluetooth: hci0: command tx timeout [ 78.346133][ T5134] Bluetooth: hci1: command tx timeout [ 78.419145][ T5134] Bluetooth: hci3: command tx timeout [ 78.428996][ T5134] Bluetooth: hci2: command tx timeout [ 78.457571][ T5127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.491428][ T5127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.500479][ T5134] Bluetooth: hci4: command tx timeout [ 78.513320][ T5127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.526243][ T5127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.614858][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.658104][ T5135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.685124][ T5135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.697436][ T5135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.715605][ T5135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.773567][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.801386][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.836894][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.844886][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.858697][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.865950][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.915756][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.937018][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.998065][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.005860][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.017963][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.026045][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.121322][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.146265][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.189499][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.197996][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.251167][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.299776][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.307278][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.363600][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.370830][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.462870][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.470224][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.536749][ T5135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.706968][ T5135] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.754843][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.762081][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.794242][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.846987][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.890169][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.899610][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.114155][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.244990][ T5122] veth0_vlan: entered promiscuous mode [ 80.337953][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.373141][ T5122] veth1_vlan: entered promiscuous mode [ 80.419577][ T5138] Bluetooth: hci0: command tx timeout [ 80.425863][ T5134] Bluetooth: hci1: command tx timeout [ 80.488108][ T5132] veth0_vlan: entered promiscuous mode [ 80.500316][ T5134] Bluetooth: hci2: command tx timeout [ 80.506345][ T5134] Bluetooth: hci3: command tx timeout [ 80.555469][ T5123] veth0_vlan: entered promiscuous mode [ 80.581011][ T5134] Bluetooth: hci4: command tx timeout [ 80.586491][ T5132] veth1_vlan: entered promiscuous mode [ 80.595404][ T5127] veth0_vlan: entered promiscuous mode [ 80.609633][ T5122] veth0_macvtap: entered promiscuous mode [ 80.625513][ T5127] veth1_vlan: entered promiscuous mode [ 80.650619][ T5123] veth1_vlan: entered promiscuous mode [ 80.663396][ T5122] veth1_macvtap: entered promiscuous mode [ 80.719950][ T5135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.736180][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.772599][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.804209][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.815137][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.827092][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.838306][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.884012][ T5127] veth0_macvtap: entered promiscuous mode [ 80.894785][ T5123] veth0_macvtap: entered promiscuous mode [ 80.932365][ T5132] veth0_macvtap: entered promiscuous mode [ 80.944794][ T5132] veth1_macvtap: entered promiscuous mode [ 80.953741][ T5123] veth1_macvtap: entered promiscuous mode [ 80.982922][ T5127] veth1_macvtap: entered promiscuous mode [ 81.005028][ T5135] veth0_vlan: entered promiscuous mode [ 81.050807][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.064350][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.076990][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.091884][ T5135] veth1_vlan: entered promiscuous mode [ 81.146442][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.157512][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.168688][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.180603][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.196642][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.206522][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.218092][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.232718][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.251823][ T2844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.273380][ T2844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.274216][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.293689][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.309930][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.322080][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.335313][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.384867][ T5132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396860][ T5132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.407010][ T5132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.419145][ T5132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433403][ T5127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.443582][ T5127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.453523][ T5127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.465193][ T5127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.478189][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.489370][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.500884][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.514938][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.528805][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.543394][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.556069][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.577702][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.591492][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.602365][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.613056][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.624576][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.638742][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.651431][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.672407][ T5135] veth0_macvtap: entered promiscuous mode [ 81.702035][ T5135] veth1_macvtap: entered promiscuous mode [ 81.710543][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.726642][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.775457][ T5123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.794006][ T5123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.803776][ T5123] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.812820][ T5123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.837262][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.851024][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.869694][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.881271][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.898199][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.917251][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.934489][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.945861][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.966126][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.030985][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.053426][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.072712][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.093775][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.104499][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.141006][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.182322][ T5135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.205908][ T5135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.228840][ T5135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.250468][ T5135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.267073][ T5135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.290151][ T5135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.308327][ T5135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358039][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.412107][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.446678][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.485176][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.502530][ T5134] Bluetooth: hci0: command tx timeout [ 82.502534][ T5138] Bluetooth: hci1: command tx timeout [ 82.511729][ T5210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.579754][ T5140] Bluetooth: hci3: command tx timeout [ 82.586224][ T5140] Bluetooth: hci2: command tx timeout [ 82.659116][ T5140] Bluetooth: hci4: command tx timeout [ 82.699647][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.743501][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.766497][ T2844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.785286][ T2844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.969262][ T2461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.993281][ T2461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.062163][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.121282][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.240779][ T2486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.273433][ T2486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.319397][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.371603][ T2486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.376865][ T5225] Bluetooth: MGMT ver 1.22 [ 83.392003][ T5218] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.419118][ T2486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.880523][ T5241] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 84.699813][ T5252] Zero length message leads to an empty skb [ 84.719443][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.732250][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.750579][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.764026][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.783438][ T5138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.799136][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.985839][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.013019][ T5261] syz-executor.4[5261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.013215][ T5261] syz-executor.4[5261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.143279][ T5270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.192463][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.365967][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.422544][ T5281] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.459572][ T5138] Bluetooth: hci0: command tx timeout [ 85.489608][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.529134][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.990848][ T44] bridge_slave_1: left allmulticast mode [ 85.996820][ T44] bridge_slave_1: left promiscuous mode [ 86.004845][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.051760][ T44] bridge_slave_0: left allmulticast mode [ 86.060587][ T44] bridge_slave_0: left promiscuous mode [ 86.066466][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.898725][ T5138] Bluetooth: hci3: command tx timeout [ 86.987130][ T932] cfg80211: failed to load regulatory.db [ 88.978905][ T5138] Bluetooth: hci3: command tx timeout [ 89.141635][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.160740][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.175330][ T44] bond0 (unregistering): Released all slaves [ 89.228154][ T5314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.478948][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.594897][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.737303][ T5341] dccp_invalid_packet: P.Data Offset(68) too large [ 89.852658][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88807a4a6400: rx timeout, send abort [ 89.979488][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 90.116575][ T44] hsr_slave_0: left promiscuous mode [ 90.141990][ T44] hsr_slave_1: left promiscuous mode [ 90.155963][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.164833][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.175197][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.189826][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.226956][ T44] veth1_macvtap: left promiscuous mode [ 90.244582][ T44] veth0_macvtap: left promiscuous mode [ 90.253919][ T44] veth1_vlan: left promiscuous mode [ 90.261950][ T44] veth0_vlan: left promiscuous mode [ 90.366121][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88807a4a6400: abort rx timeout. Force session deactivation [ 90.679421][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.935432][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.060114][ T5138] Bluetooth: hci3: command tx timeout [ 91.083609][ T44] team0 (unregistering): Port device team_slave_1 removed [ 91.157804][ T44] team0 (unregistering): Port device team_slave_0 removed [ 91.822307][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.978070][ T5393] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.051443][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.359575][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.400209][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.407640][ T5254] bridge_slave_0: entered allmulticast mode [ 92.442096][ T5254] bridge_slave_0: entered promiscuous mode [ 92.479889][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.507791][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.534775][ T5254] bridge_slave_1: entered allmulticast mode [ 92.568667][ T5254] bridge_slave_1: entered promiscuous mode [ 92.607263][ T5414] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 92.781679][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.810385][ T5415] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 92.985834][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.154526][ T5138] Bluetooth: hci3: command tx timeout [ 93.246450][ T5254] team0: Port device team_slave_0 added [ 93.344386][ T5254] team0: Port device team_slave_1 added [ 93.503764][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.514311][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.578889][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.653638][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.665195][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.726391][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.749301][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.764894][ T5449] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.914221][ T5254] hsr_slave_0: entered promiscuous mode [ 93.930235][ T5254] hsr_slave_1: entered promiscuous mode [ 93.945962][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.956956][ T5254] Cannot create hsr debugfs directory [ 94.253582][ T5463] __nla_validate_parse: 1 callbacks suppressed [ 94.253606][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.327346][ T5474] openvswitch: netlink: IP tunnel dst address not specified [ 94.809393][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.156041][ T5254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.204678][ T5254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.240015][ T5254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.271874][ T5254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.393198][ T5508] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 95.693686][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.728914][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.754745][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.762076][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.835228][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.842820][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.021200][ T5254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.864927][ T5551] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.874314][ T5551] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.186444][ T5551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.279302][ T5551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.569783][ T5551] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.590626][ T5551] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.610571][ T5551] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.638721][ T5551] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.821915][ T5563] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 97.844643][ T5563] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 97.909514][ T5593] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.975821][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.106408][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.351551][ T5254] veth0_vlan: entered promiscuous mode [ 98.400147][ T5254] veth1_vlan: entered promiscuous mode [ 98.545894][ T5254] veth0_macvtap: entered promiscuous mode [ 98.614148][ T5254] veth1_macvtap: entered promiscuous mode [ 98.653965][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.681686][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.694555][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.710369][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.726711][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.743751][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.761509][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.795992][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.817341][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.833497][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.850409][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.861853][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.872940][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.886843][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.959281][ T5254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.975665][ T5254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.995677][ T5254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.020265][ T5254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.050834][ T5626] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 99.064140][ T5626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.340823][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.376970][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.505662][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.517111][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.708573][ T5644] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.942805][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.970509][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.550510][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.712519][ T5684] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 100.713615][ T5687] Bluetooth: MGMT ver 1.22 [ 101.217569][ T5715] ebt_limit: overflow, try lower: 0/0 [ 101.231528][ T5714] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.476420][ T5728] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.518888][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.858904][ T5746] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 101.907686][ T5749] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 101.964844][ T5756] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.112345][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.316230][ T5769] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.334385][ T5771] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.360464][ T5771] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.972522][ T5804] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 102.985372][ T5804] bridge0: port 3(dummy0) entered blocking state [ 102.993507][ T5804] bridge0: port 3(dummy0) entered disabled state [ 103.001149][ T5804] dummy0: entered allmulticast mode [ 103.009839][ T5804] dummy0: entered promiscuous mode [ 103.020525][ T5804] bridge0: port 3(dummy0) entered blocking state [ 103.027186][ T5804] bridge0: port 3(dummy0) entered forwarding state [ 103.859831][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.867736][ T5138] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.956040][ T5826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.217310][ T5844] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 104.481903][ T5856] team0: entered promiscuous mode [ 104.488005][ T5856] team_slave_0: entered promiscuous mode [ 104.495410][ T5856] team_slave_1: entered promiscuous mode [ 104.528986][ T5859] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 104.591707][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.610423][ T5859] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.620721][ T5856] team0: left promiscuous mode [ 104.627009][ T5856] team_slave_0: left promiscuous mode [ 104.635859][ T5856] team_slave_1: left promiscuous mode [ 104.646931][ T5861] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 104.667261][ T5861] bond0: (slave team0): Releasing backup interface [ 104.707186][ T5861] bridge0: port 4(team0) entered blocking state [ 104.715900][ T5861] bridge0: port 4(team0) entered disabled state [ 104.723104][ T5861] team0: entered allmulticast mode [ 104.728989][ T5861] team_slave_0: entered allmulticast mode [ 104.734983][ T5861] team_slave_1: entered allmulticast mode [ 104.744664][ T5861] team0: entered promiscuous mode [ 104.750549][ T5861] team_slave_0: entered promiscuous mode [ 104.756896][ T5861] team_slave_1: entered promiscuous mode [ 104.917427][ T5869] __nla_validate_parse: 4 callbacks suppressed [ 104.917535][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.987558][ T5874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.995615][ T5874] IPv6: NLM_F_CREATE should be set when creating new route [ 105.133766][ T5886] x_tables: ip_tables: ah match: only valid for protocol 51 [ 105.193333][ T5886] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 105.219380][ T5886] CPU: 1 PID: 5886 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0 [ 105.229970][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.240437][ T5886] Call Trace: [ 105.243834][ T5886] [ 105.246899][ T5886] dump_stack_lvl+0x241/0x360 [ 105.251862][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.257211][ T5886] ? __pfx__printk+0x10/0x10 [ 105.261997][ T5886] ? __rcu_read_unlock+0xa1/0x110 [ 105.267840][ T5886] warn_alloc+0x278/0x410 [ 105.274248][ T5886] ? stack_depot_save_flags+0x6e4/0x830 [ 105.280129][ T5886] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 105.286340][ T5886] ? __pfx_warn_alloc+0x10/0x10 [ 105.291316][ T5886] ? kasan_save_track+0x3f/0x80 [ 105.296300][ T5886] ? __kasan_kmalloc+0x98/0xb0 [ 105.301092][ T5886] ? xsk_setsockopt+0x598/0x950 [ 105.305982][ T5886] ? do_sock_setsockopt+0x3af/0x720 [ 105.311228][ T5886] ? __sys_setsockopt+0x1ae/0x250 [ 105.316273][ T5886] ? __x64_sys_setsockopt+0xb5/0xd0 [ 105.321497][ T5886] ? do_syscall_64+0xf3/0x230 [ 105.326217][ T5886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.332433][ T5886] __vmalloc_node_range_noprof+0x130/0x1460 [ 105.338516][ T5886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 105.344957][ T5886] ? __kasan_kmalloc+0x98/0xb0 [ 105.349837][ T5886] ? xskq_create+0x54/0x170 [ 105.354538][ T5886] vmalloc_user_noprof+0x74/0x80 [ 105.359870][ T5886] ? xskq_create+0xb6/0x170 [ 105.364416][ T5886] xskq_create+0xb6/0x170 [ 105.369059][ T5886] xsk_init_queue+0xa1/0x100 [ 105.373854][ T5886] xsk_setsockopt+0x598/0x950 [ 105.378593][ T5886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.384180][ T5886] ? __pfx_lock_acquire+0x10/0x10 [ 105.389315][ T5886] ? aa_sock_opt_perm+0x79/0x120 [ 105.394284][ T5886] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 105.400026][ T5886] ? security_socket_setsockopt+0x87/0xb0 [ 105.405793][ T5886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.411377][ T5886] do_sock_setsockopt+0x3af/0x720 [ 105.416549][ T5886] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 105.422298][ T5886] ? __fget_files+0x29/0x470 [ 105.427239][ T5886] ? __fget_files+0x3f6/0x470 [ 105.432058][ T5886] __sys_setsockopt+0x1ae/0x250 [ 105.436969][ T5886] __x64_sys_setsockopt+0xb5/0xd0 [ 105.442099][ T5886] do_syscall_64+0xf3/0x230 [ 105.446660][ T5886] ? clear_bhb_loop+0x35/0x90 [ 105.451368][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.457317][ T5886] RIP: 0033:0x7f93fd47cea9 [ 105.462280][ T5886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 105.482037][ T5886] RSP: 002b:00007f93fe1ee0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.490481][ T5886] RAX: ffffffffffffffda RBX: 00007f93fd5b3f80 RCX: 00007f93fd47cea9 [ 105.498474][ T5886] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 105.506895][ T5886] RBP: 00007f93fd4ebff4 R08: 0000000000000020 R09: 0000000000000000 [ 105.515671][ T5886] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 105.523970][ T5886] R13: 000000000000000b R14: 00007f93fd5b3f80 R15: 00007ffda2735938 [ 105.532461][ T5886] [ 105.549790][ T5886] Mem-Info: [ 105.553181][ T5886] active_anon:17623 inactive_anon:0 isolated_anon:0 [ 105.553181][ T5886] active_file:0 inactive_file:46417 isolated_file:0 [ 105.553181][ T5886] unevictable:768 dirty:51 writeback:0 [ 105.553181][ T5886] slab_reclaimable:10307 slab_unreclaimable:93509 [ 105.553181][ T5886] mapped:18400 shmem:1466 pagetables:709 [ 105.553181][ T5886] sec_pagetables:0 bounce:0 [ 105.553181][ T5886] kernel_misc_reclaimable:0 [ 105.553181][ T5886] free:1387646 free_pcp:1307 free_cma:0 [ 105.604911][ T5886] Node 0 active_anon:70492kB inactive_anon:0kB active_file:0kB inactive_file:185588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73600kB dirty:200kB writeback:0kB shmem:4328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no [ 105.662145][ T5886] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 105.700471][ T5886] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.737638][ T5886] lowmem_reserve[]: 0 2571 2571 0 0 [ 105.744910][ T5886] Node 0 DMA32 free:1595404kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:70456kB inactive_anon:0kB active_file:0kB inactive_file:185264kB unevictable:1536kB writepending:196kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:2336kB local_pcp:2272kB free_cma:0kB [ 105.787460][ T5886] lowmem_reserve[]: 0 0 0 0 0 [ 105.795014][ T5886] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.869325][ T5886] lowmem_reserve[]: 0 0 0 0 0 [ 105.874867][ T5886] Node 1 Normal free:3941588kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4164kB local_pcp:4164kB free_cma:0kB [ 105.907779][ T5886] lowmem_reserve[]: 0 0 0 0 0 [ 105.915766][ T5886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.937374][ T5886] Node 0 DMA32: 172*4kB (UME) 173*8kB (UM) 290*16kB (UME) 118*32kB (UME) 51*64kB (UME) 48*128kB (UME) 6*256kB (M) 2*512kB (ME) 2*1024kB (UM) 4*2048kB (UME) 382*4096kB (M) = 1597368kB [ 105.978367][ T5886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 106.014762][ T5886] Node 1 Normal: 5*4kB (U) 4*8kB (UM) 4*16kB (UM) 9*32kB (UM) 4*64kB (U) 1*128kB (U) 2*256kB (UM) 4*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 960*4096kB (M) = 3941652kB [ 106.057900][ T5886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.091002][ T5886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.117039][ T5886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.147420][ T5886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.165038][ T5908] wg1: entered promiscuous mode [ 106.166197][ T5886] 47904 total pagecache pages [ 106.175645][ T5886] 0 pages in swap cache [ 106.196243][ T5886] Free swap = 124996kB [ 106.206496][ T5886] Total swap = 124996kB [ 106.211306][ T5886] 2097051 pages RAM [ 106.215267][ T5886] 0 pages HighMem/MovableOnly [ 106.221355][ T5886] 400871 pages reserved [ 106.225681][ T5886] 0 pages cma reserved [ 106.484301][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.684159][ T5929] syz-executor.4 (5929) used greatest stack depth: 18896 bytes left [ 107.464985][ T5954] ================================================================== [ 107.473354][ T5954] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 107.481484][ T5954] Read of size 4 at addr ffff888055333568 by task syz-executor.2/5954 [ 107.490915][ T5954] [ 107.493559][ T5954] CPU: 1 PID: 5954 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0 [ 107.504578][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.514975][ T5954] Call Trace: [ 107.518396][ T5954] [ 107.521629][ T5954] dump_stack_lvl+0x241/0x360 [ 107.526384][ T5954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.531654][ T5954] ? __pfx__printk+0x10/0x10 [ 107.536399][ T5954] ? _printk+0xd5/0x120 [ 107.540936][ T5954] ? __virt_addr_valid+0x183/0x520 [ 107.547455][ T5954] ? __virt_addr_valid+0x183/0x520 [ 107.552902][ T5954] print_report+0x169/0x550 [ 107.558338][ T5954] ? __virt_addr_valid+0x183/0x520 [ 107.565600][ T5954] ? __virt_addr_valid+0x183/0x520 [ 107.571300][ T5954] ? __virt_addr_valid+0x44e/0x520 [ 107.577493][ T5954] ? __phys_addr+0xba/0x170 [ 107.582242][ T5954] ? hci_sock_get_cookie+0x49/0x50 [ 107.587622][ T5954] kasan_report+0x143/0x180 [ 107.592218][ T5954] ? hci_sock_get_cookie+0x49/0x50 [ 107.597542][ T5954] hci_sock_get_cookie+0x49/0x50 [ 107.602562][ T5954] mgmt_cmd_status+0x1be/0x4d0 [ 107.607919][ T5954] cmd_complete_rsp+0xe7/0x150 [ 107.612775][ T5954] mgmt_pending_foreach+0xd1/0x130 [ 107.618394][ T5954] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 107.623852][ T5954] __mgmt_power_off+0x187/0x420 [ 107.629847][ T5954] ? __pfx___mgmt_power_off+0x10/0x10 [ 107.635420][ T5954] ? __mutex_trylock_common+0x183/0x2e0 [ 107.641983][ T5954] ? __pfx___might_resched+0x10/0x10 [ 107.647673][ T5954] ? __pfx___mutex_trylock_common+0x10/0x10 [ 107.654763][ T5954] ? rcu_is_watching+0x15/0xb0 [ 107.659768][ T5954] ? trace_contention_end+0x3c/0x120 [ 107.665492][ T5954] ? __mutex_lock+0x2ef/0xd70 [ 107.671027][ T5954] ? __mutex_unlock_slowpath+0x21d/0x750 [ 107.678158][ T5954] ? hci_dev_close_sync+0x494/0xf60 [ 107.683454][ T5954] ? __pfx_lockdep_hardirqs_on+0xf/0x10 [ 107.689058][ T5954] ? _raw_spin_unlock_irq+0x2e/0x50 [ 107.694414][ T5954] ? drain_workqueue+0x2d3/0x3a0 [ 107.700362][ T5954] ? hci_discovery_set_state+0x57/0x1c0 [ 107.706219][ T5954] hci_dev_close_sync+0x587/0xf60 [ 107.711305][ T5954] hci_dev_close+0x112/0x210 [ 107.716010][ T5954] sock_do_ioctl+0x158/0x460 [ 107.720705][ T5954] ? __pfx_sock_do_ioctl+0x10/0x10 [ 107.726405][ T5954] sock_ioctl+0x629/0x8e0 [ 107.731577][ T5954] ? __pfx_sock_ioctl+0x10/0x10 [ 107.736571][ T5954] ? __fget_files+0x29/0x470 [ 107.741793][ T5954] ? __fget_files+0x3f6/0x470 [ 107.746618][ T5954] ? __fget_files+0x29/0x470 [ 107.751766][ T5954] ? bpf_lsm_file_ioctl+0x9/0x10 [ 107.756729][ T5954] ? security_file_ioctl+0x87/0xb0 [ 107.761862][ T5954] ? __pfx_sock_ioctl+0x10/0x10 [ 107.767177][ T5954] __se_sys_ioctl+0xfc/0x170 [ 107.771989][ T5954] do_syscall_64+0xf3/0x230 [ 107.776564][ T5954] ? clear_bhb_loop+0x35/0x90 [ 107.781394][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.787443][ T5954] RIP: 0033:0x7f2334e7cea9 [ 107.791904][ T5954] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 107.812085][ T5954] RSP: 002b:00007f2335caa0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.821144][ T5954] RAX: ffffffffffffffda RBX: 00007f2334fb3f80 RCX: 00007f2334e7cea9 [ 107.829707][ T5954] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000d [ 107.838156][ T5954] RBP: 00007f2334eebff4 R08: 0000000000000000 R09: 0000000000000000 [ 107.846272][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.854967][ T5954] R13: 000000000000000b R14: 00007f2334fb3f80 R15: 00007ffd57013a68 [ 107.863337][ T5954] [ 107.866723][ T5954] [ 107.869228][ T5954] Allocated by task 5225: [ 107.874083][ T5954] kasan_save_track+0x3f/0x80 [ 107.879747][ T5954] __kasan_kmalloc+0x98/0xb0 [ 107.884450][ T5954] __kmalloc_noprof+0x1f9/0x400 [ 107.889488][ T5954] sk_prot_alloc+0xe0/0x210 [ 107.894306][ T5954] sk_alloc+0x38/0x370 [ 107.898403][ T5954] bt_sock_alloc+0x3c/0x340 [ 107.903118][ T5954] hci_sock_create+0xa1/0x190 [ 107.908039][ T5954] bt_sock_create+0x161/0x230 [ 107.912742][ T5954] __sock_create+0x490/0x920 [ 107.917640][ T5954] __sys_socket+0x150/0x3c0 [ 107.922290][ T5954] __x64_sys_socket+0x7a/0x90 [ 107.927462][ T5954] do_syscall_64+0xf3/0x230 [ 107.932210][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.938265][ T5954] [ 107.940876][ T5954] Freed by task 5962: [ 107.945117][ T5954] kasan_save_track+0x3f/0x80 [ 107.949895][ T5954] kasan_save_free_info+0x40/0x50 [ 107.955137][ T5954] poison_slab_object+0xe0/0x150 [ 107.960554][ T5954] __kasan_slab_free+0x37/0x60 [ 107.965348][ T5954] kfree+0x149/0x360 [ 107.969727][ T5954] __sk_destruct+0x476/0x5f0 [ 107.974369][ T5954] mgmt_pending_remove+0x13e/0x1a0 [ 107.979810][ T5954] mgmt_pending_foreach+0xd1/0x130 [ 107.985176][ T5954] mgmt_index_removed+0xe6/0x340 [ 107.990424][ T5954] hci_sock_bind+0xcc6/0x1140 [ 107.995342][ T5954] __sys_bind+0x23d/0x2f0 [ 107.999938][ T5954] __x64_sys_bind+0x7a/0x90 [ 108.004592][ T5954] do_syscall_64+0xf3/0x230 [ 108.009136][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.015177][ T5954] [ 108.017508][ T5954] The buggy address belongs to the object at ffff888055333000 [ 108.017508][ T5954] which belongs to the cache kmalloc-2k of size 2048 [ 108.031653][ T5954] The buggy address is located 1384 bytes inside of [ 108.031653][ T5954] freed 2048-byte region [ffff888055333000, ffff888055333800) [ 108.047168][ T5954] [ 108.049522][ T5954] The buggy address belongs to the physical page: [ 108.056499][ T5954] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55330 [ 108.065973][ T5954] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.075070][ T5954] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.083265][ T5954] page_type: 0xffffefff(slab) [ 108.087976][ T5954] raw: 00fff00000000040 ffff888015042000 dead000000000100 dead000000000122 [ 108.096675][ T5954] raw: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 108.105293][ T5954] head: 00fff00000000040 ffff888015042000 dead000000000100 dead000000000122 [ 108.114065][ T5954] head: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 108.122858][ T5954] head: 00fff00000000003 ffffea000154cc01 ffffffffffffffff 0000000000000000 [ 108.132080][ T5954] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 108.141135][ T5954] page dumped because: kasan: bad access detected [ 108.147850][ T5954] page_owner tracks the page as allocated [ 108.154057][ T5954] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4538, tgid 4538 (klogd), ts 83329536244, free_ts 22893428251 [ 108.177571][ T5954] post_alloc_hook+0x1f3/0x230 [ 108.182454][ T5954] get_page_from_freelist+0x2e2d/0x2ee0 [ 108.188194][ T5954] __alloc_pages_noprof+0x256/0x6c0 [ 108.193564][ T5954] alloc_slab_page+0x5f/0x120 [ 108.198688][ T5954] allocate_slab+0x5a/0x2e0 [ 108.203208][ T5954] ___slab_alloc+0xcd1/0x14b0 [ 108.207996][ T5954] __slab_alloc+0x58/0xa0 [ 108.212355][ T5954] kmalloc_trace_noprof+0x1d5/0x2c0 [ 108.217624][ T5954] syslog_print+0x121/0x9c0 [ 108.222327][ T5954] do_syslog+0x3bb/0x810 [ 108.226670][ T5954] __x64_sys_syslog+0x7c/0x90 [ 108.231408][ T5954] do_syscall_64+0xf3/0x230 [ 108.236735][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.242652][ T5954] page last free pid 1 tgid 1 stack trace: [ 108.248492][ T5954] free_unref_page+0xd22/0xea0 [ 108.253271][ T5954] free_contig_range+0x9e/0x160 [ 108.258796][ T5954] destroy_args+0x8a/0x890 [ 108.263411][ T5954] debug_vm_pgtable+0x4be/0x550 [ 108.268305][ T5954] do_one_initcall+0x248/0x880 [ 108.273095][ T5954] do_initcall_level+0x157/0x210 [ 108.278186][ T5954] do_initcalls+0x3f/0x80 [ 108.282758][ T5954] kernel_init_freeable+0x435/0x5d0 [ 108.288031][ T5954] kernel_init+0x1d/0x2b0 [ 108.292412][ T5954] ret_from_fork+0x4b/0x80 [ 108.296952][ T5954] ret_from_fork_asm+0x1a/0x30 [ 108.301757][ T5954] [ 108.304266][ T5954] Memory state around the buggy address: [ 108.310103][ T5954] ffff888055333400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 2024/06/12 13:36:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 108.318554][ T5954] ffff888055333480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.326813][ T5954] >ffff888055333500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.336301][ T5954] ^ [ 108.344331][ T5954] ffff888055333580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.352779][ T5954] ffff888055333600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.361485][ T5954] ================================================================== Connection to 10.128.1.62 closed by remote host.