last executing test programs: 27.370125947s ago: executing program 0 (id=2132): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x20, r2, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r1}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x8}, {0xfffffffd, 0x80000}]}}) 27.368380646s ago: executing program 0 (id=2133): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/184, 0xb8, 0x0, &(0x7f0000000100)=""/109, 0x6d}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xc, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4001) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r5}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000180)=0xfffffffffffffff7, 0x12) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r9, r7, 0x0, 0xf03a0005) (async) sendfile(r9, r7, 0x0, 0xf03a0005) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x2, 0x10100}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x20000000000000f2, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 27.284945905s ago: executing program 0 (id=2135): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x90b5, 0x12) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000300ccbd1657fb72718800001811000037e7cb3f58603c0638e8cd4b8d94713e58648c11cba048e152ea82b11073368f877a1770358cfb460729b87ac1d520dbc21fce51ac20df9730c95c9fe4130fe4267c4a", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000400000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="66d4492a0a1b30e699005a6d88a8", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x60600) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'none\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x22, 0x6, 0x77}, {@rand_addr=0x64010105, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) splice(r5, 0x0, r4, 0x0, 0x100000003, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x7, 0x9201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r4}, 0x50) r8 = socket$inet(0x2b, 0x801, 0x0) listen(r8, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x1000, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 27.053790314s ago: executing program 4 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r0, @ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)=@ethtool_eeprom={0xb, 0x5, 0x102000, 0x7, "f731c837e92948"}}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002880)=ANY=[@ANYBLOB="140000000e060108000000000000000002000006ca4effb44159ea8b7201500c09a01e451df4c01c4c7aef5ceb2d49dae5fcb8a4dc7216948ded3a3b2656d3a9cff932a60c5894bae43462df88f1616db4855ffd1b3bab3891c0081f9cd3961dada61f633c8da672b009421477dcd40761660385b11b5a25d073eadfabba62e66e48535e0e7199e0ce40c150c58fb6cbf3ead6a4b2a96cea899b59d0c310b01f62c13a72dccef27c1ec8ed1367f74fd9e7d6840a557d41dc3a230083878734487d59bc44"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB=')\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050900"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$rose(r7, 0x104, 0x2, 0x0, 0x0) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@base={0x1b, 0x0, 0x3, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000060b4000818110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000dab7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r9, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x17c, &(0x7f0000001180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "d1cc55", 0x146, 0x3a, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x8, 0x5, 0x6, 0xc5fc, [{0x3, 0x2, "10efb33d73870e1887f9e1bf73513c57"}, {0x5, 0x1f, "397e571136d6310856050033fa5fcfb64898cc3f5ae861f0ea0a3155487b3df44dc5a2be6547035a5f8a0d0eecfc76220b5991ab2326adbc35cb055df0a9f36845f4e16791003be8a9a5df7dc91c996eb61c94dedadcc722cdd636d4f2a0f76a3f0934b807fd4ade3d12987de11d6ae81c4dfeea726087ebf2dca9dee78cd0e2509c9ae0906ed8ef74969564c6c7d16a85a826b5211b67bccaf6bd1394052786cfb1f0a5350ca09af3300b987fb62de02ace776d32e8111b118378cff9e5d48b8fe8bea7355b23e2d94a17f4706a4c3ffa825fee15bb6e307bd2af9ed0aaa03e4c4bd6350c8f4400b2dc4d61f26aa163d753acb3063673"}, {0x3, 0x5, "595d1ea006b1a28e6bf5a0a3ee3a58a975096207188f3133cb755902320ff68f4c413fd8ef55494b2d"}]}}}}}}, &(0x7f0000000080)={0x0, 0x2, [0x94e, 0x349, 0x6ea, 0xa9e]}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYRESOCT=r2, @ANYRES64=r8, @ANYRESDEC=0x0, @ANYRESDEC=r12, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="00000000008f1003"], 0x33fc}, 0x1, 0x0, 0x0, 0x24048010}, 0x1) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r15 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r15, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) recvmmsg(r15, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000000000002574f3e619387f7de48c1b8979f7ea000000000000000000000000000000ad7afa575ff20d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x1e, &(0x7f0000002b00)=ANY=[@ANYBLOB="18000000ff450100000000000800000018110000", @ANYRES8=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003095c0ff0400000018180000", @ANYRES32=r10, @ANYBLOB="000012000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018190000", @ANYRES32=r3, @ANYBLOB="00000000000000001844000001000000000000000000000010d380000100000018160000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x61, &(0x7f0000000400)=""/97, 0x40f00, 0x58, '\x00', r6, @fallback=0x1f, r7, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r0, 0x1, r14, r16], &(0x7f00000009c0), 0x10, 0xa9b}, 0x94) 26.914111542s ago: executing program 4 (id=2142): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f49653c33f31e27e4afe9db1ca25c4f48779593728b46224d0fb46f215ba7153da91ff4b4b5f99c6bcdcc2e2ffc27ad1a86687b0a967a033c5f2d589145bc1d41952e2e6f43d0af7768f714e6ddbddcceaf3f5bd7066b903bd659ba802414ccca078b47decf575ce264f32b07a2c028c4cb37d1e22c2310d843f8a4c950bc910d2bb581b571fd216b802f4249bd083438788fcba4340ce9ec0e50122a02efa8982d34b1d6139596785c3eaa085cb6d81f7bc3ac62fbce404bca13803132898c264b9878a89b8f3c1c0896bff53d31f35b3a84e2fe670bf14b2cf7476a223b28804241c79053f59778b013e3f255d5f7f876b058b92502dae18d2de2b7a71acf2c78a31e114c3eafe527244fa31b2c3614f905f6aaf7250949bc2a9b5a744f30f2e3aa12f1417bb26dd3892cbf728f886c1c13cb2f471ebaf75fa1905cf086089b255421567d730e09b698996c51771e3a99068fd9c16f1f772f3e1f885f846db2829b39b8d2465703ea8db3fda4a01ae1e4a40eeedfa5b3312a4285b5f31ac198a5e3848d4d3db2cb6207e552f544dbfee360f735be849a812043343a834c04a6622ac806224f0ece7336a8c7bb9d6c15ca1d93b0d3d804922e35baad1ddf5b1773f9102c18c398f026865ee64ce85a70ee7c3514e5bd13e935956b76d9db1140e514e5cfe228023008ba9f8a6c7951a03b2001e2b16c5bac060eaf1d1b2b49ddd29a280dd3218c4a0456c3754f944d2d185f861786c29a89615f09d4d4aec0e3ce62bdf09cf121caa73c18d4e78762b2c154a007c0ea9df2223dc4b932a75d6e57910684cd6f7a94e4988d10a6854aced312bde517c8eee5f3e0a14675b08668a0d53982f7e953cf600b5ac2e4afcce547160dc4fff59466b75aae0fa4badec300d858c4e87c1181fd587182dca134470020ee1b08517a11f8ba982a0f1286702d11cf3b056dfc0278342a11f85f1ab3e5be02ce71b28ae4272db7ccdc886774a111fc620730bb68855a3c5d6d45a3274f45db3c4f299bdce8cb50afa3def586266f32a6120629941878df287e0e138acfb1b919dbcc1511811ae5a27a14117fd4ecf6147748e4b7ebb0160cd4f44bc4a17ffc24dc146d575e8488f5ffdbba99c5900722a7c2dea32021544706c70afa67b16024fc8d3d4dc2efa63a0f1008a5f388e4f3fd57624d05052f1a8e2aa0d41fb04a2b87a75008c1c64f352b76b1c271f2240924c7ae15094284bc72abc4806d978030a8013310f9fc65cf1215a1af8f5a074f40b16267f0e319219e2d27fbd6cc08a0e3a37370228db56209e43c5a9b21776b8f175a31aa9227eaa22d4d1f76bceb91aa25e52b4198bd8a9566119c4f1e76d414c9b67572da2a5c6df6694c18af00db08bb61e5aa0b0f2f772fdd480ad4d3297a01f4fde3ce1e45f37eddd8e61da5f02bad8749d84cb3627482b475b497b7db68ea9a894729e2a13fe72adc9c689cc9ed7bda13eda65d34ec300cbfbeb1ab15e7740594ddbc6bd4dd594ca915fba5ece0baab14388b972e221707ef0e4d80424dffbe4508627a13b460b043c5f46b965f5904685cb5224b45d708726e47bd1e4d14f2545f853c9fc979a3ca21f809aacbbf500f751316586b328f93e22b881c22c9cbda4c12d04d5775c763042f62c739dda385a5b49c4bc9fc9b7f8cdd50d50f5e375808b09e5be753b3106c59078e337dfc4d114bd89d9a2995edf5b03fe37bfdf445369c5ba139624c59b25de375caa92f6dcf21e9cf164cba69247174e9571a3c5f3e1c8decd0ac77dd69f8efdb7bf413edb87cf92d587aee0aeab659aa5d27af007e025eacc18e369a34b765298ef3cfc1b7fff5be29a75bcbed99cba4faa8e45f6d2903cb798f575b049aeefb3e8351ee5f2e6b0eb2d3e0721847a1b8f2094fc48d17b4163d35a1d7a1c8665c0e63103f5fee04f528c6df8530bb09e2de4411ef1973c2f63f909ca9f26b6b9a33bb6c50d9e77a3b7b8412695a281ab16daa627030c95a1d1f752cf744435084aa60178ecaf34cdf5e5f1abbece9235f1f9c2ba98ad5cf2b7669d0ba2fd709d87d6066f91e58e5cad29915240290632b56e293068f95084b495fa9038476e1e7e4ae0dee429c6b6db7db12dcb3baac23272d111f51e94287fc3d4791362d12578ccb8a5fedf37e96d00d0613ffe0647ff2d625bd7fdf679b5ba69a65c6d64703cf4253f0993b8cf412d32b85b8aa8c7af24469419be15b63b593f3747bee75d35f5b8e8f6a7c587bfa56d8622fd7c468fd328034bc7e735f8d90acc690be38cc657a53271040792898f2ab566f58a3ce47a9ec5769428f44dc52a27cedcd85f65eb857fe9676a7ae264c505b5a9e80530f384f4a0d45bc5895c72d28640015fa6b19bf9afcc8f87d3427653b44c5869d8368a520f0440601400fa3dfb0577f83b92304875ead2014027edc3e02edf657ed6fb5c67e5bf7af437563371c0c3b2feaa7f20819a6ed737dd8f28c2e0d9304b1b0895a0012e9c3e27f3e160c1682e600cbb2b7d4ee350b8398bdd46e860322b5c323930f8c4f66ea831d736c076f98fcef243709587c01c5f193901605b9c201c4888a8df4ddc6565f2ddee29c20562422b2396284b171af70fd18e5efd7cded9cbbcdabf86829287234415b1fb33f5d112039b1b5acccd97c9a967ce96895f4147bd2296eec3bb7cf8cdf0dd58232c2166aa3575f00b9ec381e9016b8717f9f4318c4279942203d7ea754f54899bfd66026af7879546f2c763a466f06b80804bbdd4cb1b0de35b2d6fe0603aa21950193a8050ef5392ec82094d39ab93a5dc7ca131efa21a460a59f27ceaa6e88291259c08eadf996723356dfbe6037bda8da4c1722d274c30de9aad036cf7f913d64c93e534d4df24722fc3a2aff2f76a2822c743c8ca419ab755452ecab775f80821cbd41ecf4562100ffa82003d032c57a8ff5b3cc11a4c5616ef51806f7ed9e710fb2cb26f96194a1683be1998fbf478336420322a50cadaff6013345f847649878fba8c12a8f39362e853421bf9ea61683cea0181851087274e2606dc4ed37d84705140db662ff0fe355458a995075762b580585b2c2b64cdfac997f8b8cd1db2dd2834180153d7715e1d72cbab197f25795e32decd8e1ffd83ccb04a7d31d8257e3ee8d2ad977285e2d6d5fa779693eedeb12479e3a15816a9d82a020af98161ec9a995a2cfcaacf5fa816d2bc1976261a3cdd46a522c3a607e44be753229c29ae714eacaf1f8344ee614fc551c15a60ae92e97544f3356c5dcea817eb32fc687b3d3e9adb81c29519255daa1ce4cf037e33c9ce4a39a976437c52d3e001d6c6c980f5aba85229e53fa23259afc9f4efa69b2dd10bc4413e07f48f71b76c01236ed17f157b190456ccb70ba481afd28bb0c0a34119179bd54a1f23b90589b953abad8f9951a16f90604f8662787effb61d19208eb7cb95e3cc138e1aaf074982864ba8a3723722649f8928856587a6d96fb7e7baaa93dafac573cf6e0fa0ea812904699dab8b25e996fb9b56c3dc732fd2a0d5c7a669046b53e3b43e2da3c7fa89142714857264e9ffbb33b129f4edc2fe2f143d7c20d49544af0ca06ea97f889101b4628d97ea275a6ee4a777d36e5a0e698c4c900a4cf3355eabf1eea1da94f0ff824d0821753eb9977a4bcdc7afad9a5aef48d0e5ebb51203dc362cbe1a5b1c690363357d6f0772297fcebe7da6a848f6a831ec86fcc6f8acaa2b7d860688c4db700d058df414e0a7e786dbdf8ec877279bb0b0326e4985976e719c99c19e5fdf9ff8a3291796675a5c26e56d22b8bee87ea9d5b7b85ee1f0bf053c5f8feae2cf88b6a7f1e229a1d5bc7a1f173aadb2c866097e5d369277c3d8acfbaf0f3693ebca90ae3e06c35e078fc9586109277b2a95eeae22b2640fadc7da2a4160e381237c3bf7975739bfac8d493575167d7ae17f534fea406fb397a3fc7e37b7caeb2237159153a232a2b77aa7b9ddcee8d6c3e081f09d857df40aa961d95008ec88e74c29e402803fca1b4923987290b956157965ee60481f16d39975455f398c3833b50c358ba54b6d38d6884f92e42497e9afa886091376fbbe10c2e14aa7451987a347517fdbdb2838620bfcc7f6a52bbe50b4f03aea41d398cfd2b9d8380a05a5c2774272d7877ee3318b665b9d3fc219adda225caf5b02ba2e4c28cc33fc39a494270bfface801244a5ecf213f268610a0848ae93fea1e214763e6204aa98f21ede11282b4034973686a4cce3acff7473cd3a84a1340e271c0954311c4a4c4fab3f7801db312b3960030591a078e0cb1a224079d8b135d4dc73c507f079cc92384f18a624eefe8dc1d197425111782d2dcd1b96c5e67a672257a48a45ee7fd30518c0d26772c698f517d4e5c7feb8d5ebee292e86dd4137e4976c7507d19dd8d39fee8434a47da4a84b37a331227bb4c71213d0a20f9fa69d94521cf1b75364c5c2d4070206dd5d06588a65f94a5bea5d433519e631139d43a40add76ce7a4ae0b58e66579a3e94dd49daa5975d264e4fea35d2e37e99b5b196e4980b6a9a8d57ce347916421847288dcc9df747ce2d1d670adf8c69584ab5fc7d4d5ba0401f61da6027efe109205b8234364e8b1d11ae29e2380dc399aa7f504f41e6c8a9f973fe00ccfd07a9b3e98a60275ca738d439489af487ca503629b4c9fd904ea5d85785a25e9b73ce909b7e6539b2cba653f2d034ec0f4b6a3b18918c8835ba5034d638b1fb03fac7f263b8deb51cbda12932f0faecf8a86ca31698bbebf40010f099ab679ea222d80a0c77eebdddde7fb5cd079e928a2fddf7e3702fb220e0d49f2620284ef4cd3b165119322e0b7f24926de4ccac5ee24788f424ed8af3c2d9cfadfc835d1de3d2c82f7d2c33e90b30d2e13e9b92e84808772c319ecd3e5be1619e1343f0279952261d368f12db54e93488e02ec6b185fdf95456a2761249e04962937f089c3feddf6a75c9fcb8ad5c252ab0de0fcc0d1b961e861fb8b7eee57938225110b085b2cdc336b60915e3ea44d61623cbc1ae334c97ac1623661f428116aa0894c207dd95db16a7dcf0f8b0b0e19f33355d3c56e307dae069e34abdc43203f85f2c43e3a1c1bd5e6f34352fc40210bc53301121e3fcb8e9fbff690c4d68abf2d61d23e1cda71b2a5c63d5cc2b13d924404fd7f6b57ed27fde37a971b804e6aec28088bd9fc97bb380c4980d026c41b7ed356e345e6ef6a3781d8a5229aa2db6341f257a3ca0c809b589ac97c4bdd62a0a3b5f1bb75f9bf3330587e30371cfc3d03765edb1c364d4cfefba10a874b2e4e6ffc640efbb6f5281c92eb9aef75ce831cd8fe30352dfbb9cc16e333e8d97ad6539b0dc318475523fcb33f83cdbb81735a90aa2f8dff82cb715de3d35646df5358e493a6363a7cec173af7142120b90390ddaf65bd9634a0d6b354d60e9218994fe1b5292925964037d3117118a41c72317665cb1653b102ff4005c6cee143c0623c6ee62f211fe4537de2ea2c203dcba5ad9c40b6e5cdf45a3383d4696039f79a06e590b827019baab09ad23b0b538bfb31e689233e30b32aaddfc638938d2bd0eebc4d5315503e83b15cde33a1e3dbae7fc6198164cabc035bfb4851aa41aafdc8cc991d55cb3feb5999c306f2574cd2c136a282f4e58d012853db00b0f624e00145dd122f217f4afc45937c89d00d8b33bdc92", 0xfff}, {&(0x7f00000011c0)="14d5", 0x2}], 0x2, 0xf) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xf61}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x9e09de68d32c759b, 0x0, 0x1}}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x300c30, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001200)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x7}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000180)={r10, 0x1}, 0x8) 26.462967271s ago: executing program 2 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r3, 0xfff) syz_emit_ethernet(0x4e, &(0x7f0000000900)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc804) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_ORPHAN_MASK, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) 26.297790291s ago: executing program 0 (id=2150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10002}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0xc, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000009}, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@newtclass={0x5c, 0x28, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0xe, 0x4}, {0xfff1, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x20}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x39, 0x81}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8801}, 0xc0) 26.014284287s ago: executing program 3 (id=2153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0xfc3ed0e835375d40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) (async, rerun: 64) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102, 0x2}, 0x10) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x72e00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f000036f000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/206, 0xce, 0x1, 0x0}, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404d080) (async) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 25.97680944s ago: executing program 4 (id=2154): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in6=@private0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x158, 0x2e, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x136, 0x14f, 0x0, 0x1, [@generic="b5bb0cac197ba52306b75188a8c2dcdf1a2039b588c9c8b6dda96603444dde41d2cc827e64a281d0848033ca52ba2e84ef9b4c1a923ba29fe34f40375bbcecc1ffc36e5a251e0e558f98be6c64214eca909eaea7039f149b", @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@mcast2}, @generic="bf0cbba80e86057bd0ab224c7320c760a40dfb8534fac7ab4d53632d2f1bb44a8a9cf0cf82fe9e5802e4871004f700981d4642400346a446841025f770019ac7508bdf5f9c1ce01c9cece132bc6f0d7496dbf91fce0b5a39e85f69747b708187f9efc4e3546b82c961db70d32e8fbf176a3adf2cde2e72a23841ee7fa198d295cdba7b2c932409bf7308134f4bbad2425b3ae2f53b1fedde27e506eb1ca092e418719547a31e60e1ac2ab9bc610566fa57bb487cf63df8ff5334d9f1b0343e32f27f", @typed={0x4, 0x41}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 25.927309273s ago: executing program 1 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x43, 0x107, 0xfffffffa, 0x25dfdbfc, {0x3, 0x7c}, [@typed={0x8, 0x140, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x1}]}, 0x20}}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/119, &(0x7f0000000180)=0x77) 25.790181626s ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2d000000010001", 0x7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000bc0)={r4, "3f7868ea88b05db8feef3c04931cfa72"}) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 25.755786411s ago: executing program 1 (id=2157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000180)='\f', 0x1, 0x400002d, 0x0, 0x0) 25.722556245s ago: executing program 2 (id=2158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0fc91f10", @ANYRES16=r8, @ANYBLOB="01000000000000000000300000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4c880) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f00000005c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x40000000211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x613f, 0xe}}}}]}, 0x44}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x5ddc, 0x4) 25.485421946s ago: executing program 3 (id=2159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0xfffffffffffffe53, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r9, 0x0, 0x0, 0x20, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1f, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @ringbuf_query, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @tail_call], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[{0x1, 0x5, 0x9, 0xa}, {0x3, 0x1, 0xf, 0x5}, {0x5, 0x2, 0x7, 0x3}, {0x1, 0x5, 0x10, 0xc}, {0x1, 0x2, 0x5, 0x1}, {0x1, 0x5, 0x8, 0xb}], 0x10, 0x10000}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r12) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r13, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000180)='mm_shrink_slab_start\x00', r10, 0x0, 0x8}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c00000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000020000280140001800800010000000000080002007f00000106000340000400000800074000000000080003400000100e14000f800800014000000000080002400000000095247eddb42d15df7c8ecc91820378d826ee4bb9d234c04421704cd0bf119d123f80898f06d7ac"], 0x7c}}, 0x0) 25.484340028s ago: executing program 1 (id=2160): unshare(0x400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x1, 0x80, 0xfffffffa, 0x3, {{0x29, 0x4, 0x1, 0x1, 0xa4, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x1c, 0xa8, 0x1, 0x2, [{@local, 0xfffffffd}, {@rand_addr=0x64010102, 0xff}, {@private=0xa010101, 0xfffffffb}]}, @lsrr={0x83, 0x1f, 0x59, [@rand_addr=0x64010100, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xe3, 0x3, 0x3, [{@rand_addr=0x64010100}]}, @timestamp_prespec={0x44, 0x44, 0x49, 0x3, 0x1, [{@multicast2, 0x80000001}, {@local, 0xe9}, {@broadcast, 0x1}, {@multicast2, 0x5}, {@private=0xa010100, 0x8}, {@local, 0x6}, {@empty, 0x7fff}, {@multicast2, 0xffff}]}, @ra={0x94, 0x4}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x1d4b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_emit_ethernet(0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b004a2f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000e80303e80000000008000000000086dd08"], 0x0) 25.377695099s ago: executing program 2 (id=2161): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES8=r1, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 25.377074654s ago: executing program 3 (id=2162): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5975b27db92", 0xbd}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r4 = gettid() pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r10 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, r8, 0xd66771a5e8224ded, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000001380)=ANY=[@ANYBLOB="00000000b9dbbef658688200c5e35dd5353dbe0a627994359b85b68dc76bb21ebb0485f10b91a64e3994ea261aba7536e4d5e1f294c410d000000000000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffffffff25000000080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r6, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r10, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r11, @ANYBLOB="0e0001006e658964f7634195711774d7be9ed03c64657673696d0000000f0002006e657464657673696d30000008008c0100000000"], 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1a, 0xb, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff9}, @ringbuf_query]}, &(0x7f0000000b80)='syzkaller\x00', 0x8, 0x66, &(0x7f0000000bc0)=""/102, 0x41100, 0x0, '\x00', 0x0, @tracing=0x1a, r13, 0x8, &(0x7f0000000dc0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0x2, 0x10, 0x85}, 0x10, 0xffffffffffffffff, r14, 0x9, &(0x7f0000000e80)=[r12, r6, r0], &(0x7f0000000f80)=[{0x3, 0x5, 0x10, 0xc}, {0x2, 0x5, 0x10, 0xc}, {0x3, 0x2, 0x8, 0xc}, {0x1, 0x4, 0x2}, {0x1, 0x4, 0xc, 0x1}, {0x4, 0x1, 0x7, 0x5}, {0x3, 0x2, 0xb, 0x1}, {0x3, 0x1, 0xa, 0x5}, {0x3, 0x3, 0x2, 0x5}], 0x10, 0x2}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0aac0f0005ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 25.321990694s ago: executing program 0 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x93dc3fb39ccbf337, r1, 0x80e17000) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x93dc3fb39ccbf337, r1, 0x80e17000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) close(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'batadv_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'batadv_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x5, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x2, 0x7}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xcf4b, 0xfffc}}}, {{@ipv6={@remote, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'netpci0\x00', 'veth1_to_hsr\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200, 0x0, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r11) (async) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r11) sendmsg$NET_DM_CMD_START(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r12, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000400, 0x0, 0x0, 0x200000000430, 0x200000000460], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000aebd5080693267566025105a3900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000020cd733522bb000000000000000000000000000000000000000000000000000000000000000000000000000000feff"]}, 0x115) socket$unix(0x1, 0x2, 0x0) (async) r13 = socket$unix(0x1, 0x2, 0x0) bind$unix(r13, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) bind$unix(r13, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 25.218218621s ago: executing program 1 (id=2164): r0 = socket$netlink(0x10, 0x3, 0xe) getpid() write(r0, &(0x7f0000000000)="5490eb7c9c79600ca295028fa32965c127aecc1834b6057f5e004405f8594ab8b632c308cba6560db24aef43d89e29c34505ba5403812f97eae38f7c0cd3d0afaa2b4fc867bc75fc0a26d26ccc68423834d97396", 0x54) ppoll(&(0x7f0000000080)=[{r0, 0x9}, {r0, 0x10e1}, {r0, 0x50}, {r0, 0x9aba6e90ac14b054}, {r0, 0x428}, {r0, 0x2051}, {r0, 0xa000}, {r0, 0xc}, {r0, 0x8424}, {r0, 0x80}], 0xa, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x5]}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180)=0x6, 0x4) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x60800) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', r4, 0x4000, r0}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, 0x0, 0x25, 0x10, @void}, 0x10) socket$alg(0x26, 0x5, 0x0) connect(r0, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x800, @empty}}, 0x80) r5 = accept$packet(r4, 0x0, &(0x7f0000000500)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r1, &(0x7f0000000580)="f49215ec916950a975f4123b5ec067a1e8edeee05a4b833b0a95356bacb2eef212106e5778b425da5f1fe76cfa6ae075f005866ffd4e2a8f7a8a5faf1699340292cddb15d80c99076619317be64115fcb10d1455da6e1dd5afe65976aebe93c0b060f706d15f1626fdd3ad9f3cd511906f60c5c30bce48015d24119c705790269a23c793ab5d5186b2072d72c7eaf1c9f45707da899a3e412896595421ec217b16e899f0bc2d1966f0f78163a36bc9f436f25b82905e1eeba3cef004af", 0xbd, 0x40010, &(0x7f0000000640)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_buf(r4, 0x0, 0x27, &(0x7f0000000680)=""/156, &(0x7f0000000740)=0x9c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@ifindex=0x0, 0x11, 0x1, 0xa, &(0x7f0000000780)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r4, r4, 0x27, 0x10, 0x0, @void, @value=r4, @void, @void, r7}, 0x20) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x288, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0xc8, 0x3, "e2006ed8000d7d5683f1c4a2392d8bcf8ea32ce642ae2c1c110103e7a42f1b21d3e62fe51f03dc28941e1a5879bfb1c1cf42f1d88227e4ca40bdd8eeb393c806771667b2f216416ee404ccd4113c3bfa80fc08bb37ad23d967c2b7b96b79b0a2a396dd10cabfe71937c7c49cc11a2d0aa98e7592abd6b1c3a8419c039d58cb7c479be4217182db499375f20708c0d0cd5200efd4fedfc9eabcfc925f25669b3bfb921655383a6a95c7ce3258305f7d3211639fad17b5e6eb24d074bec48ff803c84096bf"}, @ETHTOOL_A_WOL_SOPASS={0x6f, 0x3, "f97b0622706bb4285675f2854fac16e126339e0a56a1188ac9bf7d2a78d23c0b9457bdb43e53bc86671c1e99d500fb38c8f92d8843865d9b59f00fdbc9d0133d8ada1e4546410324280432552e6a78ff08ac3b2ae9b8e9f5932367a55297e60638f54327bf7a40be89fdd5"}, @ETHTOOL_A_WOL_SOPASS={0xd9, 0x3, "0ba463e5908613b539a7838230209f1774b8ae30ab04c9301fab6a57512461e30f8cad44289ae7c41f490ad08ef4aee7eae9e6b21ddbb6a9405611fae8260fd7cdd6cbb6860c090b9460e129d1db324a6232ced5c3a591cebd573ebe7ffe771e89e91bafb83770ce657956a5cba471aa5323cfac6e2f351aea982f65b6a404f4bd0c73753338d6774f3389a56a939558e1f8d786ea72f49fdd3c036619408285daf089f13550f3f1ca912a52592b6498345625e00e584edb9730a811d1148fb583d7a09b1278e03d6dec6f89a3e3ed20421925b77c"}, @ETHTOOL_A_WOL_SOPASS={0x7, 0x3, "2e3818"}]}, 0x288}, 0x1, 0x0, 0x0, 0x240000f4}, 0xc0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000cc0)="c5a2b682315f7213ab73a2302c29c1db43e8031d3c177dd3cbc7ce06ce7526e290f7968c19040886040a9bc843333a8f064068518c878d85c8fee28ebb45ab6a8fb421fdf5fad44cda0c44c1d499aca383cb4c30c6251530b5402c06129d300c8d5c2a15ccd3714f050c45e5aa80489c7e69a1b5d8397d1ec2ae692225e44c4eab2f98f639c354cd855616115f174df98e338a8e9bc05643353fc7efa95a140e55bec4bd9bf260dba06fa413d29b3dd99f47e7e5e354d2ac76188e5423d35bae7458ace4d111287fbd4cc15f52953996a311fb367bdf8791c23f07b0bcf5cdee31067e4315881f45d74e954248d7370cd85135badd66", 0xf6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000dc0)=@raw=[@exit, @alu={0x4, 0x1, 0x0, 0x8, 0x0, 0xffffffffffffffe0, 0xc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}], &(0x7f0000000e00)='syzkaller\x00', 0x9, 0xdb, &(0x7f0000000e40)=""/219, 0x40f00, 0x64, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0xe, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000fc0)=[{0x1, 0x2, 0xc, 0x2}, {0x1, 0x3, 0xa}, {0x5, 0x1, 0xb, 0x2}, {0x0, 0x3, 0x4, 0xc}, {0x0, 0x4, 0x4, 0x7}], 0x10, 0x7}, 0x94) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001140)=0x0) sendmsg$nl_netfilter(r9, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x11c, 0xe, 0x1, 0x3, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x2}, [@typed={0x8, 0xb4, 0x0, 0x0, @uid=r10}, @generic="c21a16bddd8398bf7b2ecfe00bb7de775bb315ab16debbfe97669c56a004bd8cd4d14b7e49de2dd6774bb9ec0f8ca52a16e91ddcc27467102581f28a6e8915b0b23eaea3b787ad15b04b174ca3b3f3f01ea4b71787d6c7c8d137e737c5b862283248948373b8612e26eeabc65d7c15b45950bd2401bfdbce89205591d9fb4641bfe088349924cc7836d4c910a6c813c34cdc7903c36d50dcb84aa3d1cfc520d288c61c20a0d17bbca5e9eed6f934a47205b7798250f9d52cf203e0e5919778766f688bea96f0d3da957226c58fc1b3ac26e1794f46cb3dc0c1a779621d2c4ff944ad85082bb338984d4a8360146287b94bb04bfa205e351723ad07c095"]}, 0x11c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x1402, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x800) 25.216781417s ago: executing program 2 (id=2165): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdb9fd8baf9f425057c000008000180d8fa7c4308000366"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$inet6(0xa, 0xa, 0x5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x0, 0x3, 0x2, @private0, @local, 0x40, 0x8000, 0x9, 0xb2f4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2517000000200001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c3000000000000000000014000200736974300000000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000300010000000c00018008000100", @ANYRES32=r4, @ANYBLOB="2c00016408000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000100000008000300010000009000018014000200697036746e6c300000000000000000001400020076657468305f746f5f7465616d00000014000200726f7365300000000000000000000000080003000300000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000014000200626f6e645f736c6176655f3000000000140002000000000000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0800030002000000"], 0x184}, 0x1, 0x0, 0x0, 0x48000810}, 0x80) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) unshare(0x400) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000) recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r9) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r14 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r14, 0x11, 0x65, &(0x7f0000000440)=0x1003, 0x4) sendmmsg$inet6(r14, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0}}], 0x1, 0x80) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 25.074646345s ago: executing program 1 (id=2166): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x40010, r1, 0x53349000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380)={0x4}, 0x4) socket$netlink(0x10, 0x3, 0x12) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000780), &(0x7f00000007c0)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="a4688dde6db785", 0x7}, {&(0x7f00000000c0)="11f64d50b66ae3ef503b4d22085056a4ce102eab094260942cd872afef88521d98af862e99906ab0563f03fd9ff3b1e5a53cd4435e62f508703b57d9ff17e00f074c94c83799d95c3a621e044be126cbb4179d419bd04df38f2743177422da16aba3a9a0ecf5b6dcc374e1", 0x6b}, {&(0x7f00000001c0)="701b6a3406ecbc69a1891455babd0169a666f1d4a70a7d0888955e1f20f8f63f83f63b35fce8617669c01d4467eaf1408c5e29ae38c60f3652dbfea120b92f858a7173366697330c26550f6a4049b1e2eb6451b6c86fc8aa443f2cb0aa4d0edda5b16ebd4711e0f79a093030484ad69271545cf144fe708cf3", 0x79}, {&(0x7f0000000240)="36db376395b0387e09fe11f45659e4ba86d49b0f68f24471f0280b952c30a0fe55a5bd56b124d127297a4b9c12816d2874acf26eca7528d3939013a59206df11f89e4ce252320a0de930967144b18c3d9c3525abe1b625b78d207e50cf00335c5d9930ef66b95c62773d4a85b78b3325dc815f670276836e0ff2c16940e510c3b9fc6c20079649188355dff5fd7f0c582c9b8bb182373e11feb2e70dcf9e1bfa16343080eb3966f41efda8d608046a112e214fad52ab3d7059d559fcbdaf91109eb430d49203b11dd27ca516ca4b572d52d653e55f9f", 0xd6}], 0x4) pipe(&(0x7f0000000740)) 25.043300071s ago: executing program 3 (id=2167): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYRESOCT], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20004800) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x44, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20004800) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 24.978141674s ago: executing program 0 (id=2168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="1915000000000000000000000000006e6b31398d95e8f31587a5d6535b70e8b8f09b2aff174ca23b6056ac8da34728a8c8ccda0d61a3d51130fb3ede797eaa74f45029b4de7c7d5a", 0x48}], 0x2) 24.903574108s ago: executing program 3 (id=2169): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x4, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x9e, 0x1ff, 0x0, @empty, @remote, 0x8000, 0x40, 0x692, 0x2}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r8, 0x25, 0x18, @val=@kprobe_multi=@addrs={0x0, 0x7, 0x0, &(0x7f0000000380)=[0x7fff, 0x7f, 0x1000, 0xffff, 0x4, 0x2, 0xfff], 0xf}}, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)={@cgroup=r6, r5, 0x5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 24.887479269s ago: executing program 4 (id=2170): r0 = socket(0x18, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41dc}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)='%pK \x00'}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000060000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000008500000004000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x3}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r8, &(0x7f0000000f80)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xa7, &(0x7f0000000100)=""/167, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r4, r5, r7, r8], &(0x7f00000004c0)=[{0x1, 0x1, 0xd, 0x4}, {0x1, 0x5, 0xd, 0x2}, {0x5, 0x2, 0xe, 0xc}], 0x10, 0x7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x800}}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4050004}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.878020487s ago: executing program 1 (id=2171): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r1, 0x0, 0x10}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000010000000007911a800000c0000da9af459eccb059ef12c1dbd2b4783d9dd5ca696a7f951887d699df500000000000000000000001f172575fcd17e39e6a04047dfe50769ceaab6f97dd21c46910aff0700000a178bddbc49a596abb639dbe2cafcfcd29b0a35aca022a865f6e6a527685273e6649befed02"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000000000000298050b7aa471af3a20729656c752c0deca1f41f2a02d6e9236ecccae394", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) 23.788750403s ago: executing program 2 (id=2172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000974000/0x2000)=nil, 0x2000, 0xdfdddf82b84cc70e, 0x28011, r3, 0x59e1d000) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @mcast1, 0x8}, 0x1c) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) 19.59824823s ago: executing program 4 (id=2173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) (async) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) (async) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x70000000}, 0x2, 0x0, 0x5, 0x2, 0x1a, 'syz1\x00', "b013c3e683d24a46e8879d71e2763eaa47ab9f55141856337c3eabcc2fc4f1bf", "d78a82110cea7e41c3bb701a4fab77ae8368c72c386e7f06d223515257b53fcb", [{0x4, 0x1}, {0x26c5, 0x0, {0x2, 0x9}}, {0xa, 0x6, {0x2, 0x1}}, {0x9, 0x0, {0x0, 0x7f93}}, {0xffff, 0xb, {0x0, 0x4}}, {0x5, 0xb7f0, {0x3, 0xc401}}, {0x8, 0x0, {0x2, 0x9}}, {0x7fff, 0x6, {0x3, 0x8}}, {0xe9ab, 0x5, {0x2, 0x80}}, {0x3, 0xb, {0x1, 0xc21}}, {0x5, 0x0, {0x0, 0x2}}, {0x4, 0xe, {0x3, 0x5}}, {0x1, 0x8f2, {0x0, 0x5}}, {0x5, 0x6db, {0x1, 0xd}}, {0xf1, 0x7, {0x2, 0x7fff}}, {0x5, 0x3, {0x3, 0x8}}, {0xa, 0x1, {0x1, 0x3}}, {0x4, 0x5, {0x1, 0x5}}, {0x1, 0x7, {0x1}}, {0xff, 0xee, {0x0, 0x4}}, {0x14, 0xfff, {0x0, 0x1}}, {0x5, 0x0, {0x3, 0x790bedab}}, {0xb, 0x0, {0x2688f9feaf1bf45e, 0xffffab8b}}, {0x5, 0x4, {0x1, 0x3}}, {0xfffb, 0x40, {0x0, 0x400}}, {0x4, 0x9, {0x3, 0x8}}, {0x312, 0x9, {0x0, 0xf7}}, {0x4, 0x36d, {0x0, 0x3}}, {0x5, 0x8, {0x2, 0x395}}, {0x4, 0x9, {0x1, 0xfffff001}}, {0xcf, 0x0, {0x2, 0xfff}}, {0x19, 0xf4, {0x0, 0xee5d}}, {0x6, 0x7, {0x0, 0xf6c}}, {0x9, 0x1, {0x2}}, {0x7, 0x3, {0x3, 0x5}}, {0x5ac, 0x4, {0x1, 0x1}}, {0x3, 0x0, {0x3}}, {0x1, 0x9, {0x1, 0x8}}, {0xa, 0x6, {0x3, 0xf}}, {0x5, 0x3000, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffffd}, 0xd, 0x3, 0x9, 0x7, 0x8, 'syz0\x00', "179b7692d471139bc28c1016569972d2ca4a3c68675a190bd098577cf2ef0f71", "2542f92f034add5dbe592e6cbd6c6f23c31d88bad8e17555ce56a50fc3d7d6d4", [{0xfe00, 0xc, {0x1, 0x6}}, {0x0, 0x3, {0x2, 0x5}}, {0x80, 0x7, {0x7726c18c9405fe7c, 0x9}}, {0xb, 0x401, {0x2, 0x2}}, {0x6, 0x1, {0x3, 0xe6}}, {0x2, 0x0, {0x3, 0xf}}, {0x0, 0x6, {0x3, 0x7}}, {0x6, 0xa, {0x3, 0x6}}, {0x91fd, 0x5, {0x1, 0x2}}, {0x9, 0x4, {0x3, 0x6eb0}}, {0x4, 0x5, {0x3, 0x8000}}, {0x0, 0x9, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x3}}, {0x0, 0x198d, {0x3, 0x2ad}}, {0x8001, 0x40, {0x1, 0x4}}, {0xf, 0x3bf1, {0x3, 0x80000000}}, {0x6, 0x1, {0x3, 0x4}}, {0x7, 0x0, {0x3, 0x1}}, {0x3, 0x2, {0x3, 0x3}}, {0x5, 0x5, {0x3, 0x9}}, {0x1, 0x3, {0x3, 0x2}}, {0x8, 0x7, {0x3, 0xffff}}, {0x5, 0x3, {0x1, 0xfaef}}, {0x72, 0x1, {0x0, 0x10000}}, {0x10, 0x3, {0x3, 0x2}}, {0x8, 0x7, {0x1, 0x1}}, {0x4, 0x80, {0x0, 0x80000000}}, {0x3, 0x4, {0x1, 0x4}}, {0x1b, 0xffff}, {0xfff, 0xd655, {0x0, 0x7}}, {0x2, 0x4, {0x2, 0x681}}, {0x15f9, 0x7, {0x3, 0x12ee}}, {0x7, 0x8, {0x2, 0x3}}, {0x2, 0x2, {0x0, 0x8}}, {0x1, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x1, 0x7}}, {0x5, 0x1, {0x1, 0x10001}}, {0xea1, 0x0, {0x0, 0x8001}}, {0x2, 0xb, {0x1, 0x50000}}, {0x1, 0x6, {0x0, 0xffff22bb}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40890}, 0x10) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) (async) socket$inet6(0xa, 0x80003, 0xff) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f0000000d40)}) socket$nl_netfilter(0x10, 0x3, 0xc) 17.85998673s ago: executing program 3 (id=2174): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x539, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) unshare(0x6020480) pipe(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xbc, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000100), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, r1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fffc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 15.724225065s ago: executing program 2 (id=2175): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.520083113s ago: executing program 32 (id=2168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000140)="1915000000000000000000000000006e6b31398d95e8f31587a5d6535b70e8b8f09b2aff174ca23b6056ac8da34728a8c8ccda0d61a3d51130fb3ede797eaa74f45029b4de7c7d5a", 0x48}], 0x2) 6.58075021s ago: executing program 33 (id=2171): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='percpu_alloc_percpu\x00', r1, 0x0, 0x10}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000010000000007911a800000c0000da9af459eccb059ef12c1dbd2b4783d9dd5ca696a7f951887d699df500000000000000000000001f172575fcd17e39e6a04047dfe50769ceaab6f97dd21c46910aff0700000a178bddbc49a596abb639dbe2cafcfcd29b0a35aca022a865f6e6a527685273e6649befed02"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000000000000298050b7aa471af3a20729656c752c0deca1f41f2a02d6e9236ecccae394", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) 4.076745956s ago: executing program 34 (id=2173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) (async) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) (async) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x70000000}, 0x2, 0x0, 0x5, 0x2, 0x1a, 'syz1\x00', "b013c3e683d24a46e8879d71e2763eaa47ab9f55141856337c3eabcc2fc4f1bf", "d78a82110cea7e41c3bb701a4fab77ae8368c72c386e7f06d223515257b53fcb", [{0x4, 0x1}, {0x26c5, 0x0, {0x2, 0x9}}, {0xa, 0x6, {0x2, 0x1}}, {0x9, 0x0, {0x0, 0x7f93}}, {0xffff, 0xb, {0x0, 0x4}}, {0x5, 0xb7f0, {0x3, 0xc401}}, {0x8, 0x0, {0x2, 0x9}}, {0x7fff, 0x6, {0x3, 0x8}}, {0xe9ab, 0x5, {0x2, 0x80}}, {0x3, 0xb, {0x1, 0xc21}}, {0x5, 0x0, {0x0, 0x2}}, {0x4, 0xe, {0x3, 0x5}}, {0x1, 0x8f2, {0x0, 0x5}}, {0x5, 0x6db, {0x1, 0xd}}, {0xf1, 0x7, {0x2, 0x7fff}}, {0x5, 0x3, {0x3, 0x8}}, {0xa, 0x1, {0x1, 0x3}}, {0x4, 0x5, {0x1, 0x5}}, {0x1, 0x7, {0x1}}, {0xff, 0xee, {0x0, 0x4}}, {0x14, 0xfff, {0x0, 0x1}}, {0x5, 0x0, {0x3, 0x790bedab}}, {0xb, 0x0, {0x2688f9feaf1bf45e, 0xffffab8b}}, {0x5, 0x4, {0x1, 0x3}}, {0xfffb, 0x40, {0x0, 0x400}}, {0x4, 0x9, {0x3, 0x8}}, {0x312, 0x9, {0x0, 0xf7}}, {0x4, 0x36d, {0x0, 0x3}}, {0x5, 0x8, {0x2, 0x395}}, {0x4, 0x9, {0x1, 0xfffff001}}, {0xcf, 0x0, {0x2, 0xfff}}, {0x19, 0xf4, {0x0, 0xee5d}}, {0x6, 0x7, {0x0, 0xf6c}}, {0x9, 0x1, {0x2}}, {0x7, 0x3, {0x3, 0x5}}, {0x5ac, 0x4, {0x1, 0x1}}, {0x3, 0x0, {0x3}}, {0x1, 0x9, {0x1, 0x8}}, {0xa, 0x6, {0x3, 0xf}}, {0x5, 0x3000, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffffd}, 0xd, 0x3, 0x9, 0x7, 0x8, 'syz0\x00', "179b7692d471139bc28c1016569972d2ca4a3c68675a190bd098577cf2ef0f71", "2542f92f034add5dbe592e6cbd6c6f23c31d88bad8e17555ce56a50fc3d7d6d4", [{0xfe00, 0xc, {0x1, 0x6}}, {0x0, 0x3, {0x2, 0x5}}, {0x80, 0x7, {0x7726c18c9405fe7c, 0x9}}, {0xb, 0x401, {0x2, 0x2}}, {0x6, 0x1, {0x3, 0xe6}}, {0x2, 0x0, {0x3, 0xf}}, {0x0, 0x6, {0x3, 0x7}}, {0x6, 0xa, {0x3, 0x6}}, {0x91fd, 0x5, {0x1, 0x2}}, {0x9, 0x4, {0x3, 0x6eb0}}, {0x4, 0x5, {0x3, 0x8000}}, {0x0, 0x9, {0x2, 0x7}}, {0x6, 0x2, {0x0, 0x3}}, {0x0, 0x198d, {0x3, 0x2ad}}, {0x8001, 0x40, {0x1, 0x4}}, {0xf, 0x3bf1, {0x3, 0x80000000}}, {0x6, 0x1, {0x3, 0x4}}, {0x7, 0x0, {0x3, 0x1}}, {0x3, 0x2, {0x3, 0x3}}, {0x5, 0x5, {0x3, 0x9}}, {0x1, 0x3, {0x3, 0x2}}, {0x8, 0x7, {0x3, 0xffff}}, {0x5, 0x3, {0x1, 0xfaef}}, {0x72, 0x1, {0x0, 0x10000}}, {0x10, 0x3, {0x3, 0x2}}, {0x8, 0x7, {0x1, 0x1}}, {0x4, 0x80, {0x0, 0x80000000}}, {0x3, 0x4, {0x1, 0x4}}, {0x1b, 0xffff}, {0xfff, 0xd655, {0x0, 0x7}}, {0x2, 0x4, {0x2, 0x681}}, {0x15f9, 0x7, {0x3, 0x12ee}}, {0x7, 0x8, {0x2, 0x3}}, {0x2, 0x2, {0x0, 0x8}}, {0x1, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x1, 0x7}}, {0x5, 0x1, {0x1, 0x10001}}, {0xea1, 0x0, {0x0, 0x8001}}, {0x2, 0xb, {0x1, 0x50000}}, {0x1, 0x6, {0x0, 0xffff22bb}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40890}, 0x10) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) (async) socket$inet6(0xa, 0x80003, 0xff) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x0, &(0x7f0000000d40)}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.055004588s ago: executing program 35 (id=2174): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x539, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) unshare(0x6020480) pipe(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xbc, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000100), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000540)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, r1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fffc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xc, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 36 (id=2175): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): may not be safe on all matching packets. [ 117.585537][ T7558] bridge0: port 3(erspan0) entered blocking state [ 117.615334][ T7558] bridge0: port 3(erspan0) entered disabled state [ 117.637005][ T7558] erspan0: entered allmulticast mode [ 117.661800][ T7558] erspan0: entered promiscuous mode [ 117.689221][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.396'. [ 117.767637][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 117.852712][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 117.870972][ T3520] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.897408][ T3520] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.927390][ T3520] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.049884][ T7629] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 118.067327][ T3520] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.087954][ T7629] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 118.180123][ T7629] bond1: entered promiscuous mode [ 118.187592][ T7629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.248960][ T7639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.257512][ T7639] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 118.268473][ T7639] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 118.309490][ T7639] bond1: (slave gre1): making interface the new active one [ 118.341306][ T7639] gre1: entered promiscuous mode [ 118.358006][ T7639] bond1: (slave gre1): Enslaving as an active interface with an up link [ 118.430793][ T7625] syzkaller0: entered promiscuous mode [ 118.436656][ T7625] syzkaller0: entered allmulticast mode [ 118.479506][ T7655] sctp: [Deprecated]: syz.1.409 (pid 7655) Use of int in maxseg socket option. [ 118.479506][ T7655] Use struct sctp_assoc_value instead [ 119.923096][ T7682] tipc: Enabled bearer , priority 0 [ 119.930089][ T7687] syzkaller0: entered promiscuous mode [ 119.948344][ T7687] syzkaller0: entered allmulticast mode [ 120.075053][ T7691] tipc: Resetting bearer [ 120.135224][ T7704] __nla_validate_parse: 2 callbacks suppressed [ 120.135242][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 120.150643][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 120.163845][ T7691] tipc: Disabling bearer [ 120.187219][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 120.217265][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.418'. [ 120.236395][ T7700] batadv0: entered promiscuous mode [ 120.243206][ T7700] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 120.390656][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.426950][ T7711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.688574][ T7734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.426'. [ 120.806254][ T7743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.430'. [ 120.997597][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.010601][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.029352][ T7756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.318058][ T7769] netlink: 64 bytes leftover after parsing attributes in process `syz.3.434'. [ 121.485615][ T7751] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 121.516509][ T7777] netlink: 1420 bytes leftover after parsing attributes in process `syz.3.436'. [ 121.817593][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.439'. [ 121.917520][ T7787] netlink: 1420 bytes leftover after parsing attributes in process `syz.2.449'. [ 122.923023][ T5151] Bluetooth: hci0: command 0x0401 tx timeout [ 123.972622][ T7858] netlink: 'syz.0.457': attribute type 13 has an invalid length. [ 124.056222][ T7858] netlink: 'syz.0.457': attribute type 17 has an invalid length. [ 124.468913][ T7883] tc_dump_action: action bad kind [ 124.840316][ T7895] bond1: option xmit_hash_policy: invalid value (10) [ 124.888042][ T7895] bond1 (unregistering): Released all slaves [ 124.951324][ T7902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.012180][ T7902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.213173][ T7904] veth2: entered allmulticast mode [ 125.272329][ T7915] netlink: 'syz.3.468': attribute type 13 has an invalid length. [ 125.378375][ T7915] netlink: 'syz.3.468': attribute type 17 has an invalid length. [ 125.581085][ T7913] netlink: 'syz.0.467': attribute type 32 has an invalid length. [ 125.615861][ T7913] __nla_validate_parse: 6 callbacks suppressed [ 125.615880][ T7913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.467'. [ 126.799754][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 126.811056][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 126.838400][ T7975] bond2: entered promiscuous mode [ 126.848332][ T7975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.865204][ T7982] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 126.873492][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.479'. [ 126.942477][ T7982] team0: Failed to send options change via netlink (err -105) [ 126.973330][ T7982] team0: Port device geneve0 added [ 126.988297][ T7984] netlink: 'syz.3.478': attribute type 12 has an invalid length. [ 127.669809][ T8010] netlink: 108 bytes leftover after parsing attributes in process `syz.0.484'. [ 127.687419][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'. [ 127.753798][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 127.781754][ T8016] sctp: [Deprecated]: syz.3.487 (pid 8016) Use of int in max_burst socket option. [ 127.781754][ T8016] Use struct sctp_assoc_value instead [ 127.933926][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.488'. [ 128.058643][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 128.103586][ T8025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.111085][ T8025] IPv6: NLM_F_CREATE should be set when creating new route [ 128.155047][ T8025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.162465][ T8025] IPv6: NLM_F_CREATE should be set when creating new route [ 128.514460][ T8047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 128.585191][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 128.852395][ T8052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.873358][ T8057] bond_slave_0: entered promiscuous mode [ 128.879298][ T8057] bond_slave_1: entered promiscuous mode [ 128.887899][ T8057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.897420][ T8057] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 128.991872][ T8062] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 129.021394][ T8062] macsec1: entered promiscuous mode [ 129.112314][ T8078] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 129.360009][ T8087] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 129.459994][ T8091] x_tables: duplicate underflow at hook 1 [ 129.566058][ T8075] netlink: 'syz.0.501': attribute type 10 has an invalid length. [ 129.626415][ T8109] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 129.685015][ T8099] batadv1: entered promiscuous mode [ 129.706178][ T8075] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 129.760125][ T8109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.832118][ T8117] macvlan0: entered promiscuous mode [ 129.896672][ T8117] macvlan0: entered allmulticast mode [ 129.917410][ T8117] bond3: entered promiscuous mode [ 129.943882][ T8117] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 129.966688][ T8117] bond3: left promiscuous mode [ 130.048745][ T8112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.073754][ T8112] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.090303][ T8112] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 130.126714][ T8116] gretap1: entered promiscuous mode [ 130.138900][ T8116] bond3: (slave gretap1): making interface the new active one [ 130.150520][ T8116] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 130.247882][ T8135] syzkaller1: entered promiscuous mode [ 130.289194][ T8141] xt_cluster: node mask cannot exceed total number of nodes [ 130.303178][ T8135] syzkaller1: entered allmulticast mode [ 130.603381][ T8162] xt_TCPMSS: Only works on TCP SYN packets [ 131.079080][ T8178] __nla_validate_parse: 5 callbacks suppressed [ 131.079099][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 131.113409][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 131.275397][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 131.285924][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 131.326813][ T6048] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.353643][ T6048] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.367055][ T6048] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.379311][ T6048] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.430352][ T8193] syzkaller0: entered promiscuous mode [ 131.439236][ T8195] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 131.452354][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.534'. [ 131.461462][ T8195] netlink: 'syz.1.533': attribute type 2 has an invalid length. [ 131.480549][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 131.483036][ T8193] syzkaller0: entered allmulticast mode [ 131.519873][ T8193] sch_fq: defrate 9 ignored. [ 131.649994][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.536'. [ 131.664642][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 131.704787][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.536'. [ 132.166786][ T8237] netlink: 'syz.4.545': attribute type 2 has an invalid length. [ 132.481013][ T8254] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 132.514666][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 132.576241][ T8248] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 132.804831][ T8271] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.927749][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318358][ T8295] netlink: 'syz.2.562': attribute type 13 has an invalid length. [ 133.357470][ T50] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.373616][ T50] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.401589][ T50] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.416563][ T50] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.098185][ T8326] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 134.150651][ T8330] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 134.497172][ T8342] syzkaller0: entered promiscuous mode [ 134.519885][ T8342] syzkaller0: entered allmulticast mode [ 134.545704][ T8342] 0: reclassify loop, rule prio 0, protocol 700 [ 134.942068][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 134.956957][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 134.978434][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 135.003127][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 135.085364][ T8343] xt_hashlimit: size too large, truncated to 1048576 [ 135.113114][ T8343] xt_hashlimit: max too large, truncated to 1048576 [ 135.188172][ T8343] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.284733][ T8367] tipc: Started in network mode [ 135.342999][ T8367] tipc: Node identity 5662af3b1f37, cluster identity 4711 [ 135.350303][ T8367] tipc: Enabled bearer , priority 0 [ 135.366675][ T8376] netlink: 'syz.4.581': attribute type 2 has an invalid length. [ 135.466499][ T8368] tipc: Disabling bearer [ 135.606335][ T8388] syzkaller0: entered promiscuous mode [ 135.619781][ T8388] syzkaller0: entered allmulticast mode [ 136.154870][ T8421] vxcan2: entered allmulticast mode [ 136.333124][ T8436] __nla_validate_parse: 8 callbacks suppressed [ 136.333141][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 136.665133][ T8450] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 136.791347][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 136.835927][ T8453] netlink: 'syz.2.601': attribute type 7 has an invalid length. [ 136.869628][ T8453] netlink: 'syz.2.601': attribute type 7 has an invalid length. [ 137.005905][ T6048] wlan1: Trigger new scan to find an IBSS to join [ 137.324976][ T8461] syzkaller0: entered promiscuous mode [ 137.365111][ T8461] syzkaller0: entered allmulticast mode [ 137.374801][ T8463] netlink: 'syz.4.605': attribute type 12 has an invalid length. [ 137.405302][ T8470] netlink: 92 bytes leftover after parsing attributes in process `syz.2.604'. [ 137.415997][ T8463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.605'. [ 138.183357][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 138.476093][ T8484] tipc: Started in network mode [ 138.481122][ T8484] tipc: Node identity 6e5cedd36874, cluster identity 4711 [ 138.489004][ T8484] tipc: Enabled bearer , priority 0 [ 138.511299][ T8484] syzkaller0: entered promiscuous mode [ 138.533895][ T8484] syzkaller0: entered allmulticast mode [ 138.735192][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 138.765458][ T8511] syz_tun: entered promiscuous mode [ 138.770994][ T8511] macvtap1: entered promiscuous mode [ 138.777091][ T8511] macvtap1: entered allmulticast mode [ 138.782643][ T8511] syz_tun: entered allmulticast mode [ 138.838988][ T8483] tipc: Resetting bearer [ 138.890909][ T8483] tipc: Disabling bearer [ 138.898148][ T8507] netlink: 104 bytes leftover after parsing attributes in process `syz.3.611'. [ 139.007189][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 139.234528][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 139.276409][ T60] tipc: Left network mode [ 139.433319][ T8531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 139.543351][ T8538] wg1 speed is unknown, defaulting to 1000 [ 139.569779][ T8538] wg1 speed is unknown, defaulting to 1000 [ 139.600318][ T8538] wg1 speed is unknown, defaulting to 1000 [ 139.647223][ T8538] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.697407][ T8538] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.897287][ T8555] netlink: 'syz.2.628': attribute type 13 has an invalid length. [ 139.919692][ T8538] wg1 speed is unknown, defaulting to 1000 [ 139.948582][ T8538] wg1 speed is unknown, defaulting to 1000 [ 139.977221][ T8538] wg1 speed is unknown, defaulting to 1000 [ 140.013455][ T8538] wg1 speed is unknown, defaulting to 1000 [ 140.070466][ T8538] wg1 speed is unknown, defaulting to 1000 [ 140.089345][ T8538] wg1 speed is unknown, defaulting to 1000 [ 140.137425][ T8538] wg1 speed is unknown, defaulting to 1000 [ 140.400533][ T8576] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 140.518431][ T8576] bond5: entered promiscuous mode [ 140.564624][ T8576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 140.675083][ T8585] tipc: Enabled bearer , priority 0 [ 140.696417][ T8585] syzkaller0: entered promiscuous mode [ 140.705019][ T8585] syzkaller0: entered allmulticast mode [ 140.768318][ T8585] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 140.861089][ T8585] netlink: 'syz.3.638': attribute type 13 has an invalid length. [ 141.020754][ T8608] tipc: Resetting bearer [ 141.171024][ T8584] tipc: Resetting bearer [ 141.187284][ T8584] tipc: Disabling bearer [ 141.317547][ T8625] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 141.388489][ T8600] bond0: (slave netdevsim0): Releasing backup interface [ 141.508441][ T8640] __nla_validate_parse: 7 callbacks suppressed [ 141.508459][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'. [ 141.792335][ T8654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 141.964485][ T2999] wlan1: Trigger new scan to find an IBSS to join [ 142.338355][ T8685] tipc: Cannot configure node identity twice [ 142.357486][ T8683] wg1 speed is unknown, defaulting to 1000 [ 142.450757][ T8685] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 142.921506][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.087500][ T8697] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.666'. [ 143.333921][ T8696] wg1 speed is unknown, defaulting to 1000 [ 143.536873][ T8714] xfrm1: entered allmulticast mode [ 143.888786][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.897120][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.925531][ T8726] xt_limit: Overflow, try lower: 268435456/134217728 [ 143.972908][ T8729] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 144.043582][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.077915][ T8729] team0: Port device bond0 added [ 144.099064][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 144.644356][ T8748] netlink: 'syz.4.683': attribute type 39 has an invalid length. [ 144.708416][ T8748] hsr_slave_1 (unregistering): left promiscuous mode [ 144.787308][ T8750] bond6: entered promiscuous mode [ 144.793784][ T8750] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.063985][ T8770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.687'. [ 145.275717][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.692'. [ 145.664506][ T8796] netlink: 'syz.3.696': attribute type 10 has an invalid length. [ 145.684562][ T8796] team0: Device veth0_macvtap failed to register rx_handler [ 146.491998][ T8842] wg1 speed is unknown, defaulting to 1000 [ 147.000850][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 147.121864][ T8870] netlink: 56 bytes leftover after parsing attributes in process `syz.3.712'. [ 147.631658][ T8901] geneve0: entered allmulticast mode [ 147.710852][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 147.730452][ T8911] ip6tnl1: entered allmulticast mode [ 147.790040][ T8911] netlink: 56 bytes leftover after parsing attributes in process `syz.4.722'. [ 148.099585][ T8929] tipc: Enabled bearer , priority 0 [ 148.107256][ T8929] syzkaller0: entered promiscuous mode [ 148.112799][ T8929] syzkaller0: entered allmulticast mode [ 148.248586][ T8947] wg1 speed is unknown, defaulting to 1000 [ 148.356200][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 148.441456][ T8948] wg1 speed is unknown, defaulting to 1000 [ 149.533904][ T8922] tipc: Resetting bearer [ 149.679040][ T8922] tipc: Disabling bearer [ 149.742120][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.743'. [ 149.762702][ T5833] tipc: Node number set to 2333711723 [ 149.868454][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.744'. [ 149.971458][ T9011] batadv1: entered promiscuous mode [ 149.996995][ T9010] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 150.063460][ T9000] syzkaller1: entered promiscuous mode [ 150.069001][ T9000] syzkaller1: entered allmulticast mode [ 150.097391][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.746'. [ 150.205485][ T9016] wg1 speed is unknown, defaulting to 1000 [ 150.396283][ T9029] netlink: 108 bytes leftover after parsing attributes in process `syz.4.749'. [ 150.425604][ T9029] veth0: entered promiscuous mode [ 150.751920][ T9038] wg1 speed is unknown, defaulting to 1000 [ 150.838895][ T9035] wg1 speed is unknown, defaulting to 1000 [ 150.967615][ T9048] netlink: 'syz.0.756': attribute type 12 has an invalid length. [ 151.085026][ T9059] netlink: 10 bytes leftover after parsing attributes in process `syz.2.759'. [ 151.258963][ T9061] wg1 speed is unknown, defaulting to 1000 [ 151.259240][ T9022] veth0: left promiscuous mode [ 151.291342][ T30] audit: type=1800 audit(1767313212.792:2): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.762" name=6D656D6F72792E6576656E74AB dev="tmpfs" ino=853 res=0 errno=0 [ 151.647229][ T9085] netlink: 'syz.1.766': attribute type 2 has an invalid length. [ 151.685170][ T9085] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 152.278407][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.770'. [ 152.300745][ T9111] bond0: Caught tx_queue_len zero misconfig [ 152.317663][ T9105] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 152.522486][ T9100] wg1 speed is unknown, defaulting to 1000 [ 152.545001][ T9116] syzkaller0: entered promiscuous mode [ 152.563074][ T9116] syzkaller0: entered allmulticast mode [ 152.654983][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 152.799007][ T9127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.809206][ T9127] team0: Port device bond1 added [ 152.911352][ T9137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.777'. [ 153.294272][ T9146] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 153.691424][ T9157] syzkaller0: entered promiscuous mode [ 153.702359][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 153.729549][ T9157] syzkaller0: entered allmulticast mode [ 153.766856][ T9173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 153.801150][ T9177] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 154.105264][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.367651][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 154.371757][ T9205] wg1 speed is unknown, defaulting to 1000 [ 154.376673][ T9211] netlink: 'syz.1.799': attribute type 29 has an invalid length. [ 154.413481][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 154.440400][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 154.660264][ T9212] wg1 speed is unknown, defaulting to 1000 [ 154.673927][ T9224] tipc: Enabled bearer , priority 0 [ 154.704938][ T9224] syzkaller0: entered promiscuous mode [ 154.710542][ T9224] syzkaller0: entered allmulticast mode [ 154.954317][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 154.967134][ T9247] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 154.975445][ T9247] netlink: 'syz.3.808': attribute type 11 has an invalid length. [ 154.993464][ T9247] netlink: 132 bytes leftover after parsing attributes in process `syz.3.808'. [ 155.024750][ T9245] tipc: Resetting bearer [ 155.059686][ T9223] tipc: Resetting bearer [ 155.073758][ T9247] netlink: 'syz.3.808': attribute type 6 has an invalid length. [ 155.138833][ T9223] tipc: Disabling bearer [ 155.216306][ T9248] bond0: entered promiscuous mode [ 155.252717][ T9248] bond_slave_0: entered promiscuous mode [ 155.283222][ T9248] bond_slave_1: entered promiscuous mode [ 155.315608][ T9248] geneve0: entered promiscuous mode [ 155.326381][ T9248] hsr1: entered promiscuous mode [ 155.596502][ T9273] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.676068][ T9263] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 155.755202][ T9263] bond4 (unregistering): Released all slaves [ 155.867159][ T9280] xt_hashlimit: size too large, truncated to 1048576 [ 155.893062][ T9280] xt_hashlimit: max too large, truncated to 1048576 [ 156.004601][ T9280] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.443070][ T5151] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 156.534468][ T5151] Bluetooth: hci0: command 0x0401 tx timeout [ 157.091203][ T9328] wg1 speed is unknown, defaulting to 1000 [ 157.363829][ T9358] __nla_validate_parse: 10 callbacks suppressed [ 157.363846][ T9358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.836'. [ 157.485807][ T9365] block nbd0: Unsupported socket: should be TCP or UNIX. [ 157.768095][ T9378] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 157.827536][ T9379] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 158.248240][ T9365] tipc: Cannot configure node identity twice [ 158.261605][ T9375] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.532048][ T9389] netlink: 112 bytes leftover after parsing attributes in process `syz.3.846'. [ 158.604282][ T9398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.726999][ T9408] Cannot find del_set index 4 as target [ 159.120341][ T9419] syzkaller0: entered promiscuous mode [ 159.127081][ T9419] syzkaller0: entered allmulticast mode [ 159.535625][ T9445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.858'. [ 159.695502][ T9455] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 159.775026][ T9451] scsi_nl_rcv_msg: discarding partial skb [ 159.875512][ T9461] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 160.779310][ T9443] bridge_slave_0: left allmulticast mode [ 160.785111][ T9443] bridge_slave_0: left promiscuous mode [ 160.790919][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.800899][ T9443] bridge_slave_1: left allmulticast mode [ 160.808071][ T9443] bridge_slave_1: left promiscuous mode [ 160.814318][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.836940][ T9443] bond0: (slave bond_slave_0): Releasing backup interface [ 160.849138][ T9443] bond0: (slave bond_slave_1): Releasing backup interface [ 160.861251][ T9443] team0: Port device team_slave_0 removed [ 160.870001][ T9443] team0: Port device team_slave_1 removed [ 160.876933][ T9443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.885410][ T9443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.894266][ T9443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.915754][ T9455] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 161.018098][ T9456] wg1 speed is unknown, defaulting to 1000 [ 161.098170][ T9470] tipc: Started in network mode [ 161.105680][ T9470] tipc: Node identity 7abc2b77a563, cluster identity 4711 [ 161.124672][ T9470] tipc: Enabled bearer , priority 0 [ 161.158696][ T9475] syzkaller0: entered promiscuous mode [ 161.179249][ T9475] syzkaller0: entered allmulticast mode [ 161.217035][ T9479] openvswitch: netlink: IP tunnel TTL not specified. [ 161.225034][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 161.321151][ T9475] tipc: Resetting bearer [ 161.327763][ T9473] wg1 speed is unknown, defaulting to 1000 [ 161.454428][ T9469] tipc: Resetting bearer [ 161.489161][ T9469] tipc: Disabling bearer [ 161.508076][ T9489] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.872'. [ 161.521176][ T9489] openvswitch: netlink: Missing key (keys=40, expected=100) [ 161.560731][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 161.597650][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 161.885520][ T9504] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 162.021922][ T9504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.120012][ T9507] veth3: entered promiscuous mode [ 162.373621][ T9540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.405463][ T9540] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 162.430060][ T9546] team0: Caught tx_queue_len zero misconfig [ 162.452145][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 162.566236][ T9556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.597836][ T9556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.630527][ T9560] ip_vti0: entered promiscuous mode [ 162.637929][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 162.701078][ T9554] netlink: 'syz.0.890': attribute type 83 has an invalid length. [ 163.068067][ T9573] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 163.238334][ T9564] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 163.347266][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'. [ 163.407244][ T9590] ip6gre1: entered promiscuous mode [ 163.424249][ T9590] ip6gre1: entered allmulticast mode [ 163.523723][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.898'. [ 163.544066][ T9593] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 163.551268][ T9592] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 163.560407][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.899'. [ 164.162326][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.911'. [ 164.164092][ T9628] wg1 speed is unknown, defaulting to 1000 [ 164.192134][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 164.301828][ T9636] wg1 speed is unknown, defaulting to 1000 [ 164.467008][ T9657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.914'. [ 164.771192][ T9669] wg1 speed is unknown, defaulting to 1000 [ 164.876984][ T9678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 165.267972][ T9704] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.925'. [ 165.293923][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 165.328576][ T9705] netlink: 'syz.2.923': attribute type 14 has an invalid length. [ 165.378847][ T9705] netlink: 'syz.2.923': attribute type 13 has an invalid length. [ 165.420194][ T9699] wg1 speed is unknown, defaulting to 1000 [ 165.434293][ T9713] geneve3: entered promiscuous mode [ 165.477631][ T319] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.497127][ T5151] Bluetooth: hci0: command 0x0401 tx timeout [ 165.520280][ T319] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.596954][ T319] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.667406][ T9705] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 165.668799][ T319] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.031792][ T9745] xt_TCPMSS: Only works on TCP SYN packets [ 166.297045][ T9754] ip6tnl0: Caught tx_queue_len zero misconfig [ 166.480074][ T9760] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.518037][ T9760] netlink: 'syz.1.932': attribute type 32 has an invalid length. [ 166.700247][ T9770] bond0: (slave gre0): Error: Device type is different from other slaves [ 166.837663][ T9774] pim6reg1: entered allmulticast mode [ 166.935251][ T9799] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.050022][ T9807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.057437][ T9807] IPv6: NLM_F_CREATE should be set when creating new route [ 167.064736][ T9807] IPv6: NLM_F_CREATE should be set when creating new route [ 167.129532][ T9807] netlink: 'syz.1.939': attribute type 5 has an invalid length. [ 167.165141][ T9817] netlink: 'syz.3.941': attribute type 21 has an invalid length. [ 167.176480][ T9807] netlink: 'syz.1.939': attribute type 6 has an invalid length. [ 167.203039][ T9817] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 167.222962][ T9817] netlink: 'syz.3.941': attribute type 3 has an invalid length. [ 167.563088][ T5151] Bluetooth: hci0: command 0x0401 tx timeout [ 167.780555][ T9841] __nla_validate_parse: 14 callbacks suppressed [ 167.780573][ T9841] netlink: 188 bytes leftover after parsing attributes in process `syz.3.949'. [ 167.799589][ T9853] syzkaller0: entered promiscuous mode [ 167.805902][ T9853] syzkaller0: entered allmulticast mode [ 167.982501][ T9856] xt_CT: No such helper "snmp_trap" [ 168.481835][ T9886] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.957'. [ 168.774573][ T9903] netlink: 104 bytes leftover after parsing attributes in process `syz.1.961'. [ 169.114585][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.963'. [ 169.160117][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 169.185707][ T9920] netlink: 68 bytes leftover after parsing attributes in process `syz.1.965'. [ 169.315441][ T9932] netlink: 187428 bytes leftover after parsing attributes in process `syz.0.966'. [ 169.490566][ T9941] netlink: 224 bytes leftover after parsing attributes in process `syz.4.969'. [ 169.514298][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 169.550638][ T9938] netlink: 'syz.3.968': attribute type 13 has an invalid length. [ 169.578607][ T9944] xt_TCPMSS: Only works on TCP SYN packets [ 169.795258][ T9938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.966197][ T9952] netlink: 'syz.4.971': attribute type 4 has an invalid length. [ 169.988679][ T9954] æÿîÿ: entered promiscuous mode [ 170.013918][ T9793] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.034908][ T9793] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.080004][ T9793] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.103337][ T9793] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.167615][ T9965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.230952][ T9967] netlink: 96 bytes leftover after parsing attributes in process `syz.1.973'. [ 170.276781][ T9967] sctp: [Deprecated]: syz.1.973 (pid 9967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.276781][ T9967] Use struct sctp_sack_info instead [ 170.323247][ T9976] IPv6: Can't replace route, no match found [ 170.685287][ T9995] sctp: [Deprecated]: syz.3.980 (pid 9995) Use of int in max_burst socket option deprecated. [ 170.685287][ T9995] Use struct sctp_assoc_value instead [ 170.853371][ T9994] nbd: device at index 64 is going down [ 171.006617][ T9916] udevd[9916]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 171.153241][T10006] syzkaller1: entered promiscuous mode [ 171.158764][T10006] syzkaller1: entered allmulticast mode [ 171.232503][T10018] xt_bpf: check failed: parse error [ 171.359817][T10006] team0 (unregistering): Port device team_slave_0 removed [ 171.370030][T10006] team0 (unregistering): Port device team_slave_1 removed [ 171.384267][T10006] team0 (unregistering): Port device bond1 removed [ 171.527013][T10032] netem: change failed [ 171.531729][T10030] tipc: Enabled bearer , priority 0 [ 171.555167][T10030] syzkaller0: entered promiscuous mode [ 171.583579][T10030] syzkaller0: entered allmulticast mode [ 171.640960][T10030] tipc: Resetting bearer [ 171.665181][T10029] tipc: Resetting bearer [ 171.706651][T10029] tipc: Disabling bearer [ 171.825748][T10044] tipc: Enabled bearer , priority 0 [ 171.838890][T10046] syzkaller0: entered promiscuous mode [ 171.848110][T10046] syzkaller0: entered allmulticast mode [ 171.925448][T10044] tipc: Resetting bearer [ 171.955370][T10044] tipc: Disabling bearer [ 172.197485][T10065] tipc: Failed to remove unknown binding: 66,1,1/0:2798938461/2798938463 [ 172.209744][T10065] tipc: Failed to remove unknown binding: 66,1,1/0:2798938461/2798938463 [ 172.245329][T10065] tipc: Failed to remove unknown binding: 66,1,1/0:2798938461/2798938463 [ 172.390927][T10078] wg1 speed is unknown, defaulting to 1000 [ 173.108495][T10101] __nla_validate_parse: 11 callbacks suppressed [ 173.108512][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 173.613122][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 173.820758][T10149] pimreg: entered allmulticast mode [ 173.859413][T10149] pimreg: left allmulticast mode [ 174.124041][T10169] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 174.181551][T10169] netlink: 'syz.2.1019': attribute type 21 has an invalid length. [ 174.231651][T10169] netlink: 'syz.2.1019': attribute type 22 has an invalid length. [ 174.253431][T10169] netlink: 'syz.2.1019': attribute type 23 has an invalid length. [ 174.275330][T10177] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 174.293149][T10169] netlink: 'syz.2.1019': attribute type 25 has an invalid length. [ 174.331591][T10169] netlink: 'syz.2.1019': attribute type 26 has an invalid length. [ 174.363043][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'. [ 174.380256][T10179] syzkaller0: entered promiscuous mode [ 174.386791][T10179] syzkaller0: entered allmulticast mode [ 174.600272][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 174.615216][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'. [ 174.970328][T10231] netlink: 'syz.1.1033': attribute type 21 has an invalid length. [ 175.004346][T10231] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1033'. [ 175.027162][T10234] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 175.056649][T10234] netlink: 'syz.4.1036': attribute type 3 has an invalid length. [ 175.077522][T10234] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1036'. [ 175.095023][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 175.104294][T10241] wg1 speed is unknown, defaulting to 1000 [ 175.113551][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 175.228806][T10256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1039'. [ 175.474339][T10264] netlink: 'syz.3.1040': attribute type 1 has an invalid length. [ 175.707149][T10270] erspan0: entered promiscuous mode [ 175.726779][T10270] gretap0: entered promiscuous mode [ 175.733604][T10270] debugfs: 'hsr1' already exists in 'hsr' [ 175.749766][T10270] Cannot create hsr debugfs directory [ 175.825626][ T5151] block nbd0: Receive control failed (result -32) [ 176.136889][T10302] wg1 speed is unknown, defaulting to 1000 [ 176.519180][T10323] bridge0: port 3(erspan0) entered blocking state [ 176.525822][T10323] bridge0: port 3(erspan0) entered listening state [ 176.532599][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.539927][T10323] bridge0: port 2(bridge_slave_1) entered listening state [ 176.547439][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.554663][T10323] bridge0: port 1(bridge_slave_0) entered listening state [ 176.594977][T10323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.657995][T10326] macsec1: entered promiscuous mode [ 176.693310][T10326] macsec1: entered allmulticast mode [ 176.810091][T10337] veth0_to_bridge: entered promiscuous mode [ 177.080129][T10359] sctp: [Deprecated]: syz.0.1064 (pid 10359) Use of int in maxseg socket option. [ 177.080129][T10359] Use struct sctp_assoc_value instead [ 177.464942][T10378] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 177.493002][T10378] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 177.517722][T10378] bond2: (slave vxcan3): making interface the new active one [ 177.555185][T10378] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 177.621948][T10387] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 177.661618][T10387] bond2 (unregistering): Released all slaves [ 177.705156][T10352] veth0_to_bridge: left promiscuous mode [ 177.899282][ T9798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.926421][ T9798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.949480][T10415] batadv_slave_1: entered promiscuous mode [ 177.987341][T10415] xt_l2tp: v2 doesn't support IP mode [ 178.028433][T10411] batadv_slave_1: left promiscuous mode [ 178.064181][T10413] syzkaller0: entered promiscuous mode [ 178.070515][T10413] syzkaller0: entered allmulticast mode [ 178.096730][T10419] wg1 speed is unknown, defaulting to 1000 [ 178.385209][T10427] __nla_validate_parse: 11 callbacks suppressed [ 178.385229][T10427] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1077'. [ 178.480794][T10430] tipc: Enabled bearer , priority 0 [ 178.488285][T10430] syzkaller0: entered promiscuous mode [ 178.503293][T10430] syzkaller0: entered allmulticast mode [ 178.604819][T10434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.686294][T10430] tipc: Resetting bearer [ 178.709112][T10429] tipc: Resetting bearer [ 178.717728][T10440] SET target dimension over the limit! [ 178.764866][T10429] tipc: Disabling bearer [ 178.886354][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1083'. [ 179.157875][T10467] wg1 speed is unknown, defaulting to 1000 [ 179.189673][T10469] wg1 speed is unknown, defaulting to 1000 [ 179.350353][T10479] batman_adv: batadv0: Adding interface: vlan2 [ 179.368356][T10478] validate_nla: 2 callbacks suppressed [ 179.368375][T10478] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 179.403965][T10478] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1087'. [ 179.414136][T10446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1082'. [ 179.417206][T10479] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.450375][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.461195][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.497769][T10479] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 179.595248][T10478] bond0: entered promiscuous mode [ 179.600902][T10478] bridge0: port 1(bond0) entered blocking state [ 179.615774][T10478] bridge0: port 1(bond0) entered disabled state [ 179.622484][T10478] bond0: entered allmulticast mode [ 179.658531][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 179.680430][T10494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 179.771174][T10494] geneve2: entered promiscuous mode [ 179.785715][T10494] geneve2: entered allmulticast mode [ 180.165174][T10510] batadv0: left promiscuous mode [ 180.205818][T10510] geneve0: left allmulticast mode [ 180.258903][T10510] veth3: left promiscuous mode [ 180.336531][T10510] geneve3: left promiscuous mode [ 180.354740][T10510] macsec1: left promiscuous mode [ 180.359872][T10510] macsec1: left allmulticast mode [ 180.440501][ T50] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.462028][ T50] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.495197][ T50] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.527712][ T50] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.005292][T10558] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 181.025019][T10558] batadv0: entered allmulticast mode [ 181.039535][T10558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.074231][T10563] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 181.087048][T10558] batadv0: entered promiscuous mode [ 181.096838][T10563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1103'. [ 181.111911][T10558] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 181.123453][T10563] bond0: (slave batadv0): Releasing backup interface [ 181.133529][T10563] bridge0: port 3(batadv0) entered blocking state [ 181.140253][T10563] bridge0: port 3(batadv0) entered disabled state [ 181.150408][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 181.255084][T10566] wg1 speed is unknown, defaulting to 1000 [ 181.483440][ T3520] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 181.493165][ T3520] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 181.576876][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.585329][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.593852][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.629852][T10582] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 181.666976][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.674951][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.682664][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.697408][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.708719][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.739306][T10582] wg1 speed is unknown, defaulting to 1000 [ 181.761843][T10588] xt_TCPMSS: Only works on TCP SYN packets [ 182.380556][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'. [ 182.466357][T10617] netlink: 'syz.4.1115': attribute type 32 has an invalid length. [ 182.474505][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.501304][T10617] bond4: option coupled_control: invalid value (128) [ 182.519884][T10617] bond4 (unregistering): Released all slaves [ 182.606451][T10611] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 182.784723][T10635] ieee802154 phy1 wpan1: encryption failed: -90 [ 183.463671][T10667] __nla_validate_parse: 4 callbacks suppressed [ 183.463689][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 183.485703][T10667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1129'. [ 184.183031][T10692] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1136'. [ 184.299817][T10699] wg1 speed is unknown, defaulting to 1000 [ 184.348584][T10699] wg1 speed is unknown, defaulting to 1000 [ 184.498684][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 184.556329][T10711] macvtap1: entered promiscuous mode [ 184.561667][T10711] veth1_to_hsr: entered promiscuous mode [ 184.602530][T10718] netlink: 'syz.1.1143': attribute type 10 has an invalid length. [ 184.612766][T10711] macvtap1: entered allmulticast mode [ 184.618425][T10711] veth1_to_hsr: entered allmulticast mode [ 184.625371][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1143'. [ 184.689039][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 184.710974][T10727] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1144'. [ 184.822820][T10718] team0: Failed to send options change via netlink (err -105) [ 184.841134][T10718] team0: Port device geneve0 added [ 185.218586][T10746] wg1 speed is unknown, defaulting to 1000 [ 185.286649][T10746] wg1 speed is unknown, defaulting to 1000 [ 185.287968][T10753] tipc: Enabled bearer , priority 0 [ 185.328317][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 185.352493][T10753] syzkaller0: entered promiscuous mode [ 185.363359][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 185.376550][T10753] syzkaller0: entered allmulticast mode [ 185.429674][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1153'. [ 185.730957][ T6671] IPVS: starting estimator thread 0... [ 185.834551][T10781] IPVS: using max 30 ests per chain, 72000 per kthread [ 185.890331][T10787] tipc: Enabled bearer , priority 0 [ 185.938468][T10788] tipc: Disabling bearer [ 186.065408][T10751] tipc: Resetting bearer [ 186.097525][T10751] tipc: Disabling bearer [ 186.139109][T10787] wg1 speed is unknown, defaulting to 1000 [ 186.154590][T10787] wg1 speed is unknown, defaulting to 1000 [ 186.562010][T10806] ip6t_REJECT: ECHOREPLY is not supported [ 186.584046][T10809] ip6t_REJECT: ECHOREPLY is not supported [ 186.747038][T10814] wg1 speed is unknown, defaulting to 1000 [ 186.755906][T10816] netlink: 'syz.4.1165': attribute type 21 has an invalid length. [ 186.773447][T10810] sctp: [Deprecated]: syz.1.1163 (pid 10810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.773447][T10810] Use struct sctp_sack_info instead [ 186.778129][T10814] wg1 speed is unknown, defaulting to 1000 [ 186.808467][T10816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.075282][T10828] wg1 speed is unknown, defaulting to 1000 [ 187.082775][T10828] wg1 speed is unknown, defaulting to 1000 [ 188.474665][T10907] __nla_validate_parse: 7 callbacks suppressed [ 188.474683][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 188.585337][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 188.616614][T10912] ip6tnl2: entered allmulticast mode [ 188.743832][T10918] syzkaller0: entered promiscuous mode [ 188.760712][T10918] syzkaller0: entered allmulticast mode [ 188.812315][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 188.821853][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 188.841742][T10918] tipc: Enabled bearer , priority 0 [ 188.866353][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 188.876700][T10917] tipc: Resetting bearer [ 189.129766][T10917] tipc: Disabling bearer [ 189.169548][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.173882][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 189.185773][ T9797] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.195212][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 189.200009][ T9797] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.215589][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 189.263082][ T9797] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.296370][ T9797] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.370749][T10937] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1194'. [ 189.424170][T10940] gtp0: entered promiscuous mode [ 189.429166][T10940] gtp0: entered allmulticast mode [ 189.560958][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'. [ 190.054013][T10992] netlink: 'syz.4.1207': attribute type 4 has an invalid length. [ 190.082774][T10986] netlink: 'syz.4.1207': attribute type 4 has an invalid length. [ 191.091353][T11055] wg1 speed is unknown, defaulting to 1000 [ 191.116312][T11055] wg1 speed is unknown, defaulting to 1000 [ 191.369154][T11052] syzkaller0: entered promiscuous mode [ 191.389404][T11052] syzkaller0: entered allmulticast mode [ 191.494055][T11084] netlink: 'syz.1.1226': attribute type 10 has an invalid length. [ 191.571750][T11084] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.737338][T11098] x_tables: duplicate underflow at hook 3 [ 191.955506][T11109] syz_tun: entered allmulticast mode [ 191.983708][T11107] syz_tun: left allmulticast mode [ 192.066953][T11113] netlink: 'syz.1.1235': attribute type 21 has an invalid length. [ 192.811528][T11144] wg1 speed is unknown, defaulting to 1000 [ 192.821588][T11144] wg1 speed is unknown, defaulting to 1000 [ 192.978332][T11157] netlink: 'syz.3.1247': attribute type 2 has an invalid length. [ 193.276430][T11165] tipc: Enabled bearer , priority 10 [ 193.337052][T11165] bridge4: entered allmulticast mode [ 193.337236][T11170] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 193.351533][T11170] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.365657][T11170] netlink: 'syz.3.1250': attribute type 27 has an invalid length. [ 194.293038][ T8778] tipc: Node number set to 3755944823 [ 194.373964][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.431954][T11191] Cannot find add_set index 0 as target [ 194.501801][T11200] __nla_validate_parse: 6 callbacks suppressed [ 194.501820][T11200] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1258'. [ 194.566718][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 194.594861][T11210] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 194.603154][T11210] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1260'. [ 194.614631][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.773511][T11222] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1264'. [ 194.813694][T11227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1266'. [ 194.919584][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1267'. [ 195.114365][T11244] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1270'. [ 195.329210][T11255] macsec0: entered allmulticast mode [ 195.354271][T11255] veth1_macvtap: entered allmulticast mode [ 195.360199][T11255] macsec0: left allmulticast mode [ 195.382991][T11255] veth1_macvtap: left allmulticast mode [ 195.439075][T11257] wg1: entered promiscuous mode [ 195.444449][T11257] wg1: entered allmulticast mode [ 195.582553][T11259] netlink: 'syz.3.1276': attribute type 29 has an invalid length. [ 195.601125][T11259] netlink: 'syz.3.1276': attribute type 29 has an invalid length. [ 195.745433][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 195.919868][T11276] batadv1: entered promiscuous mode [ 195.984659][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 196.022715][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1281'. [ 196.281836][T11284] wg1 speed is unknown, defaulting to 1000 [ 196.297803][T11293] netlink: 'syz.2.1284': attribute type 30 has an invalid length. [ 196.314909][T11284] wg1 speed is unknown, defaulting to 1000 [ 196.443299][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 196.445747][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.449459][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 196.823254][T11315] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 197.149036][T11332] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 197.158122][T11332] batadv_slave_0: entered promiscuous mode [ 197.184982][T11332] debugfs: 'hsr1' already exists in 'hsr' [ 197.199826][T11332] Cannot create hsr debugfs directory [ 197.208723][T11332] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 197.218979][T11332] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.230718][T11332] hsr1: entered promiscuous mode [ 198.830574][T11343] syz.4.1298 (11343) used greatest stack depth: 17688 bytes left [ 201.891131][T11365] __nla_validate_parse: 4 callbacks suppressed [ 201.891151][T11365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1305'. [ 201.940050][T11368] netlink: 'syz.0.1307': attribute type 10 has an invalid length. [ 202.153298][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1309'. [ 202.698197][T11365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.709740][T11365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.721214][T11365] bond0 (unregistering): Released all slaves [ 202.757217][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 202.767082][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'. [ 203.053803][T11387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.162773][ T30] audit: type=1800 audit(1767313264.662:3): pid=11406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1317" name="memory.events" dev="tmpfs" ino=1234 res=0 errno=0 [ 203.307583][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 203.331797][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 203.364625][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1321'. [ 203.387629][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 203.602675][T11422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1322'. [ 203.674286][T11423] dvmrp0: entered allmulticast mode [ 203.759124][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 203.879704][T11433] syzkaller0: entered promiscuous mode [ 203.893015][T11433] syzkaller0: entered allmulticast mode [ 203.917412][T11433] tipc: Enabled bearer , priority 0 [ 203.942255][T11433] sch_tbf: burst 380 is lower than device syzkaller0 mtu (1514) ! [ 203.991016][T11433] tipc: Resetting bearer [ 204.004585][T11432] tipc: Resetting bearer [ 204.026628][T11432] tipc: Disabling bearer [ 204.128866][T11439] wg1 speed is unknown, defaulting to 1000 [ 204.138417][T11436] wg1 speed is unknown, defaulting to 1000 [ 204.147887][T11439] wg1 speed is unknown, defaulting to 1000 [ 204.158861][T11436] wg1 speed is unknown, defaulting to 1000 [ 204.852405][T11469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.986254][T11473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 205.025703][T11473] batman_adv: batadv0: Adding interface: gretap1 [ 205.032082][T11473] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 205.122976][T11473] batman_adv: batadv0: Interface activated: gretap1 [ 205.171045][T11476] netlink: 'syz.1.1338': attribute type 10 has an invalid length. [ 205.280328][T11478] openvswitch: netlink: Flow key attr not present in new flow. [ 205.523827][T11490] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 205.564284][T11490] bond3: entered promiscuous mode [ 205.580543][T11490] bond3: entered allmulticast mode [ 205.607795][T11490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.348598][T11544] wg1 speed is unknown, defaulting to 1000 [ 206.361526][T11544] wg1 speed is unknown, defaulting to 1000 [ 206.571374][T11551] wg1 speed is unknown, defaulting to 1000 [ 206.616063][T11551] wg1 speed is unknown, defaulting to 1000 [ 207.010124][T11576] xt_TCPMSS: Only works on TCP SYN packets [ 207.018470][T11574] netlink: 'syz.0.1360': attribute type 3 has an invalid length. [ 207.150171][T11584] __nla_validate_parse: 12 callbacks suppressed [ 207.150190][T11584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1362'. [ 207.167085][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 207.167905][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 207.168121][ C0] bridge0: port 3(erspan0) entered learning state [ 207.314706][T11584] wg1 speed is unknown, defaulting to 1000 [ 207.339305][T11584] wg1 speed is unknown, defaulting to 1000 [ 207.979055][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 208.020960][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 208.094725][T11603] netlink: 'syz.4.1365': attribute type 14 has an invalid length. [ 208.117375][T11603] netlink: 'syz.4.1365': attribute type 12 has an invalid length. [ 208.218459][T11610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1368'. [ 208.274352][T11616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'. [ 208.320123][T11611] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1368'. [ 208.758300][T11635] wg1 speed is unknown, defaulting to 1000 [ 208.772192][T11635] wg1 speed is unknown, defaulting to 1000 [ 208.809760][T11641] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 208.825768][T11641] netlink: 'syz.4.1377': attribute type 3 has an invalid length. [ 208.839661][T11641] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1377'. [ 208.905545][T11641] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.947665][T11644] xt_bpf: check failed: parse error [ 208.984045][T11641] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.056570][T11641] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.142323][T11641] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.292261][ T9798] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.318801][ T9798] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.344020][ T9798] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.365031][ T9798] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.438743][T11667] wg1 speed is unknown, defaulting to 1000 [ 209.455371][T11667] wg1 speed is unknown, defaulting to 1000 [ 209.544724][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 209.629846][T11675] tipc: Enabled bearer , priority 0 [ 209.637855][T11675] syzkaller0: entered promiscuous mode [ 209.644108][T11675] syzkaller0: entered allmulticast mode [ 209.730985][T11680] tipc: Resetting bearer [ 210.115668][T11701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.155198][T11701] wg1 speed is unknown, defaulting to 1000 [ 210.163918][T11701] wg1 speed is unknown, defaulting to 1000 [ 210.291368][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 210.354089][T11716] netlink: 'syz.4.1396': attribute type 11 has an invalid length. [ 210.362114][T11716] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1396'. [ 210.438729][T11674] tipc: Resetting bearer [ 210.485981][T11674] tipc: Disabling bearer [ 210.584025][T11720] macvlan1: entered promiscuous mode [ 210.592177][T11720] ipvlan0: entered promiscuous mode [ 210.599986][T11720] ipvlan0: left promiscuous mode [ 210.606088][T11720] macvlan1: left promiscuous mode [ 210.623666][T11731] netlink: 'syz.4.1399': attribute type 2 has an invalid length. [ 210.830732][T11746] x_tables: duplicate underflow at hook 1 [ 210.850732][T11747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.100905][ T6669] wg1 speed is unknown, defaulting to 1000 [ 211.108066][ T6671] wg1 speed is unknown, defaulting to 1000 [ 211.108270][T11753] tipc: Enabled bearer , priority 0 [ 211.158858][T11753] tipc: Disabling bearer [ 212.000384][T11807] bridge5: entered promiscuous mode [ 212.111194][T11811] syzkaller0: entered promiscuous mode [ 212.121324][T11811] syzkaller0: entered allmulticast mode [ 212.313700][T11823] __nla_validate_parse: 5 callbacks suppressed [ 212.313717][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.353814][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.412366][T11828] netlink: 'syz.4.1427': attribute type 83 has an invalid length. [ 212.434916][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.455332][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.503198][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.547458][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.558508][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.570764][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.581412][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1425'. [ 212.595616][T11839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1431'. [ 212.606528][T11839] block nbd0: reconnected socket [ 212.621733][T11839] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 212.744147][ T5151] block nbd0: Receive control failed (result -32) [ 213.156845][T11871] syzkaller0: entered promiscuous mode [ 213.173421][T11871] syzkaller0: entered allmulticast mode [ 213.256901][T11880] syzkaller0: entered promiscuous mode [ 213.262699][T11880] syzkaller0: entered allmulticast mode [ 213.331275][T11885] wg1 speed is unknown, defaulting to 1000 [ 213.339689][T11885] wg1 speed is unknown, defaulting to 1000 [ 237.243054][ C0] bridge0: port 3(erspan0) entered forwarding state [ 237.250003][ C0] bridge0: topology change detected, propagating [ 237.256802][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.264077][ C0] bridge0: topology change detected, propagating [ 237.270554][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.277809][ C0] bridge0: topology change detected, propagating [ 255.806186][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.544573][T11915] netlink: 'syz.4.1454': attribute type 10 has an invalid length. [ 286.552747][T11915] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 286.574964][T11915] bond0: (slave wlan1): Opening slave failed [ 286.620260][T11914] __nla_validate_parse: 62 callbacks suppressed [ 286.620285][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 286.633240][T11919] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1455'. [ 286.640562][T11914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1451'. [ 286.645824][T11919] tipc: Enabling of bearer rejected, failed to enable media [ 286.872200][T11930] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1458'. [ 286.884792][T11930] netlink: 'syz.0.1458': attribute type 9 has an invalid length. [ 286.894105][T11930] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1458'. [ 286.904158][T11930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1458'. [ 287.167114][ T9796] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.194624][ T9796] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.203927][ T9796] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.212315][ T9796] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.297804][T11939] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.299814][T11941] netlink: 'syz.0.1461': attribute type 83 has an invalid length. [ 287.357802][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 287.377925][T11942] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1460'. [ 287.402143][T11939] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.444822][T11944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.457715][T11939] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.514174][T11952] wg1 speed is unknown, defaulting to 1000 [ 287.522157][T11952] wg1 speed is unknown, defaulting to 1000 [ 287.559822][T11939] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.727325][T11961] syzkaller1: entered promiscuous mode [ 287.735719][T11961] syzkaller1: entered allmulticast mode [ 287.838194][ T9796] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.865214][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 287.903085][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1467'. [ 287.977204][ T9796] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.992352][ T9796] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.040345][T11972] tipc: Enabling of bearer rejected, failed to enable media [ 288.060916][ T9796] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.419661][T11982] netlink: 'syz.2.1471': attribute type 9 has an invalid length. [ 288.626950][T11997] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 288.947942][T12011] batadv1: entered promiscuous mode [ 289.766229][T12035] tap0: tun_chr_ioctl cmd 1074025692 [ 289.825159][T12035] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 290.630494][T12076] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.736734][T12077] IPVS: Scheduler module ip_vs_sip not found [ 290.747615][T12079] IPVS: Scheduler module ip_vs_sip not found [ 290.945098][T12087] tipc: Enabled bearer , priority 0 [ 290.957974][T12076] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.019266][T12085] syzkaller0: entered promiscuous mode [ 291.025356][T12085] syzkaller0: entered allmulticast mode [ 291.085881][T12076] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.161743][T12076] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.209537][T12084] tipc: Resetting bearer [ 291.249240][T12084] tipc: Disabling bearer [ 291.292069][ T9798] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.362374][ T9798] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.416993][ T9798] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.463085][ T9798] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.661131][T12100] syzkaller0: entered promiscuous mode [ 291.676082][T12100] syzkaller0: entered allmulticast mode [ 292.453584][T12126] __nla_validate_parse: 10 callbacks suppressed [ 292.453602][T12126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1505'. [ 292.469940][T12126] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1505'. [ 294.218352][T12154] pim6reg1: entered promiscuous mode [ 294.233125][T12154] pim6reg1: entered allmulticast mode [ 294.357927][T12165] netlink: 584 bytes leftover after parsing attributes in process `syz.3.1510'. [ 294.428092][T12163] syzkaller0: entered promiscuous mode [ 294.444659][T12163] syzkaller0: entered allmulticast mode [ 294.487307][T12164] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.684306][T12164] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.753878][T12171] IPVS: length: 153 != 24 [ 294.898559][T12164] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.034671][T12164] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.213695][ T9798] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.269881][ T3520] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.318146][T12186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1518'. [ 295.450387][ T3520] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.467061][ T3520] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.682194][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 295.832394][T12214] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1523'. [ 295.871893][T12214] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1523'. [ 295.892579][T12214] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 295.915953][T12221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1527'. [ 295.936323][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 296.017124][T12231] tipc: Enabled bearer , priority 0 [ 296.029693][T12231] syzkaller0: entered promiscuous mode [ 296.043014][T12231] syzkaller0: entered allmulticast mode [ 296.103903][T12231] tipc: Resetting bearer [ 296.208289][T12242] tun0: tun_chr_ioctl cmd 1074025675 [ 296.225129][T12242] tun0: persist enabled [ 296.238671][T12242] tun0: tun_chr_ioctl cmd 1074025675 [ 296.253893][T12242] tun0: persist disabled [ 296.298206][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 296.449051][T12249] netlink: 'syz.3.1535': attribute type 3 has an invalid length. [ 296.595872][T12225] tipc: Resetting bearer [ 296.611090][T12225] tipc: Disabling bearer [ 296.693637][T12261] wg1 speed is unknown, defaulting to 1000 [ 296.701620][T12261] wg1 speed is unknown, defaulting to 1000 [ 296.819691][T12267] 8021q: VLANs not supported on wg2 [ 296.828845][T12269] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 297.091820][T12273] netlink: 'syz.4.1541': attribute type 6 has an invalid length. [ 297.345539][T12278] bridge: RTM_NEWNEIGH with invalid ether address [ 297.372236][T12276] wg1 speed is unknown, defaulting to 1000 [ 297.409475][T12276] wg1 speed is unknown, defaulting to 1000 [ 297.460101][T12288] __nla_validate_parse: 6 callbacks suppressed [ 297.460118][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'. [ 297.502537][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1545'. [ 297.591544][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1546'. [ 297.757120][T12288] geneve0: entered allmulticast mode [ 297.934854][T12323] geneve2: entered promiscuous mode [ 297.941164][ T9796] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.960322][ T9796] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.970029][ T9796] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.978834][ T9796] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.136653][T12330] wg1 speed is unknown, defaulting to 1000 [ 298.145131][T12330] wg1 speed is unknown, defaulting to 1000 [ 298.357048][T12337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'. [ 298.437179][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 298.447152][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 298.456428][T12337] netlink: 'syz.2.1556': attribute type 15 has an invalid length. [ 298.839818][T12360] netlink: 'syz.4.1559': attribute type 4 has an invalid length. [ 299.309790][T12377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1562'. [ 299.433749][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 299.495233][T12384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 299.495366][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 299.590502][T12360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.906766][T12394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.994715][T12394] netlink: 'syz.3.1568': attribute type 3 has an invalid length. [ 300.162100][T12402] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 300.197344][T12402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.235431][T12402] bond2: (slave geneve3): making interface the new active one [ 300.246706][T12402] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 300.562429][T12424] tipc: Enabled bearer , priority 0 [ 300.673163][T12429] netlink: 'syz.4.1578': attribute type 2 has an invalid length. [ 300.707643][T12424] syzkaller0: entered promiscuous mode [ 300.719805][T12424] syzkaller0: entered allmulticast mode [ 300.740505][T12424] tipc: Resetting bearer [ 300.805433][T12429] : entered promiscuous mode [ 300.815672][T12421] tipc: Resetting bearer [ 302.533848][T12421] tipc: Disabling bearer [ 302.666471][T12450] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.701128][T12450] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 302.724754][T12450] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.756640][T12450] __nla_validate_parse: 3 callbacks suppressed [ 302.756660][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'. [ 302.777867][T12459] nbd: must specify a size in bytes for the device [ 302.969053][T12466] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 303.026668][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 303.126377][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1592'. [ 303.176563][T12482] unsupported nlmsg_type 40 [ 303.225457][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 303.466510][T12511] netlink: 'syz.2.1598': attribute type 11 has an invalid length. [ 303.486018][T12511] netlink: 'syz.2.1598': attribute type 11 has an invalid length. [ 303.517025][T12511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1598'. [ 303.529931][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 303.600113][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.935693][T12533] x_tables: duplicate underflow at hook 1 [ 303.976072][T12533] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.991873][T12533] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.020615][T12540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.057058][T12540] sch_tbf: peakrate 32770 is lower than or equals to rate 6829859379779001161 ! [ 304.110844][T12533] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.125894][T12533] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.270202][T12533] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.283520][T12533] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.379561][T12533] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.392197][T12533] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.597299][ T9793] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.626502][ T9793] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.636491][ T9793] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.645718][ T9793] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.671470][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 304.684539][ T9793] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.695606][ T9793] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.708978][ T9793] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.718327][ T9793] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.839268][T12587] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 304.945149][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 304.955340][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 304.974390][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1620'. [ 305.100123][T12612] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 305.309701][T12632] : entered promiscuous mode [ 305.599257][ T9796] syzkaller0: tun_net_xmit 76 [ 305.605467][ T9796] syzkaller0: tun_net_xmit 48 [ 305.611832][T12647] syzkaller0: create flow: hash 4174523248 index 1 [ 305.623137][ T6669] syzkaller0: tun_net_xmit 76 [ 305.673231][ T6669] syzkaller0: tun_net_xmit 76 [ 305.729555][T12646] syzkaller0: delete flow: hash 4174523248 index 1 [ 308.176743][T12687] __nla_validate_parse: 2 callbacks suppressed [ 308.176761][T12687] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1646'. [ 308.500306][T12707] wg1 speed is unknown, defaulting to 1000 [ 308.520863][T12707] wg1 speed is unknown, defaulting to 1000 [ 311.173178][ T5151] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 311.644597][T12764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.695987][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1670'. [ 311.794648][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1670'. [ 311.819852][T12778] netlink: zone id is out of range [ 311.824562][T12777] netlink: 63 bytes leftover after parsing attributes in process `syz.4.1673'. [ 311.839900][T12778] netlink: zone id is out of range [ 311.857472][T12778] netlink: zone id is out of range [ 311.868909][T12778] netlink: zone id is out of range [ 311.898072][T12778] netlink: zone id is out of range [ 311.918761][T12778] netlink: zone id is out of range [ 311.928838][T12778] netlink: zone id is out of range [ 311.950781][T12778] netlink: zone id is out of range [ 311.961229][T12778] netlink: zone id is out of range [ 312.122302][T12794] syzkaller0: entered promiscuous mode [ 312.163452][T12794] syzkaller0: entered allmulticast mode [ 312.240416][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1681'. [ 312.251582][T12797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1681'. [ 312.265296][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1681'. [ 312.277636][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 312.547487][T12797] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 312.559783][T12797] team0 (unregistering): Port device team_slave_0 removed [ 312.570458][T12797] team0 (unregistering): Failed to send options change via netlink (err -105) [ 312.580156][T12797] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 312.591799][T12797] team0 (unregistering): Port device team_slave_1 removed [ 312.602583][T12797] team0 (unregistering): Failed to send options change via netlink (err -105) [ 312.612570][T12797] team0 (unregistering): Failed to send port change of device bond0 via netlink (err -105) [ 312.623446][T12797] team0 (unregistering): Port device bond0 removed [ 312.630949][T12797] team0 (unregistering): Failed to send options change via netlink (err -105) [ 312.640470][T12797] team0 (unregistering): Failed to send port change of device geneve0 via netlink (err -105) [ 312.651618][T12797] team0 (unregistering): Port device geneve0 removed [ 312.669633][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 312.679087][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 312.722080][T12808] wg1 speed is unknown, defaulting to 1000 [ 312.734703][T12808] wg1 speed is unknown, defaulting to 1000 [ 312.839896][T12820] netlink: 'syz.3.1689': attribute type 39 has an invalid length. [ 312.989152][T12833] ip6t_srh: unknown srh match flags 4000 [ 313.335018][T12842] __nla_validate_parse: 2 callbacks suppressed [ 313.335039][T12842] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.1692'. [ 313.354793][T12842] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 313.527614][T12846] tipc: Enabling of bearer rejected, failed to enable media [ 313.694240][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'. [ 313.740167][T12860] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1697'. [ 313.760921][T12859] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1697'. [ 313.774283][T12856] bond0: (slave gre0): Error: Device type is different from other slaves [ 313.794026][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 313.917988][T12865] tipc: Enabled bearer , priority 0 [ 313.946554][T12867] tipc: Enabling of bearer rejected, already enabled [ 313.976011][T12865] syzkaller0: entered promiscuous mode [ 313.991735][T12865] syzkaller0: entered allmulticast mode [ 313.999596][T12876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1699'. [ 314.000286][T12865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1698'. [ 314.015042][T12872] wg1 speed is unknown, defaulting to 1000 [ 314.025728][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1698'. [ 314.063919][T12872] wg1 speed is unknown, defaulting to 1000 [ 314.203379][T12865] tipc: Resetting bearer [ 314.245276][T12864] tipc: Resetting bearer [ 314.266308][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1706'. [ 314.276136][T12887] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 314.324140][T12864] tipc: Disabling bearer [ 314.373461][T12868] bond0: option fail_over_mac: invalid value (127) [ 314.382175][T12868] bond0 (unregistering): Released all slaves [ 314.446796][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1705'. [ 314.844754][T12915] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 316.203901][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 316.525355][T12938] tipc: Enabled bearer , priority 0 [ 316.541367][T12930] wg1 speed is unknown, defaulting to 1000 [ 316.543348][T12935] syzkaller0: entered promiscuous mode [ 316.553334][T12935] syzkaller0: entered allmulticast mode [ 316.574076][T12930] wg1 speed is unknown, defaulting to 1000 [ 316.829770][T12944] tipc: Resetting bearer [ 316.915367][T12944] tipc: Disabling bearer [ 316.951040][T12951] vlan2: entered promiscuous mode [ 316.985088][T12951] bond0: entered promiscuous mode [ 316.990710][T12951] vlan2: entered allmulticast mode [ 317.021814][T12951] bond0: entered allmulticast mode [ 317.041981][T12951] bond_slave_0: entered allmulticast mode [ 317.048364][T12951] bond_slave_1: entered allmulticast mode [ 317.126432][T12962] net_ratelimit: 37 callbacks suppressed [ 317.126454][T12962] openvswitch: netlink: IP tunnel TTL not specified. [ 317.246869][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.816687][T13001] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.840489][T13001] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.948099][T13001] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.992095][T13001] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.115740][T13001] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.137286][T13001] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.172657][T13011] netlink: 'syz.3.1735': attribute type 83 has an invalid length. [ 318.232462][T13001] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.261914][T13001] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.465561][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.484255][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.545041][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.559196][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.602575][ T9797] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.621463][ T9797] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.650017][ T9797] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.661003][ T9797] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.876187][T13041] __nla_validate_parse: 5 callbacks suppressed [ 318.876206][T13041] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1744'. [ 318.896828][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 319.318029][T13082] netlink: 'syz.2.1753': attribute type 5 has an invalid length. [ 319.397889][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1754'. [ 319.755121][T13102] netlink: 'syz.4.1756': attribute type 1 has an invalid length. [ 319.799362][T13106] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 319.811684][T13102] bond4: entered promiscuous mode [ 319.817402][T13102] bond4: entered allmulticast mode [ 319.853667][T13112] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 319.904012][T13109] bond4: (slave ip6gretap2): making interface the new active one [ 319.911947][T13109] ip6gretap2: entered promiscuous mode [ 319.954692][T13109] ip6gretap2: entered allmulticast mode [ 319.977876][T13109] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 320.036687][T13116] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 320.053069][T13119] xt_hashlimit: max too large, truncated to 1048576 [ 320.174290][T13124] vlan3: entered allmulticast mode [ 320.179484][T13124] veth1: entered allmulticast mode [ 320.279422][T13135] tipc: Enabled bearer , priority 10 [ 320.305127][T13122] wg1 speed is unknown, defaulting to 1000 [ 320.314848][T13122] wg1 speed is unknown, defaulting to 1000 [ 320.531802][T13138] bond3: Removing last arp target with arp_interval on [ 320.542245][T13138] bond3: entered promiscuous mode [ 320.548043][T13138] bond3: entered allmulticast mode [ 320.554698][T13138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 320.749574][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1771'. [ 320.977671][T13165] wg1 speed is unknown, defaulting to 1000 [ 320.986796][T13165] wg1 speed is unknown, defaulting to 1000 [ 321.172118][T13185] netlink: 'syz.4.1775': attribute type 11 has an invalid length. [ 321.204152][T13185] netlink: 173856 bytes leftover after parsing attributes in process `syz.4.1775'. [ 321.216587][T13176] bond3: entered promiscuous mode [ 321.245540][T13176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.298488][T13177] bond4: entered promiscuous mode [ 321.304238][T13177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.524741][T13196] syzkaller0: entered promiscuous mode [ 321.529532][T13202] netlink: 'syz.0.1783': attribute type 2 has an invalid length. [ 321.530801][T13196] syzkaller0: entered allmulticast mode [ 321.538595][T13202] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1783'. [ 321.575108][T13203] netlink: 187428 bytes leftover after parsing attributes in process `syz.4.1782'. [ 321.594057][T13202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1783'. [ 321.707704][T13205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.724760][T13210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1785'. [ 321.808103][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 321.820075][T13216] sctp: [Deprecated]: syz.3.1787 (pid 13216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.820075][T13216] Use struct sctp_sack_info instead [ 321.984131][T13222] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 322.028449][T13235] netlink: 'syz.1.1792': attribute type 29 has an invalid length. [ 322.047380][T13235] netlink: 'syz.1.1792': attribute type 29 has an invalid length. [ 322.059570][T13235] netlink: 'syz.1.1792': attribute type 29 has an invalid length. [ 322.290281][T13249] geneve4: entered promiscuous mode [ 322.360782][T13251] netem: incorrect ge model size [ 322.379318][T13251] netem: change failed [ 322.451041][T13256] netlink: 'syz.4.1798': attribute type 39 has an invalid length. [ 322.705697][T13270] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 322.737774][T13269] wg1 speed is unknown, defaulting to 1000 [ 322.737884][T13273] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 322.763910][T13269] wg1 speed is unknown, defaulting to 1000 [ 322.926884][T13281] openvswitch: netlink: Multiple metadata blocks provided [ 323.054227][T13284] syzkaller0: entered promiscuous mode [ 323.059845][T13284] syzkaller0: entered allmulticast mode [ 323.356264][T13299] Cannot find del_set index 2 as target [ 323.599407][T13316] x_tables: duplicate underflow at hook 1 [ 323.956176][T13337] bond0 (unregistering): Released all slaves [ 324.136405][T13358] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.286255][T13363] wg1 speed is unknown, defaulting to 1000 [ 324.304001][T13363] wg1 speed is unknown, defaulting to 1000 [ 324.952664][T13387] syzkaller1: entered promiscuous mode [ 324.958610][T13387] syzkaller1: entered allmulticast mode [ 325.023814][T13390] 8021q: VLANs not supported on vcan0 [ 325.174577][T13398] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 325.379045][T13404] pim6reg1: entered promiscuous mode [ 325.385025][T13404] pim6reg1: entered allmulticast mode [ 325.507351][T13403] delete_channel: no stack [ 325.559248][T13422] __nla_validate_parse: 10 callbacks suppressed [ 325.559267][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 325.666441][T13429] tipc: Enabled bearer , priority 0 [ 325.674612][T13432] syzkaller0: entered promiscuous mode [ 325.681447][T13432] syzkaller0: entered allmulticast mode [ 325.725225][T13432] tipc: Resetting bearer [ 325.731095][T13427] xt_CT: No such helper "snmp_trap" [ 325.764581][T13432] tipc: Disabling bearer [ 325.777455][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1844'. [ 325.787328][T13427] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 325.794348][T13427] syzkaller1: linktype set to 260 [ 325.959930][T13444] wg1 speed is unknown, defaulting to 1000 [ 325.968540][T13444] wg1 speed is unknown, defaulting to 1000 [ 326.111519][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 326.357796][T13459] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1852'. [ 326.768955][T13480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1856'. [ 327.060438][T13491] netlink: 'syz.0.1859': attribute type 15 has an invalid length. [ 327.213777][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 327.341005][T13507] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.472138][T13507] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.640538][T13507] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.693940][T13520] syzkaller0: entered promiscuous mode [ 327.699724][T13520] syzkaller0: entered allmulticast mode [ 327.865285][T13507] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.021077][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.065041][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.105933][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.167547][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.289581][T13553] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 328.320023][T13553] bond5 (unregistering): Released all slaves [ 328.529573][T13572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1879'. [ 328.595043][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 328.621038][T13570] netlink: 16122 bytes leftover after parsing attributes in process `syz.3.1880'. [ 328.694844][T13578] wg1 speed is unknown, defaulting to 1000 [ 328.760157][T13578] wg1 speed is unknown, defaulting to 1000 [ 328.894165][T13593] bond5: option lacp_active: invalid value (8) [ 328.906235][T13593] bond5 (unregistering): Released all slaves [ 329.054163][T13613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1888'. [ 329.144071][T13622] netlink: 'syz.2.1891': attribute type 11 has an invalid length. [ 329.329303][T13635] wg1 speed is unknown, defaulting to 1000 [ 329.350395][T13635] wg1 speed is unknown, defaulting to 1000 [ 329.707563][T13654] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 329.816151][T13658] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 330.557533][T13679] wg1 speed is unknown, defaulting to 1000 [ 330.569152][T13679] wg1 speed is unknown, defaulting to 1000 [ 330.878119][T13697] __nla_validate_parse: 3 callbacks suppressed [ 330.878139][T13697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1911'. [ 330.897539][T13706] netlink: 'syz.3.1912': attribute type 11 has an invalid length. [ 330.917845][T13706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1912'. [ 331.046198][T13704] wg1 speed is unknown, defaulting to 1000 [ 331.082081][T13704] wg1 speed is unknown, defaulting to 1000 [ 331.306594][T13722] dvmrp0: entered allmulticast mode [ 331.341899][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'. [ 331.351550][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'. [ 331.532182][T13739] netlink: 'syz.3.1919': attribute type 9 has an invalid length. [ 331.722426][T13750] tipc: Failed to remove unknown binding: 66,1,1/3755944823:1903820519/1903820521 [ 331.769450][T13750] tipc: Failed to remove unknown binding: 66,1,1/3755944823:1903820519/1903820521 [ 331.860418][T13750] tipc: Failed to remove unknown binding: 66,1,1/3755944823:1903820519/1903820521 [ 332.007760][T13764] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 332.055933][T13770] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 332.250136][T13787] wg1 speed is unknown, defaulting to 1000 [ 332.284598][T13787] wg1 speed is unknown, defaulting to 1000 [ 332.314054][T13790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1935'. [ 332.335136][T13788] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1930'. [ 332.348829][T13788] netlink: 'syz.2.1930': attribute type 7 has an invalid length. [ 332.357070][T13788] netlink: 'syz.2.1930': attribute type 8 has an invalid length. [ 332.801075][T13805] wg1 speed is unknown, defaulting to 1000 [ 332.809203][T13805] wg1 speed is unknown, defaulting to 1000 [ 333.227484][T13820] wg1 speed is unknown, defaulting to 1000 [ 333.239812][T13820] wg1 speed is unknown, defaulting to 1000 [ 333.710632][T13846] syz.4.1947 (13846) used obsolete PPPIOCDETACH ioctl [ 334.046455][T13859] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1950'. [ 334.896532][T13895] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1959'. [ 334.954412][T13901] syzkaller0: entered promiscuous mode [ 334.959933][T13901] syzkaller0: entered allmulticast mode [ 335.020669][T13897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1960'. [ 335.033678][T13897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1960'. [ 335.075100][T13906] wg1 speed is unknown, defaulting to 1000 [ 335.099703][T13906] wg1 speed is unknown, defaulting to 1000 [ 335.179752][T13911] tipc: Enabled bearer , priority 0 [ 335.205085][T13911] syzkaller0: entered promiscuous mode [ 335.211411][T13911] syzkaller0: entered allmulticast mode [ 335.324957][T13911] tipc: Resetting bearer [ 335.338804][T13910] tipc: Resetting bearer [ 335.398214][T13910] tipc: Disabling bearer [ 335.788643][T13931] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 336.080381][T13942] delete_channel: no stack [ 336.103193][T13942] delete_channel: no stack [ 336.123307][T13942] delete_channel: no stack [ 336.127964][T13942] delete_channel: no stack [ 336.132563][T13942] delete_channel: no stack [ 336.138755][T13941] __nla_validate_parse: 2 callbacks suppressed [ 336.138778][T13941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1970'. [ 336.183381][T13941] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 336.195912][T13942] delete_channel: no stack [ 336.200543][T13942] delete_channel: no stack [ 336.209462][T13942] delete_channel: no stack [ 336.216260][T13942] delete_channel: no stack [ 336.220862][T13942] delete_channel: no stack [ 336.253122][T13942] delete_channel: no stack [ 336.263889][T13942] delete_channel: no stack [ 336.278801][T13942] delete_channel: no stack [ 336.288906][T13942] delete_channel: no stack [ 336.304146][T13942] delete_channel: no stack [ 336.308937][T13942] delete_channel: no stack [ 336.327808][T13942] delete_channel: no stack [ 336.332562][T13942] delete_channel: no stack [ 336.343252][T13942] delete_channel: no stack [ 336.347874][T13942] delete_channel: no stack [ 336.352549][T13942] delete_channel: no stack [ 336.396040][T13942] delete_channel: no stack [ 336.406368][T13942] delete_channel: no stack [ 336.411081][T13942] delete_channel: no stack [ 336.421163][T13942] delete_channel: no stack [ 336.474494][T13942] delete_channel: no stack [ 336.489398][T13942] delete_channel: no stack [ 336.540814][T13944] delete_channel: no stack [ 336.557586][T13944] delete_channel: no stack [ 336.579653][T13944] delete_channel: no stack [ 336.589805][T13944] delete_channel: no stack [ 336.613757][T13944] delete_channel: no stack [ 336.618401][T13944] delete_channel: no stack [ 337.050597][T13978] netlink: 'syz.1.1982': attribute type 7 has an invalid length. [ 337.074774][T13974] bond4 (unregistering): Released all slaves [ 337.164321][T13979] netlink: 'syz.3.1981': attribute type 5 has an invalid length. [ 337.363356][T13986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1986'. [ 337.406034][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 337.414937][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 337.426170][T13986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1986'. [ 337.437438][T13993] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1988'. [ 337.457698][T13990] netlink: 'syz.2.1985': attribute type 3 has an invalid length. [ 337.587281][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1989'. [ 337.600340][T14001] netlink: 'syz.1.1990': attribute type 9 has an invalid length. [ 337.621083][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 337.630276][T14001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1990'. [ 337.713564][T14003] vlan3: entered allmulticast mode [ 337.732182][T14003] bridge0: entered allmulticast mode [ 337.752308][T14003] bridge4: port 1(vlan3) entered blocking state [ 337.763085][T14003] bridge4: port 1(vlan3) entered disabled state [ 337.807224][T14003] vlan3: entered promiscuous mode [ 337.828456][T14003] bridge0: entered promiscuous mode [ 337.831163][T14013] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.1992'. [ 337.864414][T14015] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 337.948892][T14021] netlink: 'syz.2.1994': attribute type 3 has an invalid length. [ 338.669274][T14042] : entered promiscuous mode [ 339.094184][T14068] netlink: 'syz.4.2012': attribute type 3 has an invalid length. [ 339.370922][T14074] syzkaller0: entered promiscuous mode [ 339.387211][T14074] syzkaller0: entered allmulticast mode [ 341.137380][T14094] netlink: 'syz.0.2016': attribute type 29 has an invalid length. [ 341.305400][T14115] IPVS: set_ctl: invalid protocol: 0 172.20.20.27:20003 [ 341.317473][T14115] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 341.325827][T14115] __nla_validate_parse: 7 callbacks suppressed [ 341.325846][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2022'. [ 341.422348][ T5151] block nbd1: Receive control failed (result -32) [ 345.399412][T14125] xt_CT: No such helper "snmp_trap" [ 346.270221][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2033'. [ 346.326425][T14160] syzkaller0: entered promiscuous mode [ 346.332035][T14160] syzkaller0: entered allmulticast mode [ 346.462453][T14170] xt_connbytes: Forcing CT accounting to be enabled [ 346.474865][T14170] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 346.485801][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 346.519157][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2036'. [ 346.669020][T14182] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2038'. [ 346.864604][T14175] pim6reg1: entered promiscuous mode [ 346.870514][T14175] pim6reg1: entered allmulticast mode [ 346.955570][T14168] wg1 speed is unknown, defaulting to 1000 [ 346.971309][T14168] wg1 speed is unknown, defaulting to 1000 [ 346.975535][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2041'. [ 347.116024][T14193] netlink: 'syz.3.2042': attribute type 6 has an invalid length. [ 347.126297][T14193] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.206025][T14195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2043'. [ 347.420939][T14204] Unsupported ieee802154 address type: 0 [ 347.437988][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2047'. [ 347.634199][T14206] bond0: (slave bond_slave_1): Releasing backup interface [ 347.646526][T14206] bond_slave_1 (unregistering): left promiscuous mode [ 347.738947][T14229] netlink: 'syz.4.2050': attribute type 1 has an invalid length. [ 347.909346][T14229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2050'. [ 347.962459][T14236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.979547][T14236] bond5: (slave bond6): making interface the new active one [ 347.988028][T14236] bond5: (slave bond6): Enslaving as an active interface with an up link [ 348.129102][T14256] tipc: Enabled bearer , priority 0 [ 348.136559][T14256] syzkaller0: entered promiscuous mode [ 348.142030][T14256] syzkaller0: entered allmulticast mode [ 348.154729][T14246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.182300][T14256] tipc: Resetting bearer [ 348.194824][T14255] tipc: Resetting bearer [ 348.210958][T14255] tipc: Disabling bearer [ 348.221245][T14248] wg1 speed is unknown, defaulting to 1000 [ 348.229674][T14248] wg1 speed is unknown, defaulting to 1000 [ 348.705414][T14279] batadv_slave_1: entered promiscuous mode [ 348.738189][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 348.743532][T14283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2064'. [ 348.780875][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2064'. [ 348.792300][T14279] batadv_slave_1 (unregistering): left promiscuous mode [ 348.801887][T14279] batman_adv: batadv0: Removing interface: vlan2 [ 348.812536][T14279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.079169][T14296] wg1 speed is unknown, defaulting to 1000 [ 349.143056][T14296] wg1 speed is unknown, defaulting to 1000 [ 349.440781][T14318] syzkaller0: entered promiscuous mode [ 349.452260][T14318] syzkaller0: entered allmulticast mode [ 350.209839][T14353] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 [ 350.261484][T14354] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 350.288021][T14353] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 351.090862][T14399] wg1 speed is unknown, defaulting to 1000 [ 351.119168][T14399] wg1 speed is unknown, defaulting to 1000 [ 351.641105][T14421] __nla_validate_parse: 7 callbacks suppressed [ 351.641126][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'. [ 351.751211][T14425] wg1 speed is unknown, defaulting to 1000 [ 351.774192][T14425] wg1 speed is unknown, defaulting to 1000 [ 352.587522][T14447] netlink: 8404 bytes leftover after parsing attributes in process `syz.1.2096'. [ 352.738555][T14449] netlink: 'syz.1.2097': attribute type 1 has an invalid length. [ 353.667555][T14485] netlink: 'syz.4.2107': attribute type 3 has an invalid length. [ 353.683265][T14485] netlink: 'syz.4.2107': attribute type 7 has an invalid length. [ 353.692951][T14485] netlink: 'syz.4.2107': attribute type 8 has an invalid length. [ 353.700729][T14485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2107'. [ 353.756375][T14489] wg1 speed is unknown, defaulting to 1000 [ 353.764384][T14489] wg1 speed is unknown, defaulting to 1000 [ 353.821423][T14494] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 354.026340][T14510] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2112'. [ 354.051293][T14503] netlink: 'syz.4.2111': attribute type 30 has an invalid length. [ 354.092229][T14503] bond7: option arp_missed_max: invalid value (0) [ 354.099715][T14503] bond7: option arp_missed_max: allowed values 1 - 255 [ 354.122725][T14503] bond7 (unregistering): Released all slaves [ 354.157815][T14506] ip6t_REJECT: ECHOREPLY is not supported [ 354.172027][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.187301][T14514] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 354.381285][T14526] x_tables: duplicate underflow at hook 1 [ 354.620612][T14545] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 354.646210][T14545] bond4: entered promiscuous mode [ 354.651636][T14545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.676062][T14545] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.683464][T14545] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 354.694366][T14545] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 354.707625][T14545] bond4: (slave wireguard0): making interface the new active one [ 354.715646][T14545] wireguard0: entered promiscuous mode [ 354.723563][T14545] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 354.723619][T14548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.739996][T14548] IPv6: NLM_F_CREATE should be set when creating new route [ 354.747246][T14548] IPv6: NLM_F_CREATE should be set when creating new route [ 354.763175][T14548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.789065][T14548] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 354.810925][T14548] bond4: (slave wireguard1): Enslaving as a backup interface with an up link [ 354.905637][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 354.976462][T14560] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 354.992926][T14560] netlink: 'syz.0.2124': attribute type 22 has an invalid length. [ 355.075783][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'. [ 355.137901][T14569] netlink: 'syz.0.2127': attribute type 7 has an invalid length. [ 355.392589][T14588] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 355.401668][T14587] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 355.588622][T14606] vlan0: entered promiscuous mode [ 355.595884][T14606] bridge0: entered promiscuous mode [ 355.621008][T14608] openvswitch: netlink: Duplicate key (type 21). [ 355.627850][T14609] openvswitch: netlink: Duplicate key (type 21). [ 356.117665][T14635] wg1 speed is unknown, defaulting to 1000 [ 356.127727][T14635] wg1 speed is unknown, defaulting to 1000 [ 356.823695][T14671] netlink: 'syz.4.2154': attribute type 11 has an invalid length. [ 356.902136][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 357.122424][T14679] tipc: Enabled bearer , priority 0 [ 357.149023][T14679] syzkaller0: entered promiscuous mode [ 357.169377][T14679] syzkaller0: entered allmulticast mode [ 357.196122][T14679] tipc: Resetting bearer [ 357.206176][T14678] tipc: Resetting bearer [ 357.237355][T14678] tipc: Disabling bearer [ 357.266712][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2159'. [ 357.277964][T14686] --map-set only usable from mangle table [ 357.299887][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'. [ 357.430063][T14690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2161'. [ 357.458822][T14693] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 357.482517][T14693] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 357.559300][T14695] tipc: Enabled bearer , priority 0 [ 357.594295][T14695] batadv_slave_0: entered allmulticast mode [ 357.603339][T14696] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 357.621892][T14694] tipc: Disabling bearer [ 357.770523][T14713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2167'. [ 359.188576][T14724] tipc: Enabled bearer , priority 0 [ 378.925581][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.193291][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.203325][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.211611][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.219956][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.228079][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.278599][ T5151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.697543][ T5151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.032886][ T5151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.480971][ T5151] Bluetooth: hci5: command tx timeout [ 382.322246][ T5151] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.329987][ T5151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.774667][ T5840] Bluetooth: hci5: command tx timeout [ 384.287005][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.298294][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.307113][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.315377][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.323031][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.598195][ T5151] Bluetooth: hci6: command tx timeout [ 385.676452][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 385.882129][ T5840] Bluetooth: hci5: command tx timeout [ 386.204938][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 386.215760][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 386.224132][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 386.231910][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 386.397400][ T5151] Bluetooth: hci7: command tx timeout [ 386.911820][ T5840] Bluetooth: hci6: command tx timeout [ 387.430947][ T5151] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 387.440880][ T5151] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 387.449277][ T5151] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 387.457401][ T5151] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 387.465168][ T5151] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 387.997919][ T5151] Bluetooth: hci5: command tx timeout [ 388.508443][ T5840] Bluetooth: hci8: command tx timeout [ 388.515174][ T5151] Bluetooth: hci7: command tx timeout [ 389.065415][ T5835] Bluetooth: hci6: command tx timeout [ 390.098727][ T5835] Bluetooth: hci9: command tx timeout [ 391.122264][ T5835] Bluetooth: hci7: command tx timeout [ 391.127738][ T5840] Bluetooth: hci8: command tx timeout [ 391.133237][ T5840] Bluetooth: hci6: command tx timeout [ 392.321089][ T5151] Bluetooth: hci9: command tx timeout [ 393.164658][ T5835] Bluetooth: hci7: command tx timeout [ 393.170099][ T5835] Bluetooth: hci8: command tx timeout [ 394.951715][ T5151] Bluetooth: hci9: command tx timeout [ 395.368689][ T5151] Bluetooth: hci8: command tx timeout [ 397.398196][ T5151] Bluetooth: hci9: command tx timeout [ 437.710335][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 437.719816][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 437.729230][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 437.737497][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 437.745407][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 440.057895][ T5835] Bluetooth: hci10: command tx timeout [ 440.317484][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.218772][ T5835] Bluetooth: hci10: command tx timeout [ 444.063868][ T5151] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 444.633352][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 444.642716][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 444.650053][ T5151] Bluetooth: hci10: command tx timeout [ 444.657456][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 444.665642][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 445.202258][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 445.212221][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 445.220617][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 446.326003][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 446.334413][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 446.803434][ T5151] Bluetooth: hci10: command tx timeout [ 448.381838][ T5840] Bluetooth: hci11: command tx timeout [ 448.625802][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 448.636156][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 448.644684][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 448.653754][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 448.661496][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 448.940466][ T52] Bluetooth: hci12: command tx timeout [ 451.487472][ T52] Bluetooth: hci11: command tx timeout [ 451.493110][ T52] Bluetooth: hci13: command tx timeout [ 451.499253][ T52] Bluetooth: hci12: command tx timeout [ 451.643716][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 451.675266][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 451.685059][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 451.693379][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 451.701044][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 453.655571][ T52] Bluetooth: hci11: command tx timeout [ 453.661828][ T5840] Bluetooth: hci12: command tx timeout [ 453.715852][ T5151] Bluetooth: hci13: command tx timeout [ 453.919629][ T52] Bluetooth: hci14: command tx timeout [ 455.993614][ T5151] Bluetooth: hci13: command tx timeout [ 455.999139][ T5151] Bluetooth: hci12: command tx timeout [ 456.004663][ T52] Bluetooth: hci11: command tx timeout [ 456.010167][ T52] Bluetooth: hci14: command tx timeout [ 458.296509][ T5151] Bluetooth: hci13: command tx timeout [ 458.302063][ T5840] Bluetooth: hci14: command tx timeout [ 460.598128][ T5840] Bluetooth: hci14: command tx timeout [ 462.887093][ T5151] Bluetooth: hci4: command 0x0405 tx timeout [ 498.824107][ T5151] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 498.885138][ T5151] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 498.894054][ T5151] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 498.902131][ T5151] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 498.909968][ T5151] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 500.983529][ T5151] Bluetooth: hci15: command tx timeout [ 501.667048][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.004377][ T5840] Bluetooth: hci15: command tx timeout [ 503.768812][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 504.579143][ T52] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 504.816944][ T5151] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 504.853754][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 505.180705][ T5151] Bluetooth: hci15: command tx timeout [ 507.893105][T14802] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 509.414953][T14807] Bluetooth: hci15: command tx timeout [ 509.424229][T14807] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 510.026697][T14808] Bluetooth: hci7: command 0x0406 tx timeout [ 510.033217][T14808] Bluetooth: hci8: command 0x0406 tx timeout [ 510.199458][T14808] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 510.215436][T14808] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 510.222705][T14808] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 510.231995][T14808] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 510.240385][T14808] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 510.251603][ T5840] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 510.259612][ T5840] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 510.556276][T14804] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 510.593732][T14808] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 510.861166][T14811] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 510.870478][T14811] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 510.879667][T14811] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 510.887147][T14811] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 510.895114][T14811] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 510.905817][T14811] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 511.689769][ T5151] Bluetooth: hci6: command 0x0406 tx timeout [ 512.335907][ T5840] Bluetooth: hci18: command tx timeout [ 513.097798][ T5835] Bluetooth: hci19: command tx timeout [ 513.104180][ T5835] Bluetooth: hci16: command tx timeout [ 514.169052][ T5151] Bluetooth: hci9: command 0x0406 tx timeout [ 514.203186][ T5151] Bluetooth: hci17: command tx timeout [ 514.526020][ T5151] Bluetooth: hci18: command tx timeout [ 515.298026][ T5151] Bluetooth: hci19: command tx timeout [ 515.304508][T14802] Bluetooth: hci16: command tx timeout [ 515.564233][T14727] syzkaller0: entered promiscuous mode [ 515.569862][T14727] syzkaller0: entered allmulticast mode [ 515.576164][T14727] tipc: Resetting bearer [ 515.694382][ T9793] tipc: Resetting bearer [ 515.891609][T14716] tipc: Resetting bearer [ 516.283309][ T5151] Bluetooth: hci17: command tx timeout [ 516.289458][ T31] INFO: task syz.1.2171:14720 blocked for more than 143 seconds. [ 516.297672][ T31] Not tainted syzkaller #0 [ 516.302617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.311484][ T31] task:syz.1.2171 state:D stack:26080 pid:14720 tgid:14719 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 516.324349][ T31] Call Trace: [ 516.327640][ T31] [ 516.330580][ T31] __schedule+0x149b/0x4fd0 [ 516.335692][ T31] ? __pfx___schedule+0x10/0x10 [ 516.340608][ T31] ? schedule+0x91/0x360 [ 516.345109][ T31] schedule+0x165/0x360 [ 516.349319][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.355277][ T31] __mutex_lock+0x7e6/0x1350 [ 516.359903][ T31] ? __mutex_lock+0x5bb/0x1350 [ 516.365005][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 516.370083][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.375194][ T31] __tun_chr_ioctl+0x37a/0x1df0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 516.380275][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 516.386090][ T31] ? __fget_files+0x2a/0x420 [ 516.390708][ T31] ? __fget_files+0x3a0/0x420 [ 516.405131][ T31] ? __fget_files+0x2a/0x420 [ 516.409785][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 516.415287][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 516.420439][ T31] __se_sys_ioctl+0xfc/0x170 [ 516.425315][ T31] do_syscall_64+0xec/0xf80 [ 516.429878][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.436340][ T31] ? trace_irq_disable+0x37/0x100 [ 516.441408][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.612834][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.618802][ T31] RIP: 0033:0x7f95db78f749 [ 516.623431][ T31] RSP: 002b:00007f95dc6dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.631871][ T31] RAX: ffffffffffffffda RBX: 00007f95db9e5fa0 RCX: 00007f95db78f749 [ 516.640084][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000007 [ 516.648297][ T5151] Bluetooth: hci18: command tx timeout [ 516.654955][ T31] RBP: 00007f95db813f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.663154][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.671131][ T31] R13: 00007f95db9e6038 R14: 00007f95db9e5fa0 R15: 00007ffccbd8bc88 [ 516.680459][ T31] [ 516.683677][ T31] INFO: task syz.1.2171:14732 blocked for more than 143 seconds. [ 516.691399][ T31] Not tainted syzkaller #0 [ 516.696512][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.705438][ T31] task:syz.1.2171 state:D stack:27416 pid:14732 tgid:14719 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 516.717713][ T31] Call Trace: [ 516.721261][ T31] [ 516.738071][ T31] __schedule+0x149b/0x4fd0 [ 516.742833][ T31] ? irqentry_exit+0x5dd/0x660 [ 516.747731][ T31] ? __pfx___schedule+0x10/0x10 [ 516.752626][ T31] ? schedule+0x91/0x360 [ 516.757082][ T31] schedule+0x165/0x360 [ 516.761260][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.766909][ T31] __mutex_lock+0x7e6/0x1350 [ 516.771518][ T31] ? __mutex_lock+0x5bb/0x1350 [ 516.776520][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 516.781647][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.787009][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 516.792048][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 516.797363][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 516.802996][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 516.808027][ T31] ? __asan_memcpy+0x40/0x70 [ 516.812933][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 516.818315][ T31] ? __skb_clone+0x63/0x7a0 [ 516.822910][ T31] netlink_rcv_skb+0x208/0x470 [ 516.827691][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 516.833354][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.838668][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.843997][ T31] netlink_unicast+0x82f/0x9e0 [ 516.848783][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.856674][ T31] ? __alloc_skb+0x198/0x3a0 [ 516.861291][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.866329][ T31] ? skb_put+0x11b/0x210 [ 516.870589][ T31] netlink_sendmsg+0x805/0xb30 [ 516.875649][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.880952][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 516.886268][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.891569][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.897013][ T31] __sock_sendmsg+0x21c/0x270 [ 516.902148][ T31] ____sys_sendmsg+0x505/0x820 [ 516.907023][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.912332][ T31] ? import_iovec+0x74/0xa0 [ 516.917086][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 516.921775][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.927255][ T31] ? count_memcg_event_mm+0x21/0x260 [ 516.932587][ T31] ? __fget_files+0x2a/0x420 [ 516.937351][ T31] ? __fget_files+0x3a0/0x420 [ 516.942071][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 516.947670][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.953341][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 516.958652][ T31] do_syscall_64+0xec/0xf80 [ 516.963992][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.970367][ T31] ? trace_irq_disable+0x37/0x100 [ 516.975633][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.980328][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.986317][ T31] RIP: 0033:0x7f95db78f749 [ 516.990742][ T31] RSP: 002b:00007f95dc69b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.999443][ T31] RAX: ffffffffffffffda RBX: 00007f95db9e6180 RCX: 00007f95db78f749 [ 517.008192][ T31] RDX: 0000000024040084 RSI: 00002000000012c0 RDI: 0000000000000009 [ 517.016335][ T31] RBP: 00007f95db813f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.024480][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.032486][ T31] R13: 00007f95db9e6218 R14: 00007f95db9e6180 R15: 00007ffccbd8bc88 [ 517.040792][ T31] [ 517.053134][ T31] INFO: task syz.1.2171:14733 blocked for more than 144 seconds. [ 517.060895][ T31] Not tainted syzkaller #0 [ 517.066060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.075608][ T31] task:syz.1.2171 state:D stack:27416 pid:14733 tgid:14719 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 517.087775][ T31] Call Trace: [ 517.091063][ T31] [ 517.094743][ T31] __schedule+0x149b/0x4fd0 [ 517.099295][ T31] ? irqentry_exit+0x5dd/0x660 [ 517.104314][ T31] ? __pfx___schedule+0x10/0x10 [ 517.109196][ T31] ? schedule+0x91/0x360 [ 517.113595][ T31] schedule+0x165/0x360 [ 517.117774][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.123493][ T31] __mutex_lock+0x7e6/0x1350 [ 517.128123][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.133042][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 517.138355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.143709][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 517.148690][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 517.154104][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.159581][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 517.164747][ T31] ? __asan_memcpy+0x40/0x70 [ 517.169344][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.179531][ T31] ? __skb_clone+0x63/0x7a0 [ 517.184915][ T31] netlink_rcv_skb+0x208/0x470 [ 517.189703][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.195329][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.200640][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.206359][ T31] netlink_unicast+0x82f/0x9e0 [ 517.211172][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.226026][ T31] ? __alloc_skb+0x198/0x3a0 [ 517.230661][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.236348][ T31] ? skb_put+0x11b/0x210 [ 517.240626][ T31] netlink_sendmsg+0x805/0xb30 [ 517.245869][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.251182][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.256716][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.262029][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.267578][ T31] __sock_sendmsg+0x21c/0x270 [ 517.272285][ T31] ____sys_sendmsg+0x505/0x820 [ 517.277217][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.282524][ T31] ? import_iovec+0x74/0xa0 [ 517.287212][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 517.291909][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.297649][ T31] ? count_memcg_event_mm+0x21/0x260 [ 517.303165][ T31] ? __fget_files+0x2a/0x420 [ 517.307775][ T31] ? __fget_files+0x3a0/0x420 [ 517.312504][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 517.317716][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.323649][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 517.329340][ T31] do_syscall_64+0xec/0xf80 [ 517.334172][ T5151] Bluetooth: hci19: command tx timeout [ 517.339744][ T5151] Bluetooth: hci16: command tx timeout [ 517.346964][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.353170][ T31] ? trace_irq_disable+0x37/0x100 [ 517.358419][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.363382][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.369289][ T31] RIP: 0033:0x7f95db78f749 [ 517.373842][ T31] RSP: 002b:00007f95dc67a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.382266][ T31] RAX: ffffffffffffffda RBX: 00007f95db9e6270 RCX: 00007f95db78f749 [ 517.391025][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 517.399677][ T31] RBP: 00007f95db813f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.408855][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.416910][ T31] R13: 00007f95db9e6308 R14: 00007f95db9e6270 R15: 00007ffccbd8bc88 [ 517.425138][ T31] [ 517.428186][ T31] INFO: task syz.4.2173:14739 blocked for more than 144 seconds. [ 517.436065][ T31] Not tainted syzkaller #0 [ 517.441021][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.449983][ T31] task:syz.4.2173 state:D stack:26472 pid:14739 tgid:14738 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 517.462410][ T31] Call Trace: [ 517.465907][ T31] [ 517.468937][ T31] __schedule+0x149b/0x4fd0 [ 517.473784][ T31] ? irqentry_exit+0x5dd/0x660 [ 517.478594][ T31] ? __pfx___schedule+0x10/0x10 [ 517.484040][ T31] ? schedule+0x91/0x360 [ 517.488392][ T31] schedule+0x165/0x360 [ 517.492568][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.498080][ T31] __mutex_lock+0x7e6/0x1350 [ 517.502693][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.507645][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 517.514164][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.519223][ T31] ? net_generic+0x1e/0x240 [ 517.523942][ T31] ? net_generic+0x1e/0x240 [ 517.528480][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 517.534592][ T31] ops_init+0x35c/0x5c0 [ 517.538775][ T31] setup_net+0x110/0x330 [ 517.543205][ T31] ? __pfx_setup_net+0x10/0x10 [ 517.547998][ T31] ? preinit_net+0x47d/0x780 [ 517.552702][ T31] copy_net_ns+0x3e3/0x570 [ 517.557307][ T31] create_new_namespaces+0x3e7/0x6a0 [ 517.562612][ T31] ? security_capable+0x7e/0x2e0 [ 517.567905][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 517.573672][ T31] ksys_unshare+0x4c8/0x8c0 [ 517.579188][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 517.584550][ T31] ? rcu_is_watching+0x15/0xb0 [ 517.589349][ T31] __x64_sys_unshare+0x38/0x50 [ 517.594229][ T31] do_syscall_64+0xec/0xf80 [ 517.598749][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.605075][ T31] ? trace_irq_disable+0x37/0x100 [ 517.610116][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.614851][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.620845][ T31] RIP: 0033:0x7f0fb638f749 [ 517.625541][ T31] RSP: 002b:00007f0fb718c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 517.634097][ T31] RAX: ffffffffffffffda RBX: 00007f0fb65e5fa0 RCX: 00007f0fb638f749 [ 517.642075][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 517.651713][ T31] RBP: 00007f0fb6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 517.661162][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.669429][ T31] R13: 00007f0fb65e6038 R14: 00007f0fb65e5fa0 R15: 00007ffcbeec88f8 [ 517.677726][ T31] [ 517.680820][ T31] INFO: task syz.4.2173:14741 blocked for more than 144 seconds. [ 517.688999][ T31] Not tainted syzkaller #0 [ 517.694103][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.702936][ T31] task:syz.4.2173 state:D stack:26648 pid:14741 tgid:14738 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 517.715019][ T31] Call Trace: [ 517.718358][ T31] [ 517.721296][ T31] __schedule+0x149b/0x4fd0 [ 517.726069][ T31] ? irqentry_exit+0x5dd/0x660 [ 517.730889][ T31] ? __pfx___schedule+0x10/0x10 [ 517.736025][ T31] ? schedule+0x91/0x360 [ 517.740349][ T31] schedule+0x165/0x360 [ 517.744897][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.750737][ T31] __mutex_lock+0x7e6/0x1350 [ 517.756850][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.761760][ T31] ? rtnl_dumpit+0x92/0x200 [ 517.766528][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.771571][ T31] ? trace_kmalloc+0x1f/0xb0 [ 517.776340][ T31] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 517.783248][ T31] ? __build_skb_around+0x22d/0x3c0 [ 517.788487][ T31] ? __pfx_rtnl_dump_all+0x10/0x10 [ 517.793823][ T31] rtnl_dumpit+0x92/0x200 [ 517.798167][ T31] netlink_dump+0x6e4/0xe90 [ 517.803428][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 517.808471][ T31] ? __netlink_lookup+0x7db/0x8a0 [ 517.814059][ T31] ? netlink_lookup+0x30/0x200 [ 517.818844][ T31] ? netlink_lookup+0x30/0x200 [ 517.823847][ T31] ? netlink_lookup+0x30/0x200 [ 517.828632][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 517.833980][ T31] rtnetlink_rcv_msg+0x9eb/0xb70 [ 517.838934][ T31] ? __pfx_rtnl_dump_all+0x10/0x10 [ 517.844216][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 517.849343][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.855012][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 517.860054][ T31] ? __pfx_rtnl_dumpit+0x10/0x10 [ 517.865691][ T31] ? __pfx_rtnl_dump_all+0x10/0x10 [ 517.870815][ T31] ? __skb_clone+0x63/0x7a0 [ 517.875520][ T31] netlink_rcv_skb+0x208/0x470 [ 517.880307][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.886013][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.891325][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.896736][ T31] netlink_unicast+0x82f/0x9e0 [ 517.901551][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.907066][ T31] ? __alloc_skb+0x198/0x3a0 [ 517.911686][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.917110][ T31] ? skb_put+0x11b/0x210 [ 517.921380][ T31] netlink_sendmsg+0x805/0xb30 [ 517.926307][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.931623][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.936665][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.941963][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.947476][ T31] __sock_sendmsg+0x21c/0x270 [ 517.952196][ T31] sock_write_iter+0x279/0x360 [ 517.957627][ T31] ? __pfx_sock_write_iter+0x10/0x10 [ 517.963261][ T31] ? bpf_lsm_file_permission+0x9/0x20 [ 517.968753][ T31] ? security_file_permission+0x75/0x290 [ 517.975654][ T31] vfs_write+0x5c9/0xb30 [ 517.979939][ T31] ? __pfx_sock_write_iter+0x10/0x10 [ 517.985410][ T31] ? __pfx_vfs_write+0x10/0x10 [ 517.990199][ T31] ? __fget_files+0x2a/0x420 [ 517.995034][ T31] ksys_write+0x145/0x250 [ 517.999381][ T31] ? __pfx_ksys_write+0x10/0x10 [ 518.004538][ T31] do_syscall_64+0xec/0xf80 [ 518.009058][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.015275][ T31] ? trace_irq_disable+0x37/0x100 [ 518.020316][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.025181][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.031086][ T31] RIP: 0033:0x7f0fb638f749 [ 518.035723][ T31] RSP: 002b:00007f0fb716b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.044301][ T31] RAX: ffffffffffffffda RBX: 00007f0fb65e6090 RCX: 00007f0fb638f749 [ 518.052298][ T31] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 518.060377][ T31] RBP: 00007f0fb6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.068568][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.076754][ T31] R13: 00007f0fb65e6128 R14: 00007f0fb65e6090 R15: 00007ffcbeec88f8 [ 518.085601][ T31] [ 518.088707][ T31] INFO: task syz.3.2174:14750 blocked for more than 145 seconds. [ 518.096553][ T31] Not tainted syzkaller #0 [ 518.101491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.110331][ T31] task:syz.3.2174 state:D stack:27160 pid:14750 tgid:14748 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 518.122549][ T31] Call Trace: [ 518.126756][ T31] [ 518.129734][ T31] __schedule+0x149b/0x4fd0 [ 518.134333][ T31] ? kasan_save_track+0x4f/0x80 [ 518.139192][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 518.144244][ T31] ? do_syscall_64+0xec/0xf80 [ 518.149048][ T31] ? __pfx___schedule+0x10/0x10 [ 518.154441][ T31] ? schedule+0x91/0x360 [ 518.158712][ T31] schedule+0x165/0x360 [ 518.172109][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.177704][ T31] __mutex_lock+0x7e6/0x1350 [ 518.182319][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.187332][ T31] ? ppp_ioctl+0x695/0x19a0 [ 518.192031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.197653][ T31] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 518.207334][ T31] ? alloc_netdev_mqs+0xe2a/0x11b0 [ 518.212509][ T31] ppp_ioctl+0x695/0x19a0 [ 518.217493][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 518.222292][ T31] ? __fget_files+0x2a/0x420 [ 518.227169][ T31] ? __fget_files+0x3a0/0x420 [ 518.231866][ T31] ? __fget_files+0x2a/0x420 [ 518.236796][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 518.241754][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 518.246963][ T31] __se_sys_ioctl+0xfc/0x170 [ 518.251580][ T31] do_syscall_64+0xec/0xf80 [ 518.256285][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.262361][ T31] ? trace_irq_disable+0x37/0x100 [ 518.267588][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.272283][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.278326][ T31] RIP: 0033:0x7f567af8f749 [ 518.282892][ T31] RSP: 002b:00007f567bdc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.291350][ T31] RAX: ffffffffffffffda RBX: 00007f567b1e6090 RCX: 00007f567af8f749 [ 518.299404][ T31] RDX: 00002000000001c0 RSI: 00000000c004743e RDI: 0000000000000007 [ 518.308170][ T31] RBP: 00007f567b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.316902][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.325165][ T31] R13: 00007f567b1e6128 R14: 00007f567b1e6090 R15: 00007fff2a531688 [ 518.333989][ T31] [ 518.345965][ T31] INFO: task syz.3.2174:14753 blocked for more than 145 seconds. [ 518.354179][ T31] Not tainted syzkaller #0 [ 518.359130][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.368050][ T31] task:syz.3.2174 state:D stack:28600 pid:14753 tgid:14748 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 518.380053][T14802] Bluetooth: hci17: command tx timeout [ 518.386989][ T31] Call Trace: [ 518.390296][ T31] [ 518.393391][ T31] __schedule+0x149b/0x4fd0 [ 518.397947][ T31] ? __pfx___schedule+0x10/0x10 [ 518.402984][ T31] ? schedule+0x91/0x360 [ 518.407331][ T31] schedule+0x165/0x360 [ 518.411492][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.417577][ T31] __mutex_lock+0x7e6/0x1350 [ 518.422208][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.427231][ T31] ? ppp_ioctl+0xcd/0x19a0 [ 518.431698][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.436855][ T31] ? do_futex+0x395/0x420 [ 518.441195][ T31] ? __fget_files+0x2a/0x420 [ 518.447534][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 518.452351][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 518.457343][ T31] ppp_ioctl+0xcd/0x19a0 [ 518.461627][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 518.466612][ T31] ? __fget_files+0x2a/0x420 [ 518.471310][ T31] ? __fget_files+0x3a0/0x420 [ 518.476122][ T31] ? __fget_files+0x2a/0x420 [ 518.480728][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 518.485883][ T31] ? __pfx_ppp_ioctl+0x10/0x10 [ 518.490666][ T31] __se_sys_ioctl+0xfc/0x170 [ 518.495542][ T31] do_syscall_64+0xec/0xf80 [ 518.505763][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.511884][ T31] ? trace_irq_disable+0x37/0x100 [ 518.517149][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.521844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.528370][ T31] RIP: 0033:0x7f567af8f749 [ 518.532883][ T31] RSP: 002b:00007f567bda8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.541312][ T31] RAX: ffffffffffffffda RBX: 00007f567b1e6180 RCX: 00007f567af8f749 [ 518.549458][ T31] RDX: 000000110e22fffc RSI: 00000000c004743e RDI: 0000000000000006 [ 518.557924][ T31] RBP: 00007f567b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.566031][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.574077][ T31] R13: 00007f567b1e6218 R14: 00007f567b1e6180 R15: 00007fff2a531688 [ 518.582159][ T31] [ 518.594669][ T31] [ 518.594669][ T31] Showing all locks held in the system: [ 518.602428][ T31] 1 lock held by khungtaskd/31: [ 518.607476][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 518.617770][ T31] 3 locks held by kworker/u8:10/2999: [ 518.623323][ T31] #0: ffff88802f25d948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 518.635590][ T31] #1: ffffc9000c347bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 518.649539][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 518.659086][ T31] 2 locks held by kworker/u8:11/3019: [ 518.665294][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 518.675592][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 518.684662][T14802] Bluetooth: hci18: command tx timeout [ 518.690204][ T31] 2 locks held by getty/5585: [ 518.696304][ T31] #0: ffff88814e0d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 518.706326][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 518.716680][ T31] 3 locks held by kworker/1:11/6669: [ 518.721968][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 518.733176][ T31] #1: ffffc900057f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 518.744814][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 518.755383][ T31] 3 locks held by kworker/0:7/8778: [ 518.760594][ T31] #0: ffff88813ff16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 518.774016][ T31] #1: ffffc9000f45fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 518.785245][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf00 [ 518.795064][ T31] 2 locks held by syz.0.2168/14716: [ 518.800272][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 518.809426][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 518.820581][ T31] 1 lock held by syz.1.2171/14720: [ 518.825768][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 518.835420][ T31] 1 lock held by syz.1.2171/14732: [ 518.840537][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 518.850870][ T31] 1 lock held by syz.1.2171/14733: [ 518.856592][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 518.866166][ T31] 2 locks held by syz.4.2173/14739: [ 518.871368][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 518.881338][ T31] #1: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 518.892007][ T31] 2 locks held by syz.4.2173/14741: [ 518.897547][ T31] #0: ffff8880523126f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 518.907979][ T31] #1: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 518.917016][ T31] 2 locks held by syz.3.2174/14750: [ 518.922219][ T31] #0: ffffffff8eae7588 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xcd/0x19a0 [ 518.931087][ T31] #1: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: ppp_ioctl+0x695/0x19a0 [ 518.940136][ T31] 1 lock held by syz.3.2174/14753: [ 518.945315][ T31] #0: ffffffff8eae7588 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xcd/0x19a0 [ 518.954521][ T31] 1 lock held by syz.2.2175/14759: [ 518.959638][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 518.969669][ T31] 1 lock held by syz-executor/14763: [ 518.975090][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 518.984699][ T31] 1 lock held by syz-executor/14764: [ 518.989987][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 518.999711][ T31] 1 lock held by syz-executor/14769: [ 519.005866][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.015515][ T31] 1 lock held by syz-executor/14772: [ 519.020818][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.030370][ T31] 1 lock held by syz-executor/14774: [ 519.035862][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.045426][ T31] 1 lock held by syz-executor/14777: [ 519.050711][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.060455][ T31] 1 lock held by syz-executor/14781: [ 519.065806][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.076367][ T31] 1 lock held by syz-executor/14784: [ 519.081663][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.091410][ T31] 1 lock held by syz-executor/14787: [ 519.096910][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.106583][ T31] 1 lock held by syz-executor/14789: [ 519.111869][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.121796][ T31] 1 lock held by syz-executor/14794: [ 519.127254][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 519.137638][ T31] 2 locks held by syz-executor/14797: [ 519.143109][ T31] 1 lock held by syz-executor/14800: [ 519.148488][ T31] #0: ffffffff8e09a4d0 (namespace_sem){++++}-{4:4}, at: copy_mnt_ns+0xc3/0x7c0 [ 519.157858][ T31] 1 lock held by syz-executor/14806: [ 519.163296][ T31] #0: ffffffff8e09a4d0 (namespace_sem){++++}-{4:4}, at: do_change_type+0x109/0x310 [ 519.173169][ T31] 1 lock held by syz-executor/14810: [ 519.178542][ T31] #0: ffffffff8e09a4d0 (namespace_sem){++++}-{4:4}, at: copy_mnt_ns+0xc3/0x7c0 [ 519.196928][ T31] [ 519.199294][ T31] ============================================= [ 519.199294][ T31] [ 519.207894][ T31] NMI backtrace for cpu 1 [ 519.207918][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.207941][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.207953][ T31] Call Trace: [ 519.207962][ T31] [ 519.207971][ T31] dump_stack_lvl+0xe8/0x150 [ 519.208001][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 519.208028][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.208063][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 519.208097][ T31] sys_info+0x135/0x170 [ 519.208119][ T31] watchdog+0xf95/0xfe0 [ 519.208151][ T31] ? watchdog+0x20a/0xfe0 [ 519.208184][ T31] kthread+0x711/0x8a0 [ 519.208213][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.208237][ T31] ? __pfx_kthread+0x10/0x10 [ 519.208265][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.208292][ T31] ? __pfx_kthread+0x10/0x10 [ 519.208317][ T31] ret_from_fork+0x510/0xa50 [ 519.208338][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.208355][ T31] ? __switch_to+0xc9e/0x1480 [ 519.208386][ T31] ? __pfx_kthread+0x10/0x10 [ 519.208412][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.208452][ T31] [ 519.208459][ T31] Sending NMI from CPU 1 to CPUs 0: [ 519.328761][ C0] NMI backtrace for cpu 0 [ 519.328779][ C0] CPU: 0 UID: 0 PID: 14797 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 519.328798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.328809][ C0] RIP: 0010:bpf_prog_6fd842a53d323cc5+0x39/0x5f [ 519.328829][ C0] Code: e5 f3 0f 1e fa 48 81 ec 10 00 00 00 48 c7 45 f0 ff ff 00 00 48 c7 45 f8 00 00 00 00 48 b8 00 00 00 00 ff ff ff 80 4c 8b 55 f0 <4d> 85 d2 74 1b 49 83 ea 01 4d 85 d2 75 0c 49 c7 c2 f0 ff ff ff e8 [ 519.328844][ C0] RSP: 0018:ffffc90003f7f600 EFLAGS: 00000206 [ 519.328859][ C0] RAX: 80ffffff00000000 RBX: 1ffff11004d28e7a RCX: ffff888026945b80 [ 519.328872][ C0] RDX: 0000000000000000 RSI: ffffc9001b13d060 RDI: ffffc90003f7f6a0 [ 519.328885][ C0] RBP: ffffc90003f7f610 R08: ffffffff81cd2802 R09: ffffffff8df41aa0 [ 519.328898][ C0] R10: 0000000000006555 R11: ffffffff8168c760 R12: ffffc9001b13d048 [ 519.328910][ C0] R13: dffffc0000000000 R14: ffff8880269473d0 R15: ffffc9001b13d060 [ 519.328923][ C0] FS: 000055555f745500(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 519.328937][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.328949][ C0] CR2: 00007fb5c3e6f9a0 CR3: 0000000050fe2000 CR4: 00000000003526f0 [ 519.328964][ C0] Call Trace: [ 519.328972][ C0] [ 519.328979][ C0] bpf_trace_run10+0x2e4/0x510 [ 519.329003][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 519.329035][ C0] ? bpf_trace_run10+0x1f2/0x510 [ 519.329057][ C0] ? __pfx_bpf_trace_run10+0x10/0x10 [ 519.329078][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 519.329102][ C0] ? alloc_vfsmnt+0x171/0x430 [ 519.329121][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 519.329144][ C0] __bpf_trace_percpu_alloc_percpu+0x364/0x400 [ 519.329174][ C0] ? alloc_vfsmnt+0x171/0x430 [ 519.329189][ C0] ? __pfx___bpf_trace_percpu_alloc_percpu+0x10/0x10 [ 519.329214][ C0] ? alloc_vfsmnt+0x171/0x430 [ 519.329228][ C0] ? __mutex_trylock_common+0x153/0x260 [ 519.329248][ C0] ? alloc_vfsmnt+0x171/0x430 [ 519.329264][ C0] ? trace_raw_output_contention_end+0x30/0xd0 [ 519.329286][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 519.329309][ C0] ? pcpu_alloc_noprof+0xd44/0x1750 [ 519.329327][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 519.329350][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 519.329374][ C0] ? alloc_vfsmnt+0x171/0x430 [ 519.329388][ C0] pcpu_alloc_noprof+0x15d3/0x1750 [ 519.329415][ C0] alloc_vfsmnt+0x171/0x430 [ 519.329431][ C0] clone_mnt+0x4b/0x9a0 [ 519.329447][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 519.329472][ C0] copy_tree+0x3d4/0x930 [ 519.329496][ C0] copy_mnt_ns+0x11f/0x7c0 [ 519.329515][ C0] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 519.329539][ C0] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 519.329563][ C0] ? create_new_namespaces+0x33/0x6a0 [ 519.329582][ C0] create_new_namespaces+0xcf/0x6a0 [ 519.329599][ C0] ? bpf_lsm_capable+0x9/0x20 [ 519.329619][ C0] ? security_capable+0x7e/0x2e0 [ 519.329643][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 519.329662][ C0] ksys_unshare+0x4c8/0x8c0 [ 519.329686][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 519.329713][ C0] __x64_sys_unshare+0x38/0x50 [ 519.329733][ C0] do_syscall_64+0xec/0xf80 [ 519.329749][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.329765][ C0] ? trace_irq_disable+0x37/0x100 [ 519.329787][ C0] ? clear_bhb_loop+0x60/0xb0 [ 519.329805][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.329821][ C0] RIP: 0033:0x7f6cbf190f47 [ 519.329835][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.329849][ C0] RSP: 002b:00007fffed4ed588 EFLAGS: 00000207 ORIG_RAX: 0000000000000110 [ 519.329866][ C0] RAX: ffffffffffffffda RBX: 00007fffed4ed590 RCX: 00007f6cbf190f47 [ 519.329878][ C0] RDX: 00007fffed4ed590 RSI: 0000000000000007 RDI: 0000000000020000 [ 519.329889][ C0] RBP: 00007f6cbf3e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 519.329899][ C0] R10: 0000000000000000 R11: 0000000000000207 R12: 0000000000000008 [ 519.329909][ C0] R13: 0000000000000003 R14: 00007fffed4ed888 R15: 0000000000000000 [ 519.329931][ C0] [ 519.550611][T14802] Bluetooth: hci16: command tx timeout [ 519.563806][ T5151] Bluetooth: hci19: command tx timeout [ 519.783107][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 519.790023][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.799150][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.809310][ T31] Call Trace: [ 519.812691][ T31] [ 519.815713][ T31] vpanic+0x1e0/0x670 [ 519.819800][ T31] panic+0xb9/0xc0 [ 519.823544][ T31] ? __pfx_panic+0x10/0x10 [ 519.827990][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 519.833486][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 519.839668][ T31] watchdog+0xfdf/0xfe0 [ 519.843934][ T31] ? watchdog+0x20a/0xfe0 [ 519.848407][ T31] kthread+0x711/0x8a0 [ 519.852491][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.857182][ T31] ? __pfx_kthread+0x10/0x10 [ 519.861793][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.867050][ T31] ? __pfx_kthread+0x10/0x10 [ 519.871661][ T31] ret_from_fork+0x510/0xa50 [ 519.876275][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.881390][ T31] ? __switch_to+0xc9e/0x1480 [ 519.886116][ T31] ? __pfx_kthread+0x10/0x10 [ 519.890741][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.895557][ T31] [ 519.899001][ T31] Kernel Offset: disabled [ 519.903422][ T31] Rebooting in 86400 seconds..