last executing test programs: 5m10.636518369s ago: executing program 1 (id=5774): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000003180000000000000000000000000000009500040000000000360a0200000000001801000020207825fff30000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 5m10.498934574s ago: executing program 1 (id=5777): unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801409000000070000010014"], 0x4c}}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m10.161339105s ago: executing program 1 (id=5783): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) unshare(0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000301810100000000000000000a000000140019800800010008000000080002002381"], 0x38}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9, r4}, 0x38) shutdown(r2, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000012c0)={'macsec0\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x8, 0x6, 0xe, 0x1, 0x7, 0x0, 0x0, [0x4bf4, 0x6]}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r9 = socket$caif_stream(0x25, 0x1, 0x4) accept4(r9, 0x0, 0x0, 0x80800) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="995bf9cb9a3102c8b27396b93b32dab5aa7c1c608e62435da616d49a5423f7ae89d2879ea49a7bf09e4186b6697e6a9a1ec1528fad18d51a7d0917963f7ba1adb22a043f58ca8f3177c9dd1d290c91e3b735ec0b165d26b366d9a2ddc229330cc4481e1efd", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESDEC=0x0, @ANYRESOCT=r8, @ANYRESHEX=r1, @ANYRES16=r7], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r10}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r12, 0x0, 0x11000000}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x17, &(0x7f0000000040)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0xd, 0x9, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0xa, 0x4, 0xffffffffffffff73, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @generic={0x5, 0xc, 0x4, 0x3, 0x10001}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) 5m9.127595171s ago: executing program 1 (id=5798): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRESOCT, @ANYBLOB="3f9d000000413157bdcb90b6fc0008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @local}, 0x6, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000340)='veth0_to_batadv\x00', 0x0, 0xffffffffffffff57, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000400000000000000000cde467145e503b7e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 5m8.711585615s ago: executing program 1 (id=5801): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000003180000000000000000000000000000009500040000000000360a020000000000180100002020782503f90000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 5m8.491961623s ago: executing program 1 (id=5806): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000014000000", @ANYRES32, @ANYBLOB="00000000030088d9535cce1ec5fe000fe7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x9, 0x1, 0x1}}, @common=@icmp6={{0x28}, {0xb28eb8740efbb3f, "6888", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x7, 0xff, 'pptp\x00', {0x9de0}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'macvlan0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0xe0, 0x5, 0x51}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "f574", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x2, 0x6, 0x4, 'snmp\x00', 'syz0\x00', {0xa3f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) listen(r2, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000014000000", @ANYRES32, @ANYBLOB="00000000030088d9535cce1ec5fe000fe7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x9, 0x1, 0x1}}, @common=@icmp6={{0x28}, {0xb28eb8740efbb3f, "6888", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x7, 0xff, 'pptp\x00', {0x9de0}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'macvlan0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0xe0, 0x5, 0x51}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "f574", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x2, 0x6, 0x4, 'snmp\x00', 'syz0\x00', {0xa3f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) listen(r2, 0x8) (async) 4m53.442539576s ago: executing program 32 (id=5806): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000014000000", @ANYRES32, @ANYBLOB="00000000030088d9535cce1ec5fe000fe7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x9, 0x1, 0x1}}, @common=@icmp6={{0x28}, {0xb28eb8740efbb3f, "6888", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x7, 0xff, 'pptp\x00', {0x9de0}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'macvlan0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0xe0, 0x5, 0x51}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "f574", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x2, 0x6, 0x4, 'snmp\x00', 'syz0\x00', {0xa3f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) listen(r2, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000014000000", @ANYRES32, @ANYBLOB="00000000030088d9535cce1ec5fe000fe7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x9, 0x1, 0x1}}, @common=@icmp6={{0x28}, {0xb28eb8740efbb3f, "6888", 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x7, 0xff, 'pptp\x00', {0x9de0}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xffffff00, 0xff, 0xff000000], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'macvlan0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0xe0, 0x5, 0x51}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xe, "f574", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x2, 0x6, 0x4, 'snmp\x00', 'syz0\x00', {0xa3f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) listen(r2, 0x8) (async) 1m47.731481645s ago: executing program 5 (id=7300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000001800018014000200626f6e645f736c6176655f30000000000c00038008000280"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa000000000000000d000000004e2300050000fe570a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fdffffffff7f4000000000000000000800"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fe05000000000000000000000000000000000001ffffffff000000000000000089dbb41fb9e23724000000000a00c08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011fe800000000000000000000000000028ac1414aa000000000000000000000000fe8000000000000000000000000000aa3c000000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000040)) 1m47.549451146s ago: executing program 5 (id=7303): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x7) socket$unix(0x1, 0x1, 0x0) unshare(0x28000600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m47.351896452s ago: executing program 4 (id=7304): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x10}, {0xfff1, 0xb}, {0x4, 0x2}}, [{0x8, 0xb, 0xf607}, {0x8, 0xb, 0x1}]}, 0x34}}, 0x20040084) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067726574617000001400028008000400080000000600030081040000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000807000000000000000016000b0000000500120001000000060011008000000008000b0005000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x90, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4f63561c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x200}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x8005) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x98b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004895) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000180)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x16, &(0x7f0000000e00)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m47.206210144s ago: executing program 5 (id=7305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m47.119769761s ago: executing program 4 (id=7308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x93d, 0x7, 0x12, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000380)=0x0) (async, rerun: 32) r5 = getpid() (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x2574, 0x40, 0x107, 0xfffffffe, 0x0, {0xe, 0x7c}, [@nested={0x4, 0x142}, @nested={0x2558, 0x1, 0x0, 0x1, [@generic="14e4c69142b05bf047cb65cc8da553bc3f9209b0d788abd044d5452d3c56bba9d4fc5d34e9a6468d62243947e34fbdec37add315e00ffb6d21ac966a4485b8de1a3f86ed4f27d96c43e71817a61fc78c8f363e91f9f5364c4a78583676b54b250beb97f0a09482ed951b5d60970ae397ddf83e86be4af099776b243dc51dedff9470467300c8c1e3a4b1eabb795db84dfaee4ce6040a194414060052fd61564ce1a2d8b060c2fa0929d8703fb4904543e154cc33c6dc35696fd7be2c92cd4ec178d540e10a16225f123207f66eb7d0574379f4b3edfc6d0a1b9236d12d0057dda27ae9d12140c35c794fd46a6dd9e3bb8c72cf6e31469066", @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}, @nested={0x244b, 0x1d, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @pid=r4}, @generic="a38502c7d04b1b4ae92b5e", @nested={0x144, 0x119, 0x0, 0x1, [@nested={0xdf, 0x108, 0x0, 0x1, [@nested={0x4, 0xa9}, @generic="088e9a86a6f01d2a8ae34633393994a64723c9dfb39480cc75f6838dee5aaf0ec5a7bfb90858121c68e5ea9a590475445459d94ecefe0dd3d3566d2cc3d2564220f2e8965a1496aa676a0d49117642255c04e4cacbc880360d2bebd1e2f641519940c513c5fbdfb4b0a34e63ece01e5296bb814abe0d7faa8f9d1776937441961bbec9a9df3ec606b1ce2949321573a3a7e95c24652df6373d608722deb862fa2892e50d3606ea1494155b346be81d19774dbd0f5228705424a7d1874ec06d3ede6e1ce2c9dabffa219bb6594e193d", @nested={0x4, 0x122}, @nested={0x4, 0x14f}]}, @generic="88c7287df0cbeb2f5ec6049370f55e2c44a6d0ce650edd97", @typed={0x4, 0x47}, @typed={0xc, 0x104, 0x0, 0x0, @u64=0x9}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x4}, @nested={0x10, 0x5b, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x4, 0x896}, @nested={0x4, 0x10}]}, @typed={0x8, 0x149, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, @nested={0x1160, 0x4c, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r5}, @generic="82870d533a3c3a56a429d1f9281a18f7869c78655a945c7a8078083b00cb14ab4881dddd0b4917df68ef153f2a7470788d405c42b1a4aea1ca6041494e73cb49914dd6d395b688052c8dd918732816b5872b2fb6324ab37eff0d7b04b314168509ab8ee663c6f43b715f6ae6007fcfbf49498fc3d7755ef12d313a3bc4444fd127c91bbb8264fd4d1dc8088cc70cc15e0082d04875db8521a7d17e2483f67b653a0ded0ebebc1a215b51401a2b820c77e52d81396668a9dc4ba226de47f7b1f19d9de916e1d3ad4ab264f993a868b408fe929116ea226463abc89e9871a932f780ea4d36177ffc33219f1b477c540a4e22b2b4789249c862177263796e91410ef0c2343cdfc334bb4a82bd81c109a1b6bbc9156f7874841ea5611609a6fb30f80782099911f0ffa0003957237a86b864d222ed20c42360beff2f7ca4756905696dc48da7ba0adb245616864c34e5636cdd143b6ceff31720100f25b711b2aed4ff78c4a6225787799cec0d1075f987174eca8e33984e816e9829ad65d44c65d4ca628da3cad7c85b52847d1cde9df5b09422d34594f3a4b1dd630be9e19440873a35ec3f20330818eff592f6f9c3d7857c5d6d0041c5b289d92ba984931f36f97452389dcc9d3ad6dca27fc95831c9d23260f96266b53e1b24951f860578d7e64e8ff898f3b2c2172396a672d15d9d3019d6ef23b75189ebb231f4afebe71e153212d1cf517e73038abead763136a44db275c5fc0c2ade7fa476e03e9a92638ccbb100b030324cfe3095723d1b9f80eee58b7a9a9b197f89c332d2e59c86f90f2803e9d11c99957e65390b0436acd11bcd65cd0aae39ffa13904db33ba01fae6f4ea6876a9294abb49e2084dd129a9357178dd1e3a7ed108f2a4270ddb8aa4cf982ca8997cb02dea5ead69d7d945c5f31427a43f48787993bc94cdcb8fa9e686fe6af569fc1df8d03fb77b7e12f849c8b269ec1f89d3b207256bfa450a1049e0300b43d0c6350124e84312a90363de7f4303160f122b8f670717de430ea702f09c4d1b7cc763035be32d22e792c6d6d7691ed76e7478d46ae8a1ba2a684cc3d83e07e4addfd172e53df34b1f32f85f0343b44c3838fb5bbea5b19cf46ee22841eb9b8ca6cfb97590e39e0989a64f9a611e5dc7ebd29496f7c6ce2ee3e64d9701d832c1921a984ca029de794e39a6d41bc1dd7c7c1ae4fcacf1c8b3799678bac2de02a1adcde2f54924f7859d3d5cb8b6b0095ae0eb2d47ef1d60ebaf490222b1b77a11ef0f3a1fd24249c7a29394ee77f2864d6cbddd6e2d1ada52de40deaf33b7a1ce5f4a239dd0a943e002b1f316c39a39d6e55c133e08e0646e8d30c1cd494177100e76114d4ef4337b6f3f912898abbf3edc1e48a49a4d96a8e7f66837a8e2d1a7e1e7db86e2eb8533bce0035796126f93b06f6c15e0beee17047cd34e110d555ef8a17c91c3607b97b4ee3fd24035ac072573925a4b10e677df3e69f1d3567b5118d672d13861257af42538b55aa1e4fef25c0ed5992602240e017e35e8f117f5bb9d95acb98d6d41ff41847eb0d7c85579e3a384ffd11d8e653657bb072e93accdfb8ee7876a9e3fe4b03ac56d38a3feaed7ac6199bf0435202fa0e88367b1b98a13372c78858f9d074fcaf0083c3215ad088ec4e205142e63288ca3177adb576906535cd36725df898b12fa7c9884ac7c9949c5d7d484769b04abd90aae02af7f0ea6cf88eae8b240b7daf63ec11e954b8d471a3ff31b4057f9e361c0c55358ba8c4c320247b76e822cbc5b4ccf8710f059606e4376b950c266c68a550008d88fcd673c55983a6d29fcc59c007bf974e8cb5484b62f5ac1a2c43820034b797ccd5a74b6438f23907b421de835d66d8a644465d9d94f4069899b282852a8bd61c6565f69b8c749eab7d5d8569e06c9856a3472ff945b4798a94c055dbdb8bb75354a5688c1f21d3dc15d955bfebb7bcbe4c8564d8d380793adc7d97bb008c449ce674c3d4538c98ddc6fc90206e02f9c8c1fa92ef347b3728454e6cbc93afec42f46552fedc17f636709fda865f4f757724d03ff4d9b1a9f750145d4d87f3a32795f8e93e9ce5a21b3f7bc61891408e29aad5696ece8d698fb42d98baeb9d30da585ac1a5d89bbbed4ece85b544612c01697fa7a4cdc9a95ae61dbef12ee9ee65b13f731188657bb01b57d8a248fd7ee35a30b701cba07c79debc90fdd778b08ebf919a378eaaac90034ecd1ccc289559b15fe0e04d9380a86e47ac6cb067e4e713fca47c45e83fd4a8df3be3bc13c6dd1326c4027a6de4d668b24ea63f465c127e6c535600ff3fb86e91e459369bfe1e8c7a5a199a86afd7b2a4f69b27a0c94a2569a8fafb3b3fbb9e57d341d9506b7a5dc3ce663475cd88f5aa5b1f31dd6ea3a21cb63bc6188b3b408d397a3919077a8d3cb54010b4fe49abfc504d7f9a0c45201358a6aecdaff4fb0c7b20c7c7de80926c12853ed047a5054df3fc93ace93f6d2d9ce1c7c85dde7c633e2c8e0ce811634498f1f71b71ee66190ffd62f9e7bc769f3cde172bb2321c15b5887979a1a7fa4d9cf059cfdf2bfad8f8738273e56fddc73945a056c477f78e107d1fc0dd79532145996942a02c3e495ad96201b44e1e8480156bb48ba374340c69652176ea8d2ae0ebd7eaf4664111749bf449acc3b396fc1d8621308492c2724655d694d8d7b6b7c64bad095c0bf0921900ce68d3c5d7ee931bd38e63f9913853f1f0470d8073073dff01d3c97e10ecfdddaf7cc0d0445f5adac3213ae68b044b8bca3401eac2160be03f931ffb965904f5f06c5c2fe5c8d471f4811422f1ac3c052c4858da94ec3c2717f88c7292b78bbd1c54b4f566306601c7be0e91a57e520f8d75ab29f00cc16d0ef0932ce91fc1cc6a5fdc76b6337509ed51f28e409f5f3cd8711c9cb694169fb113125669534d7c1ca147a0e37c29d5fbeb1e97c0f199c410ad9035373607c309d688a59048fc0a509b35c424d71e25153ffeeab3fe9f4a8e131dcdc6295def151f61b133253b534397281a003c695143ab1fce19b3cd89632d06f47a98c7bdf2ab1f3123b049cf1665446a61ee4660f84d1caad90d6e31a6281a33b6c82c369c7bfcaba60de8cbd6e76b0a34ff4d262ed67c98ba04a911948c8ff79446d9c8cfa989fd25214391d7dca27e3e2816fb2ff801b1efff8f90f40ef8c67a0f635b21cc43b9298cc3dcde667dc2838fd76766d396e445d490dc2886b278c3dc74ebcf40b3b8fcc4a03f7e2117c7e03bc2e9f83a3120565358dac3e4dd193bf6542a0836fdeeee9e1ef9492da12fe55d32d43fb61e1ec19a2b055aad33a3b368ab0a2da0f05c8bcd8546ad400abdd228fdc010d852ebd3bcc708f261fe7a5d16ce399703a607faa15199223a99ad0a94307991472b7776bbaea4f4fb9165b6f09639207fa5e8b69d46417ec2face3db0491e727a92ad51a0d00aac8fb875bffb479911247b55f5a26f6fe5f446aeb3cc23e0b24ff020a81f631a32c16495fb10d7381a85278e1d45f8f2be583026e3a1dcfb09443c4c6f7b872a26a0a46925f473b4047c03f243f9005df9c7c4c0a51d1b36d985c5e4e18d8ec423ebe6f0c9c17ee93b2041b7d133a23058e96706d81eb7480d0a273ecd38407a63700be9ddec2c027d1835d7795b5949371004b2d2007848bb1c69ef9b1a933b41a1f8460c11845adccc28a0d64d57376a0fa2a9e4196a62c83c4295caedcd12bc487a0aca93860cb0b3f53c0b95793158cee8b4add220ab8b9981e6a759ee2a1a4ed740311123f19cb39d94dac437cb564c9c74e1d0d692243f0766ea505156ef0f083204357342f50b1022e65dbb20a5d243dd4cce206cc9000f3f4494fced8303b20cc801ab38f023f12355d362b6a16aeb74c264622ad32a534141dacf5c1fc55cbabfab6fcf961875600cb94a9d8f7b1b16477c656c011116dcffb23aa68613fb7b88d143a7b2d6216be2da4965ab9ee61be016e7adcfa7c90bbc7a4546cce8e0fb5db1e776e196f74c5010ca285715ee4a01f4d74c0a7eca15c708fc4d483fe68ec2355b9a050ed5937c6ef761a1bf648bc5e378eb2e63b06e7567297fce2c886686590539b37be53f5a7b2d3b33d4005a469d7d7e36e1d45b8f54604d1635e814ab020c38e279886074b6432757cb6ebc9d73e563b7aad26f3ef5d9826889f04fed8cdaf433249b93247f96fea6f9ccda5af205942b47f6e3dfad56ad82a45ca0f41b07c7606f07f9d0a63e2f281cb0cca1088b4c802bab77def48867b242d0926568ad929a791309de981c3e2f1a938a6af8c9e24a38b5d710dcc3e72d37f0db119f0576807c771c8f5f1220aadcb2af47bcc1f5e7a306d97b55e47c271024e13cc74ef232e735d641a56d039f0d0fc4ad2abce0bb1de366c7e73af0d90b7f144e75b8ebc80e610e1ec766e6051cf09b9bdd7c351fcae3b7110b232b4d98a02e4d44dcb41b701b81a227a77269252360853d911243eabab267aaf590bb4fbdee3662affa967cc95da6e89da76d1ae8ba15134ab7554c69138b07f184c940017ade21ceb23fd04ba8ac863d43920b33d46957ff933075ba5680f18253471104977de10eb6582073f28958debf7c6b58fa8314c68350f245bf43bed0586dff6ce1ddd50a17f02db0763c16bfdeb44eb7b2634bfac1c1a1dffd6a3fff0b4d274c97cfee4bbeed5a5bac24cc0d79c971153da931fbce769fabbbb17c4ca5346ce98ab0e2f5b219e8c65cacee1c95e71294f745aee2121c863887b101018cd8fbb7cf600cfa5309308de0100274ba6bf421c680a3e1ba0ceeeb60b0497ded0a0098897cdf852f0b4136c6815a60deba33b4904524f29c6be47bd80bf76e745b4a1081227ca472a94b371ac331d35ca6a999cfd31dbeaa79508280569335e5d75399baff60bd5fb62adfe572827993343ddbd76e570cfd25e04ec11fc605fb602a71ba3d7e91b31f25b514d1ae3cc637476b5b24eb6f35a82c7c0346f9a5e4e5547003fc8f5da90cd962ca7586e62813dcbc0a65c338b1b2d28cff7c15a91868a49ea53f4e303de65d35047cf13e960519f1a799c5727706d44e3b498b79801e16220958a0f96c3d8e998c51ff9b74c1e5298a934c2f75edb560a5412545ced8b7a4fa5fe3318c9b2f90071fcd4f20976c8612c829ef348bbf079eccd3e991f25ccf3355862a7236740b7acfd27a18b9ccbfd0363ec57cd2121ab22c75d697fedf14e15794272583a1cacd7d690b0d716b0ecdabdf5d5f908ca1fef1fe22bc5825bdd8359bf986b8ea5e9157bd894b02d7ef35986b95dd1aa9e1e0e095bdc73bd46c191c3b0b287d3161f0e8c7486f10939b06e7ce80d59dd9d81ccfc73ee805e53591bdc4e5f5b2618a12fbe491030fde1e95274736a2e565ecfdd2671bbf7815478a2c348568820e7b2975a9594b239c8907fd3ee170b3a0b3b5f5ff5475b709a16f98988bca978ad6c784283af5fb7710a52e1f344a5e834ded4b324809642ed7075f9d542f93ae3baccbf1040a1d806a18465aa5032e6b2cfa470ed88c47e3f445f103e8dc9ed75b3c6ada4db303179a786551549111e23fcce70c87ae85a35770c32bf0ef65a86ec790390bbdaa83c66a8039b643bbbc297bce8ef5d3f9292a7ecaa62256901e7cc1f166b89ea079ec4e8c27460665944b1eead5aa834b9b516c051d9aa11e5160734b5174780ae064a14e1ed7670cf9196de8473ba3a93114bd739c412a20c4e4ab4ea313e5819fa508bf7c7f5f4634f1e0b621ca7856a9890df5e496fccdc55b5f704c0a4", @generic="cb5d13931ab58d0cf9aff7ba4b9759556b6769ee2009668c5856422b58bcd1264d65af7de23f7139e1dc12a1d105a7b8b1d247bb83123b14db374315a5bd", @nested={0x4, 0x138}, @generic="5196caebc35a95686889b60636f99eb75a4dd96499b9e1b738aefa0dd02a4c7e46a6bd93520e", @generic="d922fbb7e91bc82714983af2deabce2a1dea4c64daffce607d4655f8e264dc1c641734bc349391daf9d408f3be2a8b9eaae15a7bd49a5eb08aafb7fbd41d4a6997c7a710f0af164fe645ffb7b979ada9a6cb339038ce911f963471fc1bc3575345b18d7b696d6f354ad0eb7fec08cc0ebd1b6d2b3d6a9715f7c0b4f77eaa4a8f32839a4d659ae3f6cdd4045df11799bb1b196bfb64bf53e133614596d08f0dc51aeecbac1a85247eab55d009c4e84f7648fda7e85955ca31acb70f2b412ab30fd809571368a02523d1cfe6900b2646b1eada700bf101a8fe0c2711daa45714000e1157d5a03511bb04d0937b"]}, @nested={0x104c, 0x128, 0x0, 0x1, [@generic="6973e227a77a496dcf2da55e2f9da4f024da92c156d98b9c4048be5685aa68d880112457cd07319a0f0e01564cf67c470f2c4f4bca0360a581199f77144c53cf681867", @generic="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"]}, @generic="79e4e95f725ca63d7e0cf1d7e2f5a42143aa92e90a396000e432c3b2bd13595d9ed5c578a01df8b02f4bc67e5e65c424be090b04e4b75941300a8c9b734c5332d87002da56b99766ed77cf92c002c26147c35f51c72d1cc199822118b6139050f47d08ea019b15c8f56180b8fdeb470a14c98144885e587028f46977da7aefa771ccf77b81fe25585b6cbcddd1dbef9964a3c2b2bb3d4c4e9681b73e9bf6222b86f929c2a0fe9134163f9e1943c79a67a45a7ea4ec34042a02310f1be05a29de070af4982440e27524a794db627a3b15ff6410a565a8be392bbd5f02b70bfc26b45743b801e0133d39daa50411e34c9a0cb7862f5e29cb7c", @nested={0x4a, 0x23, 0x0, 0x1, [@nested={0x4, 0x8d}, @generic="1331f074490f93acf0a25b07285671e008bb44994e7456f8b22de4d02474bce2", @nested={0x4, 0x77}, @nested={0x4, 0x2d}, @nested={0x4, 0x51}, @generic="b7b79101cfda80f8fa3bfad839b07483700bcc5a37e1"]}]}]}, @nested={0x4, 0x2}]}, 0x2574}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r6 = socket(0x27, 0x3, 0x38) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0xc) (async) close(r6) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) recvfrom$phonet(r6, &(0x7f0000000280)=""/78, 0x4e, 0x42, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, r7, 0x26c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) 1m46.904085744s ago: executing program 4 (id=7310): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r5, @ANYBLOB="33bdd17c50e527c7e06b1d743dd6607494dde50a0909ca0fbdbe8945b939573efad89ddd65b0a35778e28f920cec9e8a1ff092ab42bc25de00db6c8f635b243240f220069e5c0e8448e89be0411627c6d2b18607a5e0d07258a2cc629fc866891061ed99438b779611636ca07de2012f3fe8cb82195829abb77a93f25ad17236aa068c3e12bb"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x22000000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x40, 0x64, 0x100, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m46.445009394s ago: executing program 4 (id=7315): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x7) socket$unix(0x1, 0x1, 0x0) unshare(0x28000600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m46.060736667s ago: executing program 4 (id=7320): socket$nl_crypto(0x10, 0x3, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000950000000000000023b8dd9bbcc11bf80fd60421adfafc"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf97000000000000070800", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d0000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x2, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x1, r9, 0x1d}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000840000000500000000000000090000003000000000000000840000000100000050000500000200000700000000000000070000000300000007000000ed8f7c00b69f42cefe820629ee933d558a582e35754d80603c1dcd", @ANYRES32=0x0], 0x48, 0x40}, 0x4040040) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r12 = socket(0x10, 0x803, 0x0) bind$netlink(r12, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) 1m45.808187342s ago: executing program 4 (id=7321): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0xc0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="018d000000eb"}) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@rand_addr=0x64010102, @broadcast}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007180), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000071c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000072c0)={0x0, 0x0, &(0x7f0000007280)={&(0x7f0000007200)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x40}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000004c0)={@empty=0x1f, @multicast2=0xe000031f, 0x8404, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x1ff, 0x6, 0x6}, 0x3c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x26, 0x2, 0x2) 1m44.756645241s ago: executing program 3 (id=7324): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x0, 0x3e}, 0x28) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000058150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000140000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x138}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYRES8=r8, @ANYRESOCT=r8, @ANYRES32=r6], 0x0) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$kcm(0x10, 0x2, 0x4) close(r10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x860) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1m44.372628765s ago: executing program 3 (id=7325): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xe7, 0x4, 0x10001}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x114, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x333}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff03cd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6e}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x8080) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000540)={0x9, &(0x7f00000004c0)=[{0xfffb, 0x16, 0x49, 0x9}, {0x3, 0x7, 0x5, 0x9}, {0x8000, 0x8, 0xfa, 0x4}, {0x512, 0x65, 0x3, 0x9}, {0x80, 0xad, 0x7, 0x5}, {0xec, 0x1, 0x46}, {0xef, 0x40, 0xb8, 0x6}, {0xfff7, 0x6, 0x40, 0x8}, {0xfffb, 0x4, 0x8, 0x6}]}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x1010, r1, 0x2e472000) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x21c, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ed15f7a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaa5f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x18006a05}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xab, 0x3, "abce422b91d8976db74c20db678caebc053837a6a136827d25151ff1fc1d1e324d71c09d6fb6d786995f84327bce7401809ff1228d29b287878820c51aebb6b16b9a1206c19d7efac9c59f01e1f40393646b29822dd99ba13d869a2f0b9516090276d08a31025a6bf1f756d4fcd208903a1c3968cd1b6f156c73588fbe955eef6d5fd3dc55b7ed90c44f47d2b679994ead8c0d576c5b9934d91776e4207c8e419ae73c3b5bf136"}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8f0c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x2000}, 0x8080) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000008c0)={0x0, 'sit0\x00', {0x1}, 0x9}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) readv(r7, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/233, 0xe9}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x2) sendfile(r2, r6, &(0x7f0000000a40)=0x8000000000000000, 0x8) epoll_create1(0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r8) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd4, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x2000c000) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000c80)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r10 = accept(0xffffffffffffffff, &(0x7f0000000d40)=@xdp, &(0x7f0000000dc0)=0x80) getsockname$packet(r10, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e40)=0x14) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000f00)={@default, @default}) 1m43.460399239s ago: executing program 3 (id=7329): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a8014090000000700000100"], 0x4c}}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m43.266585055s ago: executing program 3 (id=7331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x7, 0x7, 0x50, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x40, 0x8, 0x0, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=@bridge_setlink={0x134, 0x13, 0x400, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x21310, 0x2000}, [@IFLA_AF_SPEC={0x104, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0xb4, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x94}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x15}, {0x8, 0x1e, 0x0, 0x0, 0x2}, {0x8, 0x14, 0x0, 0x0, 0x4}, {0x8, 0xc, 0x0, 0x0, 0x1}, {0x8, 0x12, 0x0, 0x0, 0x400}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x7fff}]}}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01a6133ef5e014000000060001dcdf"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a00080300000026bd7000fbdbdf25010006"], 0x18}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) sendto$unix(r5, &(0x7f00000005c0)="c3c050834426ef3a9a9896e712c2e41a5b84b220af9d025cfc9401ecd868916d7cdd0796760c05b26de543625c85918c6cb2f642bc819c0f844805512ce4a8e9737ca7030070cabe8733beae9c48cf1e9cc4558287c61c685804a13ef5b5ef8a03345f7970118bd1eba0061a3a36562ad414f2f50dbf530e8eec5dd9b303de976c7d9b45d013c1e2332b688b46fe576a6757ec550e98b63e19a657f292fc3241c0838c94c027fd9dead12211a950fd72fcdca8f825291f71e0222600", 0xbc, 0x40080, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 1m42.491563721s ago: executing program 3 (id=7334): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000b7050000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xdfffffff, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r4, 0x180000000) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r5, 0x25, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_hci(r8, 0x0, 0x2, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x30, 0x83, 0x1, 0xfffff020}, {0x6, 0x0, 0x0, 0xffefffff}]}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x282}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4c23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x5c}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) write$rfkill(r9, &(0x7f0000000000)={0x0, 0x2, 0x2, 0xff, 0xff}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1m41.76742771s ago: executing program 2 (id=7340): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000900), 0x4) (async) setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000900), 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r7, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r7, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) splice(r2, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) close(r3) (async) close(r3) 1m41.704156441s ago: executing program 3 (id=7341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_ORPHAN_MASK, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) unshare(0x20000400) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, 0x0) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 1m34.582039788s ago: executing program 2 (id=7343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x20000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x3a, 0x0, 0x0, 0x0}, 0x4c) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r7) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x733be91b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff}, @exit, @generic={0x4, 0x8, 0x7, 0x4, 0x1}, @printk={@li}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x82, &(0x7f0000000880)=""/130, 0x0, 0x10, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000004c0)={0x2, 0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r0]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r8], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) 1m33.577886952s ago: executing program 5 (id=7344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000100000bbff0200000000000000000000000000018900907800000000ff01000000000000000000000000000100"/94], 0x0) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="17090010000000000000010000000500070000000000080009000300000008000a0000000000060002000100000014001f0000000000000000000000000000000000140020000000000d00"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x40, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001d0000022dbd7000fbdbdf25dd00027f6374722d63617374362d617678000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a804000019adf4db0bf5c06e5a030e026c3a9fa37b6aead3b62802ee891fc6c9c1cfe545319b6cb193da5b9442c4980b0dcd1bbc181e88ef72fb80ab15f9901dddcd1af5be6bd31090aa924e587556ed5ce98708a6bb287736c515a765fa04ef993035a03e489660877afa87d4c8062102c9418db5b45cf05e3d955fb37998673e1add0501145f473217588a766b56a28efa130612d14c9717000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) (async) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8000, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local, {[@noop]}}}}}) 1m28.020382305s ago: executing program 33 (id=7321): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0xc0) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="018d000000eb"}) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@rand_addr=0x64010102, @broadcast}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007180), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000071c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000072c0)={0x0, 0x0, &(0x7f0000007280)={&(0x7f0000007200)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x40}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000004c0)={@empty=0x1f, @multicast2=0xe000031f, 0x8404, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x1ff, 0x6, 0x6}, 0x3c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x26, 0x2, 0x2) 1m24.059087668s ago: executing program 34 (id=7341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) shutdown(0xffffffffffffffff, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_ORPHAN_MASK, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) unshare(0x20000400) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 32) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, 0x0) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 1m22.429174287s ago: executing program 0 (id=7347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f8", 0x89}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395", 0xc75}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = socket(0x400000000010, 0x3, 0x0) sendto$isdn(r5, 0x0, 0xbd, 0x8800, &(0x7f0000000040)={0x22, 0x0, 0xb7, 0x2}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040880}, 0x14) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000001000), &(0x7f0000001080)=0x40) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x24000000) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffff24c}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x22d4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES8=r6, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 1m22.040420501s ago: executing program 5 (id=7348): r0 = socket$kcm(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00003010008188040f80ec59acbc0413e481003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xde, 0x4, 0x1, 0xffff8000, 0x4}) 1m20.499979574s ago: executing program 2 (id=7349): r0 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback={0x300, 0xffff888101827518}, 0x8000, 0x7, 0xffffffff}}) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000340)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x51, 0xfd, 0x2, 0x1000, r6, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x20}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r9 = socket$inet(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x88, 0x0, 0x50a, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000081) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r9, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x5, 0x400, 0x8, 0x0, r7, 0x8, '\x00', r1, r8, 0x3, 0x2, 0x5, 0x5}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={0x0, @bcast, @bpq0, 0xbc, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000040000000000200000611060000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.162483099s ago: executing program 5 (id=7350): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000ebffffff0880000001a06e0a81000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@multicast, @remote, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "d5f090dd69023e6b"}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r4, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000c0000000800050000000000080004000000000f080006"], 0x2c}}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) 1m9.179520072s ago: executing program 0 (id=7351): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x40, 0x0, 0x40, 0x9}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x1, 0x0, 0x4000000, 0x1, r2}, &(0x7f0000000200)=0x10) 1m7.832069295s ago: executing program 2 (id=7352): socket$kcm(0x21, 0x2, 0xa) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0xa298bcafe42cc1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a8}]}}]}, 0x44}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 58.144790979s ago: executing program 2 (id=7353): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x448c4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x8000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$l2tp6(r7, &(0x7f0000000240)="8f333b0bd8", 0x5, 0x20040840, &(0x7f0000000140)={0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000b, 0x40010, r3, 0xf75aa000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f000094d000/0x2000)=nil, 0x2000, 0xba0c29e690d41d4b, 0x10010, 0xffffffffffffffff, 0x1c1ab000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) 56.469822682s ago: executing program 0 (id=7354): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a8014090000000700000100"], 0x4c}}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 54.069296039s ago: executing program 35 (id=7350): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000ebffffff0880000001a06e0a81000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@multicast, @remote, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "d5f090dd69023e6b"}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r4, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000c0000000800050000000000080004000000000f080006"], 0x2c}}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) 46.152847442s ago: executing program 2 (id=7356): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) ioctl$sock_proto_private(r1, 0x8b21, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8) close(0x3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 43.868769497s ago: executing program 0 (id=7357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) unshare(0x20000400) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3f26, @private1, 0x4f}, 0x1c) (async) recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9200000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.082246984s ago: executing program 0 (id=7358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) shutdown(r1, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x4044080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r8, 0x0, 0x40008003}, 0x18) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r8}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r7, r9, 0x37, 0x2000, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r13, r5, 0x24, 0x2000, r5, @value=r6, @void, @void, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@fallback=r3, r0, 0x0, 0x1e, r0, @void, @value=r0, @void, @void, r11}, 0x20) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x50) 28.100304551s ago: executing program 36 (id=7356): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) ioctl$sock_proto_private(r1, 0x8b21, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x4}, 0x8) close(0x3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 18.538192975s ago: executing program 0 (id=7360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x6000000000000000) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000080), 0x0, 0x45833af92e4b399e, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @loopback}, {0x6}, 0x4, {0x2, 0x4e20, @private=0xa010101}, 'bond_slave_1\x00'}) 0s ago: executing program 37 (id=7360): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x6000000000000000) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r4, &(0x7f0000000080), 0x0, 0x45833af92e4b399e, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @loopback}, {0x6}, 0x4, {0x2, 0x4e20, @private=0xa010101}, 'bond_slave_1\x00'}) kernel console output (not intermixed with test programs): re. [ 1339.400738][T29189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.515152][T29189] CPU: 1 UID: 0 PID: 29189 Comm: syz.2.6116 Not tainted syzkaller #0 PREEMPT(full) [ 1339.515183][T29189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1339.515196][T29189] Call Trace: [ 1339.515205][T29189] [ 1339.515214][T29189] dump_stack_lvl+0xe8/0x150 [ 1339.515247][T29189] should_fail_ex+0x414/0x560 [ 1339.515283][T29189] _copy_from_user+0x2d/0xb0 [ 1339.515311][T29189] __copy_msghdr+0x3c5/0x5b0 [ 1339.515343][T29189] ___sys_sendmsg+0x1a5/0x2a0 [ 1339.515371][T29189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1339.515437][T29189] ? __fget_files+0x2a/0x420 [ 1339.515462][T29189] ? __fget_files+0x3a0/0x420 [ 1339.515498][T29189] __x64_sys_sendmsg+0x19b/0x260 [ 1339.515526][T29189] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1339.515563][T29189] ? __pfx_ksys_write+0x10/0x10 [ 1339.515606][T29189] do_syscall_64+0xec/0xf80 [ 1339.515631][T29189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.515650][T29189] ? trace_irq_disable+0x37/0x100 [ 1339.515674][T29189] ? clear_bhb_loop+0x60/0xb0 [ 1339.515698][T29189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.515716][T29189] RIP: 0033:0x7f10d7d8f749 [ 1339.515735][T29189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.515753][T29189] RSP: 002b:00007f10d8c20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1339.515777][T29189] RAX: ffffffffffffffda RBX: 00007f10d7fe6090 RCX: 00007f10d7d8f749 [ 1339.515794][T29189] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 000000000000000a [ 1339.515808][T29189] RBP: 00007f10d8c20090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.515820][T29189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.515832][T29189] R13: 00007f10d7fe6128 R14: 00007f10d7fe6090 R15: 00007ffe869cdd98 [ 1339.515868][T29189] [ 1339.842297][T29194] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20001 [ 1340.138709][T29171] lo speed is unknown, defaulting to 1000 [ 1340.180245][T29171] wg1 speed is unknown, defaulting to 1000 [ 1340.923742][T29238] netlink: 'syz.2.6131': attribute type 1 has an invalid length. [ 1341.200799][T29242] syz_tun: entered promiscuous mode [ 1341.210798][T29242] vlan2: entered promiscuous mode [ 1341.238653][T29239] netlink: 'syz.0.6130': attribute type 30 has an invalid length. [ 1341.316899][T29255] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 1341.318219][T29252] IPVS: stopping backup sync thread 29255 ... [ 1341.387774][T29239] bond7: option arp_missed_max: invalid value (0) [ 1341.394413][T29239] bond7: option arp_missed_max: allowed values 1 - 255 [ 1341.406011][T29239] bond7 (unregistering): Released all slaves [ 1341.932025][T29272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1341.952831][T29277] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1341.965363][T29280] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20001 [ 1342.543539][T29289] lo speed is unknown, defaulting to 1000 [ 1342.555333][T29289] wg1 speed is unknown, defaulting to 1000 [ 1342.889470][T29313] 8021q: VLANs not supported on sit0 [ 1343.899421][T29340] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20001 [ 1344.103675][T29348] __nla_validate_parse: 8 callbacks suppressed [ 1344.103701][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1344.119449][T29348] netlink: 'syz.3.6161': attribute type 30 has an invalid length. [ 1344.140395][T18651] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.152348][T18651] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.198590][T18651] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.232129][T18651] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.653346][T29375] IPVS: stopping backup sync thread 29376 ... [ 1344.665380][T29376] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 1344.803944][T29380] 8021q: VLANs not supported on sit0 [ 1344.879280][T29379] syz_tun: entered promiscuous mode [ 1344.887198][T29379] vlan2: entered promiscuous mode [ 1344.946357][T29389] netlink: 'syz.2.6169': attribute type 1 has an invalid length. [ 1344.969021][T29389] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1345.025531][T29391] netlink: 'syz.3.6171': attribute type 2 has an invalid length. [ 1345.037179][T29391] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1345.479154][T29368] lo speed is unknown, defaulting to 1000 [ 1345.508450][T29368] wg1 speed is unknown, defaulting to 1000 [ 1345.691273][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1345.704558][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1345.714617][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1345.730350][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1345.738553][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1345.995942][T29425] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1346.133889][T29420] bond3: entered promiscuous mode [ 1346.174407][T29420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1346.255568][T29432] vlan2: entered promiscuous mode [ 1346.275555][T29432] geneve1: entered promiscuous mode [ 1346.281135][T29432] vlan2: entered allmulticast mode [ 1346.295726][T29432] geneve1: entered allmulticast mode [ 1346.939107][T29453] 8021q: VLANs not supported on sit0 [ 1346.971074][T29456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6188'. [ 1346.992359][T29456] netlink: 'syz.2.6188': attribute type 25 has an invalid length. [ 1347.107174][T29459] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1347.129835][T29459] netlink: 'syz.2.6189': attribute type 1 has an invalid length. [ 1347.146233][T29459] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1347.175880][T29459] netlink: 'syz.2.6189': attribute type 1 has an invalid length. [ 1347.192018][T29459] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1347.429138][T29411] lo speed is unknown, defaulting to 1000 [ 1347.437006][T29411] wg1 speed is unknown, defaulting to 1000 [ 1347.815545][ T5841] Bluetooth: hci6: command tx timeout [ 1347.897375][T29485] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20001 [ 1347.920256][T29490] netlink: 'syz.5.6198': attribute type 1 has an invalid length. [ 1347.939758][T29411] chnl_net:caif_netlink_parms(): no params data found [ 1347.998908][T29496] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1348.098115][T29501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6201'. [ 1348.220896][T29411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.228703][T29411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.236835][T29411] bridge_slave_0: entered allmulticast mode [ 1348.253913][T29411] bridge_slave_0: entered promiscuous mode [ 1348.263920][T29411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.271850][T29411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.279275][T29411] bridge_slave_1: entered allmulticast mode [ 1348.288012][T29411] bridge_slave_1: entered promiscuous mode [ 1348.552341][T29411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.569352][T29411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.038253][T29411] team0: Port device team_slave_0 added [ 1349.069356][T29411] team0: Port device team_slave_1 added [ 1349.228223][T29411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.257325][T29411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.297153][T29411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.337052][T29534] vlan3: entered promiscuous mode [ 1349.454398][T29411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.463097][T29411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.497848][T29541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6209'. [ 1349.498022][T29411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.529678][T29540] 8021q: VLANs not supported on sit0 [ 1349.678829][T29549] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1349.697170][T29411] hsr_slave_0: entered promiscuous mode [ 1349.706349][T29411] hsr_slave_1: entered promiscuous mode [ 1349.713264][T29411] debugfs: 'hsr0' already exists in 'hsr' [ 1349.719590][T29411] Cannot create hsr debugfs directory [ 1349.898087][ T5841] Bluetooth: hci6: command tx timeout [ 1350.080687][T29411] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.192499][T29411] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.288202][T29411] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.400846][T29411] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.798879][T29563] lo speed is unknown, defaulting to 1000 [ 1350.816640][T29411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1350.854362][T29411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1350.872288][T29563] wg1 speed is unknown, defaulting to 1000 [ 1350.872634][T29411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1350.897699][T29579] FAULT_INJECTION: forcing a failure. [ 1350.897699][T29579] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.899638][T29411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1350.945111][T29579] CPU: 1 UID: 0 PID: 29579 Comm: syz.0.6221 Not tainted syzkaller #0 PREEMPT(full) [ 1350.945144][T29579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1350.945156][T29579] Call Trace: [ 1350.945166][T29579] [ 1350.945175][T29579] dump_stack_lvl+0xe8/0x150 [ 1350.945208][T29579] should_fail_ex+0x414/0x560 [ 1350.945243][T29579] should_failslab+0xa8/0x100 [ 1350.945269][T29579] __kmalloc_cache_noprof+0x84/0x700 [ 1350.945287][T29579] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1350.945304][T29579] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1350.945319][T29579] ? sctp_add_bind_addr+0x8c/0x370 [ 1350.945353][T29579] sctp_add_bind_addr+0x8c/0x370 [ 1350.945387][T29579] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1350.945424][T29579] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1350.945450][T29579] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1350.945482][T29579] ? sctp_v6_is_any+0x64/0x80 [ 1350.945504][T29579] ? sctp_copy_one_addr+0x93/0x360 [ 1350.945539][T29579] sctp_bind_addr_copy+0xb3/0x3c0 [ 1350.945570][T29579] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1350.945604][T29579] sctp_connect_new_asoc+0x2e0/0x690 [ 1350.945632][T29579] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1350.945661][T29579] ? __local_bh_enable_ip+0xd0/0x130 [ 1350.945677][T29579] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1350.945693][T29579] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1350.945711][T29579] sctp_sendmsg+0x155c/0x2840 [ 1350.945737][T29579] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1350.945761][T29579] ? aa_sk_perm+0x15f/0x920 [ 1350.945783][T29579] ? aa_sk_perm+0x7ee/0x920 [ 1350.945807][T29579] ? __pfx_aa_sk_perm+0x10/0x10 [ 1350.945829][T29579] ? sock_rps_record_flow+0x19/0x410 [ 1350.945857][T29579] ? inet_sendmsg+0x2f4/0x370 [ 1350.945884][T29579] __sock_sendmsg+0x19c/0x270 [ 1350.945913][T29579] __sys_sendto+0x3bd/0x520 [ 1350.945934][T29579] ? __pfx___sys_sendto+0x10/0x10 [ 1350.945950][T29579] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1350.945984][T29579] ? __fget_files+0x3a0/0x420 [ 1350.946015][T29579] ? ksys_write+0x22a/0x250 [ 1350.946034][T29579] ? __pfx_ksys_write+0x10/0x10 [ 1350.946055][T29579] __x64_sys_sendto+0xde/0x100 [ 1350.946077][T29579] do_syscall_64+0xec/0xf80 [ 1350.946097][T29579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.946113][T29579] ? trace_irq_disable+0x37/0x100 [ 1350.946133][T29579] ? clear_bhb_loop+0x60/0xb0 [ 1350.946153][T29579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.946170][T29579] RIP: 0033:0x7fa29fd8f749 [ 1350.946189][T29579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.946204][T29579] RSP: 002b:00007fa2a0cd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1350.946224][T29579] RAX: ffffffffffffffda RBX: 00007fa29ffe5fa0 RCX: 00007fa29fd8f749 [ 1350.946237][T29579] RDX: 000000000000fffd RSI: 0000200000000080 RDI: 0000000000000005 [ 1350.946248][T29579] RBP: 00007fa2a0cd6090 R08: 0000200000000140 R09: 000000000000001c [ 1350.946259][T29579] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000002 [ 1350.946269][T29579] R13: 00007fa29ffe6038 R14: 00007fa29ffe5fa0 R15: 00007ffde44b7b88 [ 1350.946300][T29579] [ 1351.300540][T29577] gretap0: entered promiscuous mode [ 1351.317277][T29577] vlan4: entered promiscuous mode [ 1351.650906][T29590] batman_adv: batadv0: Adding interface: geneve2 [ 1351.670866][T29590] batman_adv: batadv0: Interface activated: geneve2 [ 1351.715070][T18647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.726175][T18647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.759661][T18647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.786814][T18647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.861100][T29573] lo speed is unknown, defaulting to 1000 [ 1351.880502][T29573] wg1 speed is unknown, defaulting to 1000 [ 1351.892594][T29592] siw: device registration error -23 [ 1351.922072][T29599] 8021q: VLANs not supported on sit0 [ 1351.975719][ T5841] Bluetooth: hci6: command tx timeout [ 1352.017906][T29411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.113350][T29602] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20001 [ 1352.123617][T29411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.148969][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.156894][T18647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.179748][T18651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.187359][T18651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.681719][T29411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.843756][T29411] veth0_vlan: entered promiscuous mode [ 1352.912525][T29411] veth1_vlan: entered promiscuous mode [ 1353.112043][T29622] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6228'. [ 1353.120314][T29609] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1353.149885][T29621] sctp: [Deprecated]: syz.2.6232 (pid 29621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1353.149885][T29621] Use struct sctp_sack_info instead [ 1353.171489][T29609] bond7 (unregistering): Released all slaves [ 1353.246709][T29626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1353.359064][T29411] veth0_macvtap: entered promiscuous mode [ 1353.387573][T29411] veth1_macvtap: entered promiscuous mode [ 1353.464543][T29411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.536006][T29411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.606031][T29630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1353.788995][T18647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.881671][T18647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.904912][T18647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.961864][T29610] lo speed is unknown, defaulting to 1000 [ 1353.962125][T18647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.024374][T29610] wg1 speed is unknown, defaulting to 1000 [ 1354.032876][T29641] netlink: 'syz.5.6237': attribute type 21 has an invalid length. [ 1354.044590][T29641] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6237'. [ 1354.055916][ T5841] Bluetooth: hci6: command tx timeout [ 1354.110374][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.144080][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.208764][T29646] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 1354.236448][T29644] 8021q: VLANs not supported on sit0 [ 1354.243971][T18652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.252694][T18652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.498868][T29652] syzkaller0: entered promiscuous mode [ 1354.515995][T29652] syzkaller0: entered allmulticast mode [ 1354.880008][T29658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6243'. [ 1354.918803][T29658] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6243'. [ 1354.945987][T29660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1354.963578][T29660] netlink: 'syz.4.6244': attribute type 25 has an invalid length. [ 1354.992924][T29662] sock: sock_set_timeout: `syz.0.6245' (pid 29662) tries to set negative timeout [ 1355.454000][T29682] netlink: 'syz.4.6252': attribute type 1 has an invalid length. [ 1355.491300][T29682] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1355.506216][T29682] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1355.526178][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1355.538577][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1355.556079][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1355.565424][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1355.572814][T29682] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1355.573112][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1356.177112][T18275] syz_tun (unregistering): left allmulticast mode [ 1356.194102][T29702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6258'. [ 1356.214459][T29699] 8021q: VLANs not supported on sit0 [ 1356.422708][T29709] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20001 [ 1356.449059][T29710] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6260'. [ 1356.468910][T29710] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6260'. [ 1356.489274][T29710] netlink: 'syz.5.6260': attribute type 3 has an invalid length. [ 1356.718260][T29714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6261'. [ 1356.837364][T29684] lo speed is unknown, defaulting to 1000 [ 1356.866111][T29684] wg1 speed is unknown, defaulting to 1000 [ 1356.954266][T29720] netlink: 'syz.5.6263': attribute type 2 has an invalid length. [ 1357.189602][T29728] geneve1: entered promiscuous mode [ 1357.398024][T29737] sit1: entered promiscuous mode [ 1357.410085][T29684] chnl_net:caif_netlink_parms(): no params data found [ 1357.507581][T29740] netlink: 'syz.3.6269': attribute type 25 has an invalid length. [ 1357.655693][ T5841] Bluetooth: hci1: command tx timeout [ 1357.781815][T29684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.803262][T29684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.819331][T29684] bridge_slave_0: entered allmulticast mode [ 1357.841240][T29684] bridge_slave_0: entered promiscuous mode [ 1357.861100][T29684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.883398][T29684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.912671][T29684] bridge_slave_1: entered allmulticast mode [ 1357.938356][T29684] bridge_slave_1: entered promiscuous mode [ 1358.058399][T29758] 8021q: VLANs not supported on sit0 [ 1358.075761][T29684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.104207][T29684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.229923][T29684] team0: Port device team_slave_0 added [ 1358.243524][T29684] team0: Port device team_slave_1 added [ 1358.366749][T29684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.399219][T29684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.471186][T29684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.499225][T29684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.514837][T29684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.565302][T29684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.790212][T29684] hsr_slave_0: entered promiscuous mode [ 1358.824366][T29684] hsr_slave_1: entered promiscuous mode [ 1358.847187][T29684] debugfs: 'hsr0' already exists in 'hsr' [ 1358.852977][T29684] Cannot create hsr debugfs directory [ 1358.868136][T29768] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1358.920152][T29773] netlink: 'syz.2.6279': attribute type 10 has an invalid length. [ 1359.142108][T29774] xt_bpf: check failed: parse error [ 1359.243707][T29684] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.336832][T29684] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.409812][T29762] lo speed is unknown, defaulting to 1000 [ 1359.418097][T29684] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.441596][T29762] wg1 speed is unknown, defaulting to 1000 [ 1359.500817][T29684] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.736962][ T5841] Bluetooth: hci1: command tx timeout [ 1359.853424][T29776] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1360.037694][T29785] netlink: 'syz.2.6282': attribute type 3 has an invalid length. [ 1360.075429][T29785] __nla_validate_parse: 8 callbacks suppressed [ 1360.075474][T29785] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1360.141708][T29684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1360.187438][T29684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1360.294986][T29684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1360.322782][T29684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1360.345852][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1360.359497][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1360.382283][T29790] netlink: 'syz.2.6284': attribute type 18 has an invalid length. [ 1360.475754][T29803] 8021q: VLANs not supported on sit0 [ 1360.569910][T29684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.628436][T29808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1360.632773][T29684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.711576][T27208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.718957][T27208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.749507][T27208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.756848][T27208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.854415][T29812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6291'. [ 1360.888489][T29816] netlink: 'syz.5.6292': attribute type 1 has an invalid length. [ 1360.894850][T29684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.922572][T29815] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1361.032440][T29820] syzkaller0: entered promiscuous mode [ 1361.038887][T29820] syzkaller0: entered allmulticast mode [ 1361.084596][T29822] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6293'. [ 1361.154553][T29827] netlink: 'syz.5.6293': attribute type 10 has an invalid length. [ 1361.179608][T29827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6293'. [ 1361.267718][T29827] team0: Port device geneve0 added [ 1361.337910][T29684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.377854][T29829] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6295'. [ 1361.404019][T29829] unsupported nla_type 540 [ 1361.456932][T29684] veth0_vlan: entered promiscuous mode [ 1361.486847][T29684] veth1_vlan: entered promiscuous mode [ 1361.516177][T29837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6297'. [ 1361.550085][T29684] veth0_macvtap: entered promiscuous mode [ 1361.570755][T29684] veth1_macvtap: entered promiscuous mode [ 1361.641290][T29684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.674425][T29684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1361.815279][ T5148] Bluetooth: hci1: command tx timeout [ 1361.825606][T18651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.850209][T18651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.885376][T18651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.917326][T18651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.961059][T29855] tipc: Enabling of bearer rejected, failed to enable media [ 1361.972872][T29860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6301'. [ 1362.058808][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1362.420720][ T8674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.455892][ T8674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.602353][T29883] 8021q: VLANs not supported on sit0 [ 1362.633212][T18652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.654894][T18652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.003511][T29894] syzkaller0: entered promiscuous mode [ 1363.013885][T29894] syzkaller0: entered allmulticast mode [ 1363.082248][ T1046] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 1363.835401][T29903] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1363.898283][ T5148] Bluetooth: hci1: command tx timeout [ 1367.270506][T29940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.278468][T29940] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1367.485933][T29940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.496721][T29958] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20001 [ 1367.518089][T29940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.693659][T29954] 8021q: VLANs not supported on sit0 [ 1367.745944][ T8674] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.782817][ T8674] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.823531][ T8674] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.873427][ T8674] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.170680][T29970] tipc: Started in network mode [ 1368.176629][T29970] tipc: Node identity 3e871737b6f8, cluster identity 4711 [ 1368.185317][T29970] tipc: Enabled bearer , priority 0 [ 1368.230388][T29974] syzkaller0: entered promiscuous mode [ 1368.273258][T29974] syzkaller0: entered allmulticast mode [ 1368.307367][T29971] tipc: Enabling of bearer rejected, already enabled [ 1368.405547][T29971] tipc: Resetting bearer [ 1368.490143][T29971] tipc: Disabling bearer [ 1368.578565][T29986] netlink: 'syz.3.6327': attribute type 4 has an invalid length. [ 1368.609741][T29986] netlink: 'syz.3.6327': attribute type 4 has an invalid length. [ 1369.201130][T29995] __nla_validate_parse: 1 callbacks suppressed [ 1369.201161][T29995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6331'. [ 1369.512539][T30006] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1369.585478][T30007] 8021q: VLANs not supported on sit0 [ 1369.710564][T30018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6339'. [ 1369.733778][T30018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6339'. [ 1369.746522][T30018] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 1369.755693][T30020] syzkaller1: entered promiscuous mode [ 1369.761232][T30020] syzkaller1: entered allmulticast mode [ 1369.875277][T30023] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6341'. [ 1370.994257][T30050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1371.364236][T30065] IPVS: set_ctl: invalid protocol: 47 172.30.1.3:20001 [ 1371.822052][T30038] lo speed is unknown, defaulting to 1000 [ 1371.837161][T30038] wg1 speed is unknown, defaulting to 1000 [ 1372.236245][T30070] ¾x9ÿ: left allmulticast mode [ 1372.241118][T30070] ¾x9ÿ: left promiscuous mode [ 1372.278065][T30070] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1372.351035][T30070] bridge_slave_1: left allmulticast mode [ 1372.369658][T30073] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6353'. [ 1372.385423][T30070] bridge_slave_1: left promiscuous mode [ 1372.392132][T30070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.445848][T30070] bond0: (slave bond_slave_0): Releasing backup interface [ 1372.488130][T30070] bond0: (slave bond_slave_1): Releasing backup interface [ 1372.518695][T30070] team0: Port device team_slave_0 removed [ 1372.541887][T30070] team0: Port device team_slave_1 removed [ 1372.555815][T30070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.589589][T30070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.616577][ T5148] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1372.627727][T30070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1372.669288][T30052] lo speed is unknown, defaulting to 1000 [ 1372.691691][T30052] wg1 speed is unknown, defaulting to 1000 [ 1373.041021][T30084] netlink: 'syz.5.6355': attribute type 3 has an invalid length. [ 1373.238045][T30095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6356'. [ 1373.420533][T30090] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1374.045443][T30112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1374.059844][T30113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1374.256982][T30123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6362'. [ 1374.490087][T30127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1375.338860][T30136] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6365'. [ 1375.376868][T30136] netlink: 'syz.5.6365': attribute type 24 has an invalid length. [ 1375.484507][T30142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6367'. [ 1375.891583][T30163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6373'. [ 1375.953078][T30163] netlink: 'syz.5.6373': attribute type 25 has an invalid length. [ 1376.231783][T30172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6377'. [ 1376.317688][T30175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6378'. [ 1376.404500][T30175] netlink: 'syz.0.6378': attribute type 24 has an invalid length. [ 1377.129809][T30187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.195684][T30132] lo speed is unknown, defaulting to 1000 [ 1377.296362][T30132] wg1 speed is unknown, defaulting to 1000 [ 1377.389754][T30187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.639435][T30209] netlink: 'syz.2.6387': attribute type 13 has an invalid length. [ 1380.437893][T30201] tipc: Enabled bearer , priority 0 [ 1380.446480][T30127] lo speed is unknown, defaulting to 1000 [ 1380.458993][T30204] syzkaller0: entered promiscuous mode [ 1380.464510][T30204] syzkaller0: entered allmulticast mode [ 1380.501851][T30187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.527026][T30211] tipc: Resetting bearer [ 1380.536920][T30198] tipc: Resetting bearer [ 1380.572410][T30198] tipc: Disabling bearer [ 1380.592563][T30127] wg1 speed is unknown, defaulting to 1000 [ 1380.593383][T30213] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6388'. [ 1380.629910][T30213] netlink: 'syz.5.6388': attribute type 25 has an invalid length. [ 1380.697769][T30187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.920787][T30222] gtp1: entered promiscuous mode [ 1380.926111][T30222] gtp1: entered allmulticast mode [ 1381.334367][T27208] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.494743][T30237] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6393'. [ 1381.524870][T30237] netlink: 'syz.5.6393': attribute type 24 has an invalid length. [ 1381.633573][T18647] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.719631][T18647] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.837943][T30241] syzkaller0: entered promiscuous mode [ 1381.843485][T30241] syzkaller0: entered allmulticast mode [ 1381.880500][T30245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6395'. [ 1381.908710][T30240] tipc: Started in network mode [ 1381.913654][T30240] tipc: Node identity 9ab634163887, cluster identity 4711 [ 1381.950621][T30240] tipc: Enabled bearer , priority 0 [ 1381.978299][T18647] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.158964][T30240] tipc: Resetting bearer [ 1382.246645][T30240] tipc: Disabling bearer [ 1382.255738][T30256] netlink: 'syz.4.6398': attribute type 5 has an invalid length. [ 1382.309249][T30256] ip6erspan0: entered promiscuous mode [ 1382.403492][T30258] syz_tun: entered promiscuous mode [ 1382.420719][T30261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1382.436811][T30258] vlan4: entered promiscuous mode [ 1382.438383][T30261] netlink: 'syz.0.6400': attribute type 25 has an invalid length. [ 1382.582694][T30267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6403'. [ 1382.638332][T30267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6403'. [ 1382.691546][T30271] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6404'. [ 1382.707011][T30271] netlink: 'syz.0.6404': attribute type 25 has an invalid length. [ 1382.806397][T30279] netlink: 'syz.4.6406': attribute type 1 has an invalid length. [ 1382.848287][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6407'. [ 1382.890616][T30279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1383.084633][T30293] netpci0: tun_chr_ioctl cmd 1074025677 [ 1383.094367][T30297] netlink: 'syz.4.6409': attribute type 10 has an invalid length. [ 1383.113225][T30293] netpci0: linktype set to 6 [ 1383.136765][T30297] bond0: (slave wlan1): Opening slave failed [ 1383.196157][T30299] syzkaller0: entered promiscuous mode [ 1383.203767][T30262] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1383.207731][T30299] syzkaller0: entered allmulticast mode [ 1383.260213][T30301] netlink: 'syz.3.6414': attribute type 1 has an invalid length. [ 1383.395730][T30305] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:19969 [ 1383.403673][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6416'. [ 1383.444535][T30309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1383.449742][T30305] [†’Ì: entered promiscuous mode [ 1383.458430][T30309] netlink: 'syz.3.6418': attribute type 25 has an invalid length. [ 1383.950662][T30322] nbd: illegal input index 65508 [ 1383.970813][T30323] nbd: illegal input index 65508 [ 1384.464121][T30320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.753106][T30349] netlink: 'syz.4.6428': attribute type 28 has an invalid length. [ 1385.319757][T30104] IPVS: starting estimator thread 0... [ 1385.337520][T30371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1385.445724][T30374] IPVS: using max 27 ests per chain, 64800 per kthread [ 1385.657158][T30392] __nla_validate_parse: 9 callbacks suppressed [ 1385.657183][T30392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6440'. [ 1386.141859][T30403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6443'. [ 1387.179610][T30442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6452'. [ 1387.223236][T30442] hsr_slave_0: left promiscuous mode [ 1387.240733][T30442] hsr_slave_1: left promiscuous mode [ 1387.314541][T30382] lo speed is unknown, defaulting to 1000 [ 1387.344832][T30382] wg1 speed is unknown, defaulting to 1000 [ 1387.371170][T30451] syz_tun: entered promiscuous mode [ 1387.387796][T30451] vlan2: entered promiscuous mode [ 1387.478577][T30460] xt_connbytes: Forcing CT accounting to be enabled [ 1387.537869][T30455] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1387.787666][T30470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6459'. [ 1388.040554][T30482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1388.526975][T30491] validate_nla: 1 callbacks suppressed [ 1388.526998][T30491] netlink: 'syz.5.6464': attribute type 27 has an invalid length. [ 1388.591719][T30493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6463'. [ 1388.628928][T30491] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 1389.049888][T30503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6465'. [ 1390.092104][T30522] FAULT_INJECTION: forcing a failure. [ 1390.092104][T30522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.133747][T30522] CPU: 0 UID: 0 PID: 30522 Comm: syz.4.6472 Not tainted syzkaller #0 PREEMPT(full) [ 1390.133779][T30522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.133792][T30522] Call Trace: [ 1390.133801][T30522] [ 1390.133810][T30522] dump_stack_lvl+0xe8/0x150 [ 1390.133844][T30522] should_fail_ex+0x414/0x560 [ 1390.133880][T30522] _copy_from_user+0x2d/0xb0 [ 1390.133908][T30522] generic_map_update_batch+0x50f/0x810 [ 1390.133929][T30522] ? get_pid_task+0x20/0x1f0 [ 1390.133953][T30522] ? get_pid_task+0x20/0x1f0 [ 1390.133988][T30522] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1390.134022][T30522] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1390.134045][T30522] bpf_map_do_batch+0x39b/0x630 [ 1390.134092][T30522] __sys_bpf+0x690/0x860 [ 1390.134123][T30522] ? __pfx___sys_bpf+0x10/0x10 [ 1390.134147][T30522] ? kmem_cache_free+0x197/0x620 [ 1390.134187][T30522] ? ksys_write+0x1e1/0x250 [ 1390.134212][T30522] ? __pfx_ksys_write+0x10/0x10 [ 1390.134239][T30522] __x64_sys_bpf+0x7c/0x90 [ 1390.134266][T30522] do_syscall_64+0xec/0xf80 [ 1390.134291][T30522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.134311][T30522] ? trace_irq_disable+0x37/0x100 [ 1390.134337][T30522] ? clear_bhb_loop+0x60/0xb0 [ 1390.134362][T30522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.134382][T30522] RIP: 0033:0x7f0ae878f749 [ 1390.134401][T30522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.134420][T30522] RSP: 002b:00007f0ae957c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1390.134443][T30522] RAX: ffffffffffffffda RBX: 00007f0ae89e5fa0 RCX: 00007f0ae878f749 [ 1390.134459][T30522] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 1390.134472][T30522] RBP: 00007f0ae957c090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.134485][T30522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.134498][T30522] R13: 00007f0ae89e6038 R14: 00007f0ae89e5fa0 R15: 00007ffe07a9f018 [ 1390.134533][T30522] [ 1390.406788][T30522] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1390.446157][T30475] lo speed is unknown, defaulting to 1000 [ 1390.453957][T30475] wg1 speed is unknown, defaulting to 1000 [ 1390.590002][T30525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6473'. [ 1390.641821][T30525] netlink: 'syz.3.6473': attribute type 25 has an invalid length. [ 1390.853186][T30528] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6474'. [ 1390.890637][T30528] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6474'. [ 1391.655555][T30514] lo speed is unknown, defaulting to 1000 [ 1391.692144][T30514] wg1 speed is unknown, defaulting to 1000 [ 1392.788724][T30530] lo speed is unknown, defaulting to 1000 [ 1392.852553][T30530] wg1 speed is unknown, defaulting to 1000 [ 1393.981524][T30541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6477'. [ 1394.306027][T30552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6479'. [ 1394.382222][T30552] netlink: 'syz.2.6479': attribute type 25 has an invalid length. [ 1394.739683][T30564] Unsupported ieee802154 address type: 0 [ 1394.796260][T30562] vxcan2: entered allmulticast mode [ 1394.959391][T30573] sctp: [Deprecated]: syz.0.6487 (pid 30573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1394.959391][T30573] Use struct sctp_sack_info instead [ 1395.477065][T30588] netlink: 'syz.0.6489': attribute type 49 has an invalid length. [ 1395.525422][T30584] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1395.526240][T30574] netlink: 'syz.5.6486': attribute type 3 has an invalid length. [ 1396.417940][T30605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6495'. [ 1396.526453][T30600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1396.663395][T30580] lo speed is unknown, defaulting to 1000 [ 1396.676453][T30580] wg1 speed is unknown, defaulting to 1000 [ 1396.893433][T30614] netlink: 'syz.0.6497': attribute type 4 has an invalid length. [ 1396.928646][T30614] netlink: 'syz.0.6497': attribute type 8 has an invalid length. [ 1396.984991][T30614] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6497'. [ 1396.994729][T30615] netlink: 'syz.0.6497': attribute type 4 has an invalid length. [ 1397.015923][T30615] netlink: 'syz.0.6497': attribute type 8 has an invalid length. [ 1397.028454][T30615] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6497'. [ 1397.082599][T30619] openvswitch: netlink: Message has 4 unknown bytes. [ 1397.336950][T30622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6498'. [ 1397.586023][T30626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6499'. [ 1397.660338][T30627] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1397.695481][T30630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6500'. [ 1397.717086][T30621] netlink: 'syz.0.6498': attribute type 2 has an invalid length. [ 1397.726596][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6499'. [ 1397.917024][T30621] !©9: entered promiscuous mode [ 1397.960699][T30632] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1398.053215][T30632] bond5: (slave lo): Enslaving as a backup interface with an up link [ 1398.172395][T30632] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1398.463588][T30651] batadv1: entered promiscuous mode [ 1398.571033][T30658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6505'. [ 1400.301592][T30651] lo speed is unknown, defaulting to 1000 [ 1400.328166][T30651] wg1 speed is unknown, defaulting to 1000 [ 1400.766369][T30701] netlink: 'syz.4.6518': attribute type 83 has an invalid length. [ 1400.949376][T30679] lo speed is unknown, defaulting to 1000 [ 1400.974652][T30679] wg1 speed is unknown, defaulting to 1000 [ 1401.713395][T30711] wg1: entered promiscuous mode [ 1401.720212][T30711] wg1: entered allmulticast mode [ 1402.146910][T30729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6523'. [ 1402.322926][T30729] bridge_slave_1: left allmulticast mode [ 1402.356029][T30729] bridge_slave_1: left promiscuous mode [ 1402.362111][T30729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.452160][T30729] bridge_slave_0: left allmulticast mode [ 1402.465566][T30729] bridge_slave_0: left promiscuous mode [ 1402.475678][T30729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.940944][T30744] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 1403.366768][T30767] vlan2: entered promiscuous mode [ 1403.392254][T30770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6533'. [ 1403.443908][T30720] lo speed is unknown, defaulting to 1000 [ 1403.484323][T30775] x_tables: duplicate underflow at hook 2 [ 1403.494138][T30720] wg1 speed is unknown, defaulting to 1000 [ 1403.702399][T30786] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6536'. [ 1403.759538][T30786] netlink: 'syz.0.6536': attribute type 1 has an invalid length. [ 1404.165448][T30802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6544'. [ 1404.790805][T30835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1404.840284][T30835] netlink: 'syz.0.6550': attribute type 25 has an invalid length. [ 1404.909037][T30837] tipc: Invalid UDP bearer configuration [ 1404.909101][T30837] tipc: Enabling of bearer rejected, failed to enable media [ 1404.951223][T30839] netlink: 'syz.3.6552': attribute type 1 has an invalid length. [ 1405.117762][T30846] macvtap1: entered promiscuous mode [ 1405.123723][T30846] macvtap1: entered allmulticast mode [ 1405.130643][T30816] netlink: 'syz.2.6547': attribute type 1 has an invalid length. [ 1405.156061][T30816] netlink: 'syz.2.6547': attribute type 4 has an invalid length. [ 1405.180173][T30849] xt_TCPMSS: Only works on TCP SYN packets [ 1405.186925][T30841] netlink: 'syz.2.6547': attribute type 1 has an invalid length. [ 1405.198754][T30841] netlink: 'syz.2.6547': attribute type 4 has an invalid length. [ 1405.202089][T30816] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1405.256357][T30841] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1405.611707][T30864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1405.837649][T30872] netlink: 'syz.5.6562': attribute type 18 has an invalid length. [ 1405.859909][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6562'. [ 1405.960092][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.967160][T30875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6563'. [ 1405.973185][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.045347][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.054645][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.327510][T30865] netlink: 'syz.4.6557': attribute type 6 has an invalid length. [ 1406.416387][T30888] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6567'. [ 1406.549770][T30892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.685106][T30858] lo speed is unknown, defaulting to 1000 [ 1406.708931][T30858] wg1 speed is unknown, defaulting to 1000 [ 1407.247280][T30924] __nla_validate_parse: 1 callbacks suppressed [ 1407.247304][T30924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6575'. [ 1407.719221][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6578'. [ 1408.120366][T30954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6585'. [ 1408.444112][T30966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6588'. [ 1408.502945][ T5148] Bluetooth: hci1: link tx timeout [ 1408.510637][ T5148] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1408.523384][ T5148] Bluetooth: hci1: link tx timeout [ 1408.528623][ T5148] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1408.537216][ T5148] Bluetooth: hci1: link tx timeout [ 1408.542507][ T5148] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1408.551714][ T5148] Bluetooth: hci1: link tx timeout [ 1408.557240][ T5148] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1408.568187][ T5148] Bluetooth: hci1: link tx timeout [ 1408.573425][ T5148] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1408.581887][ T5148] Bluetooth: hci1: link tx timeout [ 1408.587554][ T5148] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1408.762973][T30932] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1409.100986][T30991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6591'. [ 1409.461255][T31003] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6594'. [ 1409.576538][ T5148] Bluetooth: hci2: command 0x0401 tx timeout [ 1409.703253][T31011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1410.561773][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 1411.651025][T31011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.675084][T31011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.704172][T31011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.735187][T31011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.826499][T31022] FAULT_INJECTION: forcing a failure. [ 1411.826499][T31022] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.849661][T31022] CPU: 1 UID: 0 PID: 31022 Comm: syz.5.6599 Not tainted syzkaller #0 PREEMPT(full) [ 1411.849692][T31022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1411.849705][T31022] Call Trace: [ 1411.849714][T31022] [ 1411.849724][T31022] dump_stack_lvl+0xe8/0x150 [ 1411.849770][T31022] should_fail_ex+0x414/0x560 [ 1411.849807][T31022] should_failslab+0xa8/0x100 [ 1411.849832][T31022] __kmalloc_cache_noprof+0x84/0x700 [ 1411.849855][T31022] ? nft_trans_rule_add+0x59/0x440 [ 1411.849881][T31022] ? __pfx_nft_immediate_init+0x10/0x10 [ 1411.849912][T31022] nft_trans_rule_add+0x59/0x440 [ 1411.849944][T31022] nf_tables_newrule+0x1b63/0x28a0 [ 1411.849986][T31022] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1411.850004][T31022] ? nfnl_pernet+0x23/0x240 [ 1411.850027][T31022] ? nfnl_pernet+0x23/0x240 [ 1411.850059][T31022] ? __nla_parse+0x40/0x60 [ 1411.850084][T31022] nfnetlink_rcv+0x11d9/0x2590 [ 1411.850144][T31022] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1411.850186][T31022] ? ref_tracker_free+0x63a/0x7d0 [ 1411.850235][T31022] ? __netlink_deliver_tap+0x807/0x850 [ 1411.850259][T31022] ? netlink_deliver_tap+0x2e/0x1b0 [ 1411.850301][T31022] netlink_unicast+0x82f/0x9e0 [ 1411.850334][T31022] ? __pfx_netlink_unicast+0x10/0x10 [ 1411.850356][T31022] ? __alloc_skb+0x198/0x3b0 [ 1411.850378][T31022] ? netlink_sendmsg+0x642/0xb30 [ 1411.850404][T31022] ? skb_put+0x11b/0x210 [ 1411.850431][T31022] netlink_sendmsg+0x805/0xb30 [ 1411.850468][T31022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1411.850498][T31022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1411.850522][T31022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1411.850539][T31022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1411.850564][T31022] __sock_sendmsg+0x21c/0x270 [ 1411.850596][T31022] ____sys_sendmsg+0x505/0x820 [ 1411.850625][T31022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1411.850660][T31022] ? import_iovec+0x74/0xa0 [ 1411.850689][T31022] ___sys_sendmsg+0x21f/0x2a0 [ 1411.850718][T31022] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.850789][T31022] ? __fget_files+0x2a/0x420 [ 1411.850814][T31022] ? __fget_files+0x3a0/0x420 [ 1411.850853][T31022] __x64_sys_sendmsg+0x19b/0x260 [ 1411.850884][T31022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1411.850924][T31022] ? __pfx_ksys_write+0x10/0x10 [ 1411.850960][T31022] do_syscall_64+0xec/0xf80 [ 1411.850985][T31022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.851006][T31022] ? trace_irq_disable+0x37/0x100 [ 1411.851032][T31022] ? clear_bhb_loop+0x60/0xb0 [ 1411.851059][T31022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.851079][T31022] RIP: 0033:0x7f7c3e18f749 [ 1411.851100][T31022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.851116][T31022] RSP: 002b:00007f7c3f06e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.851138][T31022] RAX: ffffffffffffffda RBX: 00007f7c3e3e5fa0 RCX: 00007f7c3e18f749 [ 1411.851154][T31022] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1411.851167][T31022] RBP: 00007f7c3f06e090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.851181][T31022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.851193][T31022] R13: 00007f7c3e3e6038 R14: 00007f7c3e3e5fa0 R15: 00007fff1fb0d988 [ 1411.851231][T31022] [ 1412.318397][T31029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6601'. [ 1412.673891][T31044] syzkaller0: entered promiscuous mode [ 1412.680027][T31044] syzkaller0: entered allmulticast mode [ 1412.982516][T31058] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1413.187978][T31068] FAULT_INJECTION: forcing a failure. [ 1413.187978][T31068] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.205222][T31068] CPU: 0 UID: 0 PID: 31068 Comm: syz.5.6612 Not tainted syzkaller #0 PREEMPT(full) [ 1413.205255][T31068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1413.205267][T31068] Call Trace: [ 1413.205276][T31068] [ 1413.205284][T31068] dump_stack_lvl+0xe8/0x150 [ 1413.205317][T31068] should_fail_ex+0x414/0x560 [ 1413.205354][T31068] should_failslab+0xa8/0x100 [ 1413.205383][T31068] __kmalloc_cache_noprof+0x84/0x700 [ 1413.205408][T31068] ? nft_trans_rule_add+0x59/0x440 [ 1413.205433][T31068] ? __pfx_nft_immediate_init+0x10/0x10 [ 1413.205474][T31068] nft_trans_rule_add+0x59/0x440 [ 1413.205506][T31068] nf_tables_newrule+0x1b63/0x28a0 [ 1413.205549][T31068] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1413.205568][T31068] ? nfnl_pernet+0x23/0x240 [ 1413.205596][T31068] ? nfnl_pernet+0x23/0x240 [ 1413.205633][T31068] ? __nla_parse+0x40/0x60 [ 1413.205662][T31068] nfnetlink_rcv+0x11d9/0x2590 [ 1413.205728][T31068] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1413.205775][T31068] ? ref_tracker_free+0x63a/0x7d0 [ 1413.205828][T31068] ? __netlink_deliver_tap+0x807/0x850 [ 1413.205858][T31068] ? netlink_deliver_tap+0x2e/0x1b0 [ 1413.205908][T31068] netlink_unicast+0x82f/0x9e0 [ 1413.205946][T31068] ? __pfx_netlink_unicast+0x10/0x10 [ 1413.205971][T31068] ? __alloc_skb+0x198/0x3b0 [ 1413.205996][T31068] ? netlink_sendmsg+0x642/0xb30 [ 1413.206022][T31068] ? skb_put+0x11b/0x210 [ 1413.206051][T31068] netlink_sendmsg+0x805/0xb30 [ 1413.206092][T31068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1413.206126][T31068] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1413.206155][T31068] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1413.206175][T31068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1413.206205][T31068] __sock_sendmsg+0x21c/0x270 [ 1413.206241][T31068] ____sys_sendmsg+0x505/0x820 [ 1413.206275][T31068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1413.206312][T31068] ? import_iovec+0x74/0xa0 [ 1413.206340][T31068] ___sys_sendmsg+0x21f/0x2a0 [ 1413.206369][T31068] ? __pfx____sys_sendmsg+0x10/0x10 [ 1413.206441][T31068] ? __fget_files+0x2a/0x420 [ 1413.206474][T31068] ? __fget_files+0x3a0/0x420 [ 1413.206512][T31068] __x64_sys_sendmsg+0x19b/0x260 [ 1413.206543][T31068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1413.206581][T31068] ? __pfx_ksys_write+0x10/0x10 [ 1413.206616][T31068] do_syscall_64+0xec/0xf80 [ 1413.206642][T31068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.206662][T31068] ? trace_irq_disable+0x37/0x100 [ 1413.206687][T31068] ? clear_bhb_loop+0x60/0xb0 [ 1413.206712][T31068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.206731][T31068] RIP: 0033:0x7f7c3e18f749 [ 1413.206752][T31068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.206770][T31068] RSP: 002b:00007f7c3f06e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1413.206794][T31068] RAX: ffffffffffffffda RBX: 00007f7c3e3e5fa0 RCX: 00007f7c3e18f749 [ 1413.206810][T31068] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1413.206822][T31068] RBP: 00007f7c3f06e090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.206835][T31068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.206848][T31068] R13: 00007f7c3e3e6038 R14: 00007f7c3e3e5fa0 R15: 00007fff1fb0d988 [ 1413.206886][T31068] [ 1413.620256][T31070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6613'. [ 1413.649180][T31017] lo speed is unknown, defaulting to 1000 [ 1413.657597][T31017] wg1 speed is unknown, defaulting to 1000 [ 1414.029266][T31088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1414.142661][T31090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6618'. [ 1414.174648][T31095] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6619'. [ 1414.225112][T31095] .70·: renamed from hsr0 (while UP) [ 1414.244081][T31095] .70·: entered allmulticast mode [ 1414.254314][T31095] hsr_slave_0: entered allmulticast mode [ 1414.260793][T31095] hsr_slave_1: entered allmulticast mode [ 1414.267482][T31095] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1414.400877][T31100] netlink: zone id is out of range [ 1414.413939][T31100] netlink: zone id is out of range [ 1414.420437][T31100] netlink: set zone limit has 8 unknown bytes [ 1414.522554][T31081] lo speed is unknown, defaulting to 1000 [ 1414.531658][T31037] lo speed is unknown, defaulting to 1000 [ 1414.546333][T31081] wg1 speed is unknown, defaulting to 1000 [ 1414.603853][T31037] wg1 speed is unknown, defaulting to 1000 [ 1414.717701][T31105] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1414.844612][T31109] FAULT_INJECTION: forcing a failure. [ 1414.844612][T31109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.859069][T31109] CPU: 0 UID: 0 PID: 31109 Comm: syz.0.6624 Not tainted syzkaller #0 PREEMPT(full) [ 1414.859101][T31109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1414.859114][T31109] Call Trace: [ 1414.859124][T31109] [ 1414.859133][T31109] dump_stack_lvl+0xe8/0x150 [ 1414.859167][T31109] should_fail_ex+0x414/0x560 [ 1414.859206][T31109] _copy_from_user+0x2d/0xb0 [ 1414.859232][T31109] kstrtouint_from_user+0xc4/0x170 [ 1414.859256][T31109] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1414.859299][T31109] proc_fail_nth_write+0x88/0x200 [ 1414.859322][T31109] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1414.859352][T31109] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1414.859378][T31109] vfs_write+0x27e/0xb30 [ 1414.859411][T31109] ? __pfx_vfs_write+0x10/0x10 [ 1414.859431][T31109] ? __fget_files+0x2a/0x420 [ 1414.859461][T31109] ? __fget_files+0x3a0/0x420 [ 1414.859486][T31109] ? __fget_files+0x2a/0x420 [ 1414.859524][T31109] ksys_write+0x145/0x250 [ 1414.859548][T31109] ? __pfx_ksys_write+0x10/0x10 [ 1414.859584][T31109] do_syscall_64+0xec/0xf80 [ 1414.859608][T31109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.859628][T31109] ? trace_irq_disable+0x37/0x100 [ 1414.859655][T31109] ? clear_bhb_loop+0x60/0xb0 [ 1414.859681][T31109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.859711][T31109] RIP: 0033:0x7f364078e1ff [ 1414.859732][T31109] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1414.859750][T31109] RSP: 002b:00007f3641656030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1414.859774][T31109] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f364078e1ff [ 1414.859789][T31109] RDX: 0000000000000001 RSI: 00007f36416560a0 RDI: 0000000000000004 [ 1414.859802][T31109] RBP: 00007f3641656090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.859816][T31109] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1414.859828][T31109] R13: 00007f36409e6038 R14: 00007f36409e5fa0 R15: 00007fffad685df8 [ 1414.859868][T31109] [ 1415.073258][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1415.763565][T31126] No such timeout policy "syz1" [ 1416.171289][T31136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1416.720577][T31147] siw: device registration error -23 [ 1416.833505][T31151] netlink: 'syz.0.6633': attribute type 2 has an invalid length. [ 1416.842534][T31151] netlink: 'syz.0.6633': attribute type 1 has an invalid length. [ 1416.876695][T31152] veth1_macvtap: left promiscuous mode [ 1416.883848][T31152] macsec0: entered promiscuous mode [ 1416.914024][T31153] veth1_macvtap: entered promiscuous mode [ 1416.920444][T31153] macsec0: left promiscuous mode [ 1416.974773][T31155] nbd: nbd5 already in use [ 1417.180886][T31170] syzkaller0: entered promiscuous mode [ 1417.192293][T31170] syzkaller0: entered allmulticast mode [ 1417.508423][T31179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6642'. [ 1417.604485][T31182] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1417.840936][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6647'. [ 1418.900792][T31185] lo speed is unknown, defaulting to 1000 [ 1418.910316][T31185] wg1 speed is unknown, defaulting to 1000 [ 1419.244176][T31245] netlink: 'syz.0.6661': attribute type 15 has an invalid length. [ 1419.271056][T31245] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6661'. [ 1419.340399][T31252] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.6663'. [ 1420.129054][T31280] tipc: Enabled bearer , priority 0 [ 1420.200226][T31279] tipc: Disabling bearer [ 1420.376574][T31287] tipc: Enabling of bearer rejected, media not registered [ 1420.464764][T31292] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6675'. [ 1420.494365][T31292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1420.502097][T31294] xt_bpf: check failed: parse error [ 1420.545788][T31297] xt_bpf: check failed: parse error [ 1420.599491][T31299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1420.998660][T31319] mac80211_hwsim hwsim80 wlan1: entered allmulticast mode [ 1421.070854][T31319] bridge_slave_0: left allmulticast mode [ 1421.085441][T31319] bridge_slave_0: left promiscuous mode [ 1421.108450][T31319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.115184][T31327] netlink: 'syz.0.6685': attribute type 10 has an invalid length. [ 1421.149299][T31319] bridge_slave_1: left allmulticast mode [ 1421.161939][T31319] bridge_slave_1: left promiscuous mode [ 1421.173380][T31324] netlink: 'syz.3.6687': attribute type 1 has an invalid length. [ 1421.184765][T31319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.219638][T31319] bond0: (slave bond_slave_0): Releasing backup interface [ 1421.273992][T31319] bond0: (slave bond_slave_1): Releasing backup interface [ 1421.311504][T31336] netlink: 'syz.4.6690': attribute type 10 has an invalid length. [ 1421.321975][T31319] team0: Port device team_slave_0 removed [ 1421.347773][T31319] team0: Port device team_slave_1 removed [ 1421.358010][T31319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1421.382852][T31327] mac80211_hwsim hwsim80 wlan1: left allmulticast mode [ 1421.461190][T31327] bond0: (slave wlan1): Opening slave failed [ 1421.509133][T31324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.524849][T31334] macvlan2: entered promiscuous mode [ 1421.530829][T31334] macvlan2: entered allmulticast mode [ 1421.683891][T31337] bond1: (slave ip6gretap1): making interface the new active one [ 1421.694504][T31337] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1421.707973][T31336] veth1_macvtap: left promiscuous mode [ 1421.723764][T31336] team0: Device veth1_macvtap failed to register rx_handler [ 1422.003289][T31356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6693'. [ 1422.045359][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 1422.054650][T31356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6693'. [ 1422.079664][T31356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 1422.255917][T31356] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1422.422591][T31374] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1422.489753][T31374] netlink: 'syz.5.6696': attribute type 3 has an invalid length. [ 1422.999369][T31338] lo speed is unknown, defaulting to 1000 [ 1423.009681][T31338] wg1 speed is unknown, defaulting to 1000 [ 1423.271660][T31399] __nla_validate_parse: 4 callbacks suppressed [ 1423.271681][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6705'. [ 1423.295209][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6705'. [ 1423.511131][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.703962][T31405] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1423.782164][T31413] 8021q: VLANs not supported on ip6gre0 [ 1424.122084][T31422] Cannot find del_set index 4 as target [ 1424.310403][T31432] netlink: 'syz.5.6712': attribute type 1 has an invalid length. [ 1426.764178][T31432] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1426.972310][T31450] tipc: Enabled bearer , priority 0 [ 1427.025725][T31454] syzkaller0: entered promiscuous mode [ 1427.055350][T31454] syzkaller0: entered allmulticast mode [ 1427.113032][T31447] tipc: Resetting bearer [ 1427.215871][T31461] openvswitch: netlink: Message has 4 unknown bytes. [ 1427.231869][T31447] tipc: Disabling bearer [ 1427.293197][T31469] 8021q: VLANs not supported on ip6gre0 [ 1427.421902][T31472] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1427.534732][T31478] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6724'. [ 1427.579000][T31478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1428.132016][T31497] netlink: 'syz.0.6729': attribute type 142 has an invalid length. [ 1428.497475][T31486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6726'. [ 1428.614237][T31508] 8021q: VLANs not supported on ip6gre0 [ 1428.615640][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1428.802435][T31474] lo speed is unknown, defaulting to 1000 [ 1428.813894][T31474] wg1 speed is unknown, defaulting to 1000 [ 1428.922853][T31517] sctp: [Deprecated]: syz.2.6736 (pid 31517) Use of int in max_burst socket option deprecated. [ 1428.922853][T31517] Use struct sctp_assoc_value instead [ 1428.936827][T31518] netlink: 'syz.0.6735': attribute type 1 has an invalid length. [ 1429.295577][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1429.356305][T31526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1429.407882][T31530] netlink: 'syz.0.6740': attribute type 1 has an invalid length. [ 1429.436146][T31531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1429.451480][T31527] team1: entered promiscuous mode [ 1429.457116][T31527] team1: entered allmulticast mode [ 1429.457251][T31532] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1429.462715][T31527] 8021q: adding VLAN 0 to HW filter on device team1 [ 1429.480067][T31528] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6738'. [ 1429.581894][T31536] netlink: zone id is out of range [ 1429.740297][T31526] team2: entered promiscuous mode [ 1429.760208][T31526] team2: entered allmulticast mode [ 1429.793312][T31526] 8021q: adding VLAN 0 to HW filter on device team2 [ 1429.820962][T31531] team0: No ports can be present during mode change [ 1429.851765][T31533] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1429.971060][T31530] bond2: entered promiscuous mode [ 1429.977514][T31530] bond2: entered allmulticast mode [ 1430.147513][T31542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6743'. [ 1430.183713][T31542] ip6tnl1: entered allmulticast mode [ 1430.254795][T31548] 8021q: VLANs not supported on ip6gre0 [ 1430.596434][T31559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6750'. [ 1431.295160][T31569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1431.301177][T31569] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1431.328694][T31569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1431.334669][T31569] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1431.424333][T31569] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1431.445088][T31569] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1431.456728][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 1431.467545][T31577] vlan3: left promiscuous mode [ 1431.474670][T31577] bridge0: port 3(vlan3) entered disabled state [ 1431.497230][T31577] bridge_slave_1: left allmulticast mode [ 1431.503020][T31577] bridge_slave_1: left promiscuous mode [ 1431.526202][T31577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.559009][T31577] bridge_slave_0: left promiscuous mode [ 1431.565346][T31577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.692572][T31563] lo speed is unknown, defaulting to 1000 [ 1431.692641][T31569] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1431.707180][T31569] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1431.718359][T31563] wg1 speed is unknown, defaulting to 1000 [ 1431.741826][T31569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1431.768037][T31569] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1432.478703][T31602] netlink: 'syz.0.6757': attribute type 5 has an invalid length. [ 1432.739286][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1433.094133][T31621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.119202][T31621] batadv_slave_0: entered promiscuous mode [ 1433.145279][T31621] netlink: 'syz.3.6761': attribute type 3 has an invalid length. [ 1433.518229][T31631] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20001 [ 1433.530408][T31627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6763'. [ 1434.048010][T31657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6771'. [ 1434.136785][T31660] netlink: 'syz.2.6772': attribute type 13 has an invalid length. [ 1434.196527][T31657] netlink: 'syz.5.6771': attribute type 1 has an invalid length. [ 1434.209506][ T8655] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.209699][T31660] netlink: 'syz.2.6772': attribute type 13 has an invalid length. [ 1434.229761][T31657] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6771'. [ 1434.248121][ T8655] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.280013][ T8655] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.325269][ T8655] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1434.522711][T31603] lo speed is unknown, defaulting to 1000 [ 1434.548571][T31603] wg1 speed is unknown, defaulting to 1000 [ 1434.802292][T31678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6777'. [ 1435.759192][T31699] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6782'. [ 1435.805478][T31699] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 1436.705521][ T30] audit: type=1800 audit(1768495943.568:15): pid=31730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6790" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=807 res=0 errno=0 [ 1436.773552][ T30] audit: type=1804 audit(1768495943.568:16): pid=31730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6790" name="/newroot/154/x000000000000000300000000000000000000003" dev="tmpfs" ino=807 res=1 errno=0 [ 1437.118998][T31734] tipc: Enabled bearer , priority 0 [ 1437.153259][T31734] syzkaller0: entered promiscuous mode [ 1437.225344][T31734] syzkaller0: entered allmulticast mode [ 1437.262463][T31734] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6792'. [ 1437.337918][T31733] tipc: Resetting bearer [ 1437.396375][T31739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1437.416888][T31733] tipc: Disabling bearer [ 1437.435514][T31725] lo speed is unknown, defaulting to 1000 [ 1437.444555][T31725] wg1 speed is unknown, defaulting to 1000 [ 1437.457962][T31739] netlink: 'syz.4.6793': attribute type 1 has an invalid length. [ 1437.647030][T31743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6794'. [ 1438.035561][T31757] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6798'. [ 1438.092111][T31757] netlink: 'syz.5.6798': attribute type 25 has an invalid length. [ 1438.194316][T31761] syzkaller0: entered promiscuous mode [ 1438.205050][T31761] syzkaller0: entered allmulticast mode [ 1438.544502][T31770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6802'. [ 1438.562430][T31770] netlink: 'syz.5.6802': attribute type 2 has an invalid length. [ 1438.575853][T31770] netlink: 'syz.5.6802': attribute type 2 has an invalid length. [ 1438.621152][T31770] bond1: option miimon: invalid value (18446744073709551607) [ 1438.633207][T31770] bond1: option miimon: allowed values 0 - 2147483647 [ 1438.648807][T31770] bond1 (unregistering): Released all slaves [ 1438.991280][T31747] lo speed is unknown, defaulting to 1000 [ 1439.007785][T31747] wg1 speed is unknown, defaulting to 1000 [ 1439.187407][T31791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.199664][T31791] netlink: 'syz.3.6807': attribute type 10 has an invalid length. [ 1439.226555][T31791] team0: Port device team_slave_0 removed [ 1439.291522][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6808'. [ 1439.638812][T31800] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6810'. [ 1439.709333][T31800] netlink: 'syz.3.6810': attribute type 25 has an invalid length. [ 1440.082279][T31755] lo speed is unknown, defaulting to 1000 [ 1440.131371][T31755] wg1 speed is unknown, defaulting to 1000 [ 1441.072049][T31820] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20001 [ 1441.208379][T31796] lo speed is unknown, defaulting to 1000 [ 1441.312864][T31796] wg1 speed is unknown, defaulting to 1000 [ 1441.609368][T31832] netlink: 'syz.0.6819': attribute type 2 has an invalid length. [ 1441.654615][T31832] hmac(sha224: entered promiscuous mode [ 1442.053353][T31839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6822'. [ 1442.094051][T31839] netlink: 'syz.3.6822': attribute type 25 has an invalid length. [ 1442.477062][ T30] audit: type=1800 audit(1768495949.338:17): pid=31852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6826" name="memory.events" dev="tmpfs" ino=1551 res=0 errno=0 [ 1442.607645][ T30] audit: type=1804 audit(1768495949.358:18): pid=31852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6826" name="memory.events" dev="tmpfs" ino=1551 res=1 errno=0 [ 1442.890116][T31860] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6828'. [ 1443.025469][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6829'. [ 1443.202911][T31870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6832'. [ 1443.234326][T31836] lo speed is unknown, defaulting to 1000 [ 1443.253069][T31836] wg1 speed is unknown, defaulting to 1000 [ 1443.412407][T31875] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6835'. [ 1443.469008][T31875] netlink: 'syz.3.6835': attribute type 25 has an invalid length. [ 1443.591429][T31876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6834'. [ 1443.662853][T31897] netlink: 'syz.3.6839': attribute type 10 has an invalid length. [ 1443.711081][T31893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1443.764148][T31897] team0: Failed to send options change via netlink (err -105) [ 1443.804548][T31897] team0: Port device dummy0 added [ 1443.890936][T31905] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6840'. [ 1443.923794][T31905] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6840'. [ 1444.741690][T31937] syzkaller0: entered promiscuous mode [ 1444.747702][T31937] syzkaller0: entered allmulticast mode [ 1445.056665][T31953] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1445.135780][T31956] netlink: 'syz.2.6856': attribute type 11 has an invalid length. [ 1445.196428][T31963] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1445.233266][T31963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1445.259077][T31968] x_tables: duplicate underflow at hook 1 [ 1445.284429][T31963] IPv6: sit1: Disabled Multicast RS [ 1445.291849][T31963] sit1: entered allmulticast mode [ 1445.596987][T31980] syzkaller0: left promiscuous mode [ 1445.605324][T31980] syzkaller0: left allmulticast mode [ 1445.820220][T31984] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1445.973098][T31992] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20001 [ 1446.262950][T31953] lo speed is unknown, defaulting to 1000 [ 1446.282581][T31953] wg1 speed is unknown, defaulting to 1000 [ 1446.836649][T31956] lo speed is unknown, defaulting to 1000 [ 1446.844821][T31956] wg1 speed is unknown, defaulting to 1000 [ 1447.304738][T32024] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6872'. [ 1447.478348][T32026] tipc: Started in network mode [ 1447.483484][T32026] tipc: Node identity ac14140f, cluster identity 4711 [ 1447.513219][T32026] tipc: New replicast peer: 255.255.255.255 [ 1447.546052][T32026] tipc: Enabled bearer , priority 10 [ 1448.009463][T32038] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6878'. [ 1448.665256][T14411] tipc: Node number set to 2886997007 [ 1448.821109][T32051] IPVS: set_ctl: invalid protocol: 47 172.30.1.6:20001 [ 1448.930450][T32041] netlink: 'syz.4.6878': attribute type 6 has an invalid length. [ 1449.110735][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6883'. [ 1449.412072][T32038] lo speed is unknown, defaulting to 1000 [ 1449.426916][T32038] wg1 speed is unknown, defaulting to 1000 [ 1449.627000][T32067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1449.636997][T32067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6885'. [ 1449.907756][T20589] IPVS: starting estimator thread 0... [ 1449.935681][T32071] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1450.021963][T32075] IPVS: using max 26 ests per chain, 62400 per kthread [ 1450.079601][T32080] netlink: 'syz.4.6888': attribute type 1 has an invalid length. [ 1450.281353][T32085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6888'. [ 1450.514579][T32082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1450.562068][T32082] bond4: (slave bond5): making interface the new active one [ 1450.616264][T32082] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1450.769634][T32083] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 1450.784430][T32085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1451.213729][T32105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6894'. [ 1451.241362][T32111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6894'. [ 1451.259170][T32110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6895'. [ 1452.006113][T32071] lo speed is unknown, defaulting to 1000 [ 1452.015374][T32071] wg1 speed is unknown, defaulting to 1000 [ 1452.024033][T32114] siw: device registration error -23 [ 1452.214816][T32132] 8021q: VLANs not supported on sit0 [ 1453.057309][T32146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1453.078402][T32146] netlink: 'syz.0.6908': attribute type 25 has an invalid length. [ 1453.164485][T32148] netlink: 'syz.2.6909': attribute type 6 has an invalid length. [ 1453.373231][T32157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6912'. [ 1454.060105][T32183] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 1454.247051][T32192] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1454.306771][T20589] IPVS: starting estimator thread 0... [ 1454.328538][T32200] 8021q: VLANs not supported on sit0 [ 1454.334743][T32198] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1454.366137][T32202] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 1454.416780][T32199] IPVS: using max 28 ests per chain, 67200 per kthread [ 1454.562098][T32214] xt_TCPMSS: Only works on TCP SYN packets [ 1455.021575][T32223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1455.238324][T32198] lo speed is unknown, defaulting to 1000 [ 1455.248318][T32227] netlink: 'syz.0.6929': attribute type 28 has an invalid length. [ 1455.269196][T32198] wg1 speed is unknown, defaulting to 1000 [ 1455.293593][T32229] netlink: 'syz.0.6929': attribute type 28 has an invalid length. [ 1455.349064][T32231] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1455.455316][T32233] netlink: 'syz.4.6932': attribute type 1 has an invalid length. [ 1455.515553][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1455.556035][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1455.557190][T32233] bond6: entered promiscuous mode [ 1455.571866][T32233] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1455.903192][T32254] 8021q: VLANs not supported on sit0 [ 1455.922962][T32255] : entered promiscuous mode [ 1455.968578][T32204] lo speed is unknown, defaulting to 1000 [ 1455.989246][T32204] wg1 speed is unknown, defaulting to 1000 [ 1456.581490][T32211] lo speed is unknown, defaulting to 1000 [ 1456.593488][T32211] wg1 speed is unknown, defaulting to 1000 [ 1457.662861][T32296] tap0: tun_chr_ioctl cmd 2148553947 [ 1457.694996][T32297] tap0: tun_chr_ioctl cmd 2147767521 [ 1457.777291][T32294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1457.936779][T32309] openvswitch: netlink: IP tunnel dst address not specified [ 1458.165405][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6955'. [ 1458.337820][T32317] 8021q: VLANs not supported on sit0 [ 1458.359604][T32281] lo speed is unknown, defaulting to 1000 [ 1458.404007][T32281] wg1 speed is unknown, defaulting to 1000 [ 1458.609833][T32327] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6958'. [ 1458.760518][T32330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6959'. [ 1459.143472][T32346] netlink: 'syz.5.6963': attribute type 3 has an invalid length. [ 1459.314177][T32348] tipc: Started in network mode [ 1459.330539][T32348] tipc: Node identity 4, cluster identity 4711 [ 1459.351377][T32348] tipc: Node number set to 4 [ 1459.380096][T32352] veth0: entered promiscuous mode [ 1459.387652][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1459.484804][T32351] veth0: left promiscuous mode [ 1459.626886][T32357] netlink: 'syz.5.6967': attribute type 9 has an invalid length. [ 1459.656500][T32357] netlink: 'syz.5.6967': attribute type 11 has an invalid length. [ 1459.666927][T32359] bridge3: entered allmulticast mode [ 1459.677895][T32357] netlink: 'syz.5.6967': attribute type 12 has an invalid length. [ 1459.685599][T32360] bridge4: entered allmulticast mode [ 1459.703855][T32357] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6967'. [ 1459.745912][T32364] netlink: 'syz.3.6970': attribute type 14 has an invalid length. [ 1459.924841][T32373] tipc: Enabling of bearer rejected, failed to enable media [ 1460.366070][T32412] netlink: 'syz.4.6984': attribute type 1 has an invalid length. [ 1460.374159][T32411] netlink: 'syz.4.6984': attribute type 1 has an invalid length. [ 1460.395610][T32412] netlink: 'syz.4.6984': attribute type 3 has an invalid length. [ 1460.403485][T32412] __nla_validate_parse: 1 callbacks suppressed [ 1460.403503][T32412] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1460.445686][T32411] netlink: 'syz.4.6984': attribute type 3 has an invalid length. [ 1460.453487][T32411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1460.532886][T32417] netlink: 'syz.0.6985': attribute type 13 has an invalid length. [ 1460.549622][T32420] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6986'. [ 1460.606162][T32420] netlink: 'syz.5.6986': attribute type 25 has an invalid length. [ 1460.882115][T32426] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1460.935196][T32426] pim6reg1: entered promiscuous mode [ 1460.940570][T32426] pim6reg1: entered allmulticast mode [ 1460.999706][T32448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1461.049808][T32448] netlink: 'syz.3.6992': attribute type 1 has an invalid length. [ 1461.182438][T32444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1461.192880][T32444] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1461.300820][T32461] 8021q: VLANs not supported on nlmon0 [ 1461.407422][T32461] 8021q: VLANs not supported on nlmon0 [ 1461.783773][T32485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6995'. [ 1461.797334][T32484] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7001'. [ 1461.830196][T32484] netlink: 'syz.5.7001': attribute type 25 has an invalid length. [ 1465.755627][T32516] tipc: Enabling of bearer rejected, failed to enable media [ 1465.856321][T32522] lo: Caught tx_queue_len zero misconfig [ 1466.256256][T32543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7019'. [ 1466.591643][T32539] netlink: 'syz.2.7014': attribute type 30 has an invalid length. [ 1466.628646][T32539] bond6: option arp_missed_max: invalid value (0) [ 1466.637157][T32539] bond6: option arp_missed_max: allowed values 1 - 255 [ 1466.693168][T32539] bond6 (unregistering): Released all slaves [ 1466.912459][T32574] FAULT_INJECTION: forcing a failure. [ 1466.912459][T32574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.955270][T32574] CPU: 0 UID: 0 PID: 32574 Comm: syz.0.7028 Not tainted syzkaller #0 PREEMPT(full) [ 1466.955302][T32574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1466.955315][T32574] Call Trace: [ 1466.955323][T32574] [ 1466.955333][T32574] dump_stack_lvl+0xe8/0x150 [ 1466.955367][T32574] should_fail_ex+0x414/0x560 [ 1466.955404][T32574] _copy_from_iter+0x1cd/0x1630 [ 1466.955426][T32574] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1466.955460][T32574] ? policy_nodemask+0x27c/0x720 [ 1466.955485][T32574] ? __pfx__copy_from_iter+0x10/0x10 [ 1466.955516][T32574] ? set_page_refcounted+0xa0/0x1e0 [ 1466.955540][T32574] ? page_copy_sane+0x4e/0x280 [ 1466.955564][T32574] copy_page_from_iter+0xdd/0x170 [ 1466.955592][T32574] tun_get_user+0x1d40/0x3dc0 [ 1466.955620][T32574] ? tun_get_user+0x6fc/0x3dc0 [ 1466.955657][T32574] ? aa_file_perm+0x44c/0x1530 [ 1466.955701][T32574] ? __pfx_tun_get_user+0x10/0x10 [ 1466.955730][T32574] ? __lock_acquire+0x6b6/0x2cf0 [ 1466.955754][T32574] ? kstrtoull+0x12f/0x1d0 [ 1466.955794][T32574] ? ref_tracker_alloc+0x318/0x460 [ 1466.955812][T32574] ? get_pid_task+0x20/0x1f0 [ 1466.955840][T32574] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1466.955864][T32574] ? tun_get+0x1c/0x2f0 [ 1466.955890][T32574] ? tun_get+0x1c/0x2f0 [ 1466.955921][T32574] ? tun_get+0x1c/0x2f0 [ 1466.955945][T32574] ? tun_get+0x1c/0x2f0 [ 1466.955975][T32574] tun_chr_write_iter+0x113/0x200 [ 1466.956005][T32574] vfs_write+0x5c9/0xb30 [ 1466.956032][T32574] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1466.956059][T32574] ? __pfx_vfs_write+0x10/0x10 [ 1466.956092][T32574] ? __fget_files+0x2a/0x420 [ 1466.956126][T32574] ksys_write+0x145/0x250 [ 1466.956151][T32574] ? __pfx_ksys_write+0x10/0x10 [ 1466.956183][T32574] do_syscall_64+0xec/0xf80 [ 1466.956208][T32574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.956234][T32574] ? trace_irq_disable+0x37/0x100 [ 1466.956260][T32574] ? clear_bhb_loop+0x60/0xb0 [ 1466.956286][T32574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.956306][T32574] RIP: 0033:0x7f364078e1ff [ 1466.956326][T32574] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1466.956343][T32574] RSP: 002b:00007f3641656000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1466.956366][T32574] RAX: ffffffffffffffda RBX: 00007f36409e5fa0 RCX: 00007f364078e1ff [ 1466.956381][T32574] RDX: 000000000000004e RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1466.956395][T32574] RBP: 00007f3641656090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.956407][T32574] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 1466.956419][T32574] R13: 00007f36409e6038 R14: 00007f36409e5fa0 R15: 00007fffad685df8 [ 1466.956452][T32574] [ 1467.613087][T32592] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7034'. [ 1467.636575][T32589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1467.667460][T32593] veth0: entered promiscuous mode [ 1467.677637][T32590] veth0: left promiscuous mode [ 1467.820854][T32596] syzkaller0: entered promiscuous mode [ 1467.840817][T32596] syzkaller0: entered allmulticast mode [ 1467.964444][T32609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7039'. [ 1471.227091][T32643] netlink: 'syz.4.7047': attribute type 39 has an invalid length. [ 1471.363703][T32650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7049'. [ 1471.727266][T32663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7055'. [ 1471.885644][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7056'. [ 1471.994376][ T979] IPVS: starting estimator thread 0... [ 1472.095769][T32676] IPVS: using max 24 ests per chain, 57600 per kthread [ 1472.108225][T32670] bond_slave_0: entered promiscuous mode [ 1472.114395][T32670] bond_slave_1: entered promiscuous mode [ 1472.155472][T32670] macvtap1: entered promiscuous mode [ 1472.172253][T32670] bond0: entered promiscuous mode [ 1472.191324][T32670] macvtap1: entered allmulticast mode [ 1472.205383][T32670] bond0: entered allmulticast mode [ 1472.223034][T32670] bond_slave_0: entered allmulticast mode [ 1472.244821][T32670] bond_slave_1: entered allmulticast mode [ 1472.260515][T32670] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1472.278912][T32673] bond0: left allmulticast mode [ 1472.299504][T32673] bond_slave_0: left allmulticast mode [ 1472.322103][T32673] bond_slave_1: left allmulticast mode [ 1472.339753][T32673] bond0: left promiscuous mode [ 1472.353423][T32673] bond_slave_0: left promiscuous mode [ 1472.359358][T32673] bond_slave_1: left promiscuous mode [ 1472.419142][T32647] lo speed is unknown, defaulting to 1000 [ 1472.451517][T32647] wg1 speed is unknown, defaulting to 1000 [ 1472.871323][T32690] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7059'. [ 1473.127102][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1473.154694][T32659] lo speed is unknown, defaulting to 1000 [ 1473.166012][T32700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1473.227282][T32700] geneve2: entered promiscuous mode [ 1473.232534][T32700] geneve2: entered allmulticast mode [ 1473.243579][T32659] wg1 speed is unknown, defaulting to 1000 [ 1473.254043][T32668] siw: device registration error -23 [ 1473.354268][T32702] netlink: 'syz.2.7064': attribute type 1 has an invalid length. [ 1473.368151][T32702] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1473.379895][T32702] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1473.391470][T32702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7064'. [ 1473.653896][T32721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1473.751827][T32725] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1474.000161][T32725] vlan2: entered promiscuous mode [ 1474.012677][T32725] vlan2: entered allmulticast mode [ 1474.366541][T32738] netlink: 'syz.5.7075': attribute type 1 has an invalid length. [ 1474.454121][T32738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1474.513670][T32740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1474.521359][T32740] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1474.533394][T32740] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1474.584757][T32661] lo speed is unknown, defaulting to 1000 [ 1474.593025][T32661] wg1 speed is unknown, defaulting to 1000 [ 1474.686922][T32747] FAULT_INJECTION: forcing a failure. [ 1474.686922][T32747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.766902][T32747] CPU: 1 UID: 0 PID: 32747 Comm: syz.5.7076 Not tainted syzkaller #0 PREEMPT(full) [ 1474.766934][T32747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.766947][T32747] Call Trace: [ 1474.766957][T32747] [ 1474.766966][T32747] dump_stack_lvl+0xe8/0x150 [ 1474.766999][T32747] should_fail_ex+0x414/0x560 [ 1474.767038][T32747] _copy_to_user+0x31/0xb0 [ 1474.767067][T32747] simple_read_from_buffer+0xe1/0x170 [ 1474.767098][T32747] proc_fail_nth_read+0x1b3/0x220 [ 1474.767125][T32747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1474.767151][T32747] ? rw_verify_area+0x2a6/0x4d0 [ 1474.767180][T32747] ? tun_chr_write_iter+0x18a/0x200 [ 1474.767204][T32747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1474.767228][T32747] vfs_read+0x200/0xa30 [ 1474.767247][T32747] ? fdget_pos+0x247/0x320 [ 1474.767278][T32747] ? __pfx___mutex_lock+0x10/0x10 [ 1474.767304][T32747] ? __pfx_vfs_read+0x10/0x10 [ 1474.767327][T32747] ? __fget_files+0x2a/0x420 [ 1474.767358][T32747] ? __fget_files+0x3a0/0x420 [ 1474.767382][T32747] ? __fget_files+0x2a/0x420 [ 1474.767417][T32747] ksys_read+0x145/0x250 [ 1474.767441][T32747] ? __pfx_ksys_read+0x10/0x10 [ 1474.767474][T32747] do_syscall_64+0xec/0xf80 [ 1474.767498][T32747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.767518][T32747] ? trace_irq_disable+0x37/0x100 [ 1474.767551][T32747] ? clear_bhb_loop+0x60/0xb0 [ 1474.767583][T32747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.767603][T32747] RIP: 0033:0x7f7c3e18e15c [ 1474.767623][T32747] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1474.767641][T32747] RSP: 002b:00007f7c3f06e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1474.767665][T32747] RAX: ffffffffffffffda RBX: 00007f7c3e3e5fa0 RCX: 00007f7c3e18e15c [ 1474.767680][T32747] RDX: 000000000000000f RSI: 00007f7c3f06e0a0 RDI: 0000000000000003 [ 1474.767694][T32747] RBP: 00007f7c3f06e090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.767707][T32747] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 1474.767720][T32747] R13: 00007f7c3e3e6038 R14: 00007f7c3e3e5fa0 R15: 00007fff1fb0d988 [ 1474.767755][T32747] [ 1475.025490][T32749] netlink: 'syz.3.7078': attribute type 25 has an invalid length. [ 1475.334722][T32753] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004 [ 1475.396973][T32753] netlink: 'syz.5.7079': attribute type 21 has an invalid length. [ 1476.550026][ T311] netlink: 'syz.3.7085': attribute type 13 has an invalid length. [ 1476.662875][ T311] netlink: 'syz.3.7085': attribute type 17 has an invalid length. [ 1477.316612][ T328] __nla_validate_parse: 4 callbacks suppressed [ 1477.316635][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7088'. [ 1477.663218][T32757] lo speed is unknown, defaulting to 1000 [ 1477.677171][T32757] wg1 speed is unknown, defaulting to 1000 [ 1477.691683][ T328] siw: device registration error -23 [ 1477.940692][ T343] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1477.970378][ T342] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7094'. [ 1477.981424][ T343] netlink: 'syz.3.7093': attribute type 25 has an invalid length. [ 1478.138000][ T349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7095'. [ 1478.451455][ T361] hsr0: entered promiscuous mode [ 1478.515216][ T361] hsr0: entered allmulticast mode [ 1478.547385][ T361] hsr_slave_0: entered allmulticast mode [ 1478.553109][ T361] hsr_slave_1: entered allmulticast mode [ 1478.842626][ T370] 8021q: VLANs not supported on sit0 [ 1478.996725][ T377] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1479.118530][ T383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7104'. [ 1479.293651][ T383] siw: device registration error -23 [ 1479.340377][ T389] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7106'. [ 1479.468446][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1479.505749][ T395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1479.679211][ T401] netlink: 'syz.0.7110': attribute type 1 has an invalid length. [ 1479.904397][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1479.957630][ T410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1479.989868][ T403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1480.034710][ T403] bond3: (slave bond4): making interface the new active one [ 1480.057475][ T403] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1480.139886][ T401] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1480.300749][ T416] vlan2: entered promiscuous mode [ 1480.316192][ T416] bond3: entered promiscuous mode [ 1480.326927][ T416] bond4: entered promiscuous mode [ 1480.345272][ T416] bond3: (slave vlan2): Opening slave failed [ 1480.379444][ T410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1480.434023][ T427] x_tables: duplicate underflow at hook 3 [ 1480.858897][ T437] siw: device registration error -23 [ 1481.087017][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.094647][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.235593][ T443] netlink: 'syz.0.7120': attribute type 39 has an invalid length. [ 1481.348491][ T444] vlan2: entered promiscuous mode [ 1481.354750][ T444] bond0: entered promiscuous mode [ 1481.360791][ T444] vlan2: entered allmulticast mode [ 1481.367183][ T444] bond0: entered allmulticast mode [ 1481.376893][ T448] 8021q: VLANs not supported on sit0 [ 1482.523005][ T460] lo speed is unknown, defaulting to 1000 [ 1482.536251][ T474] __nla_validate_parse: 3 callbacks suppressed [ 1482.536274][ T474] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7129'. [ 1482.577287][ T460] wg1 speed is unknown, defaulting to 1000 [ 1483.013853][ T484] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1483.057522][ T467] lo speed is unknown, defaulting to 1000 [ 1483.085814][ T467] wg1 speed is unknown, defaulting to 1000 [ 1483.740194][ T495] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1483.785167][ T495] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1483.842018][ T495] netlink: 'syz.4.7135': attribute type 1 has an invalid length. [ 1483.930344][ T495] bond7: entered promiscuous mode [ 1483.936158][ T495] bond7: entered allmulticast mode [ 1483.941803][ T495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1483.983200][ T499] erspan1: entered allmulticast mode [ 1484.055796][ T499] bond7: (slave erspan1): making interface the new active one [ 1484.076285][ T499] erspan1: entered promiscuous mode [ 1484.111959][ T499] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 1484.121062][ T504] 8021q: VLANs not supported on sit0 [ 1484.548923][ T532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7146'. [ 1484.953413][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1485.336441][ T555] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7153'. [ 1485.358996][ T557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7154'. [ 1485.698073][ T572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7159'. [ 1485.714711][ T574] lo: MTU too low for tipc bearer [ 1485.735737][ T574] tipc: Enabling of bearer rejected, failed to enable media [ 1485.784861][ T577] SET target dimension over the limit! [ 1485.974860][ T586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7164'. [ 1485.996750][ T586] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7164'. [ 1486.014498][ T586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7164'. [ 1486.136805][ T589] netlink: 'syz.2.7165': attribute type 11 has an invalid length. [ 1486.321810][ T593] syzkaller0: entered promiscuous mode [ 1486.341717][ T593] syzkaller0: entered allmulticast mode [ 1486.412560][ T595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7168'. [ 1486.492734][ T593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1486.819081][ T559] lo speed is unknown, defaulting to 1000 [ 1486.829247][ T559] wg1 speed is unknown, defaulting to 1000 [ 1486.871777][ T619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.622006][ T643] __nla_validate_parse: 5 callbacks suppressed [ 1487.622029][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7180'. [ 1487.912153][ T653] sctp: [Deprecated]: syz.4.7182 (pid 653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.912153][ T653] Use struct sctp_sack_info instead [ 1487.949556][ T653] netlink: 'syz.4.7182': attribute type 3 has an invalid length. [ 1487.987907][ T653] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1488.700760][ T677] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1488.710648][ T676] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7188'. [ 1488.722086][ T629] lo speed is unknown, defaulting to 1000 [ 1488.746159][ T629] wg1 speed is unknown, defaulting to 1000 [ 1488.754452][ T677] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1488.769428][ T650] siw: device registration error -23 [ 1488.835737][ T677] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7186'. [ 1488.972335][ T685] IPv6: sit1: Disabled Multicast RS [ 1489.017189][ T687] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1489.035906][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7190'. [ 1489.181795][ T688] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7189'. [ 1489.215438][ T688] netlink: 175 bytes leftover after parsing attributes in process `syz.4.7189'. [ 1490.336858][ T730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7199'. [ 1490.418019][ T730] netlink: 'syz.2.7199': attribute type 25 has an invalid length. [ 1490.527076][ T738] vlan3: entered promiscuous mode [ 1490.951392][ T765] netlink: 'syz.2.7207': attribute type 28 has an invalid length. [ 1491.627840][ T796] netlink: 'syz.3.7216': attribute type 11 has an invalid length. [ 1491.636116][ T796] netlink: 'syz.3.7216': attribute type 11 has an invalid length. [ 1491.739242][ T801] 8021q: VLANs not supported on ip_vti0 [ 1492.174467][ T819] vlan3: entered promiscuous mode [ 1492.186824][ T819] syz_tun: entered promiscuous mode [ 1492.286242][ T790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.482258][ T828] 8021q: VLANs not supported on sit0 [ 1492.550557][ T831] netlink: 'syz.3.7229': attribute type 10 has an invalid length. [ 1492.593044][ T834] bond2: entered promiscuous mode [ 1492.603142][ T839] netlink: 'syz.5.7231': attribute type 1 has an invalid length. [ 1492.611562][ T834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1492.801260][ T834] bond2 (unregistering): Released all slaves [ 1493.033641][ T765] lo speed is unknown, defaulting to 1000 [ 1493.047005][ T765] wg1 speed is unknown, defaulting to 1000 [ 1493.477454][ T858] openvswitch: netlink: Key type 128 is out of range max 32 [ 1493.602301][ T802] lo speed is unknown, defaulting to 1000 [ 1493.646146][ T802] wg1 speed is unknown, defaulting to 1000 [ 1493.857895][ T869] __nla_validate_parse: 8 callbacks suppressed [ 1493.857916][ T869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7243'. [ 1494.217530][ T882] tls_set_device_offload_rx: netdev not found [ 1494.328804][ T883] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.7246'. [ 1494.435420][ T880] netlink: set zone limit has 4 unknown bytes [ 1494.646132][ T900] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1495.039714][ T918] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7256'. [ 1495.092645][ T932] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1495.463159][ T938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7257'. [ 1495.989509][ T968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7263'. [ 1496.043538][ T971] netlink: 'syz.4.7263': attribute type 1 has an invalid length. [ 1496.054549][ T971] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7263'. [ 1497.006547][ T1009] netlink: 'syz.5.7273': attribute type 2 has an invalid length. [ 1497.026064][ T1009] netlink: 'syz.5.7273': attribute type 2 has an invalid length. [ 1497.039442][ T1009] netlink: 'syz.5.7273': attribute type 1 has an invalid length. [ 1497.055889][ T1009] netlink: 'syz.5.7273': attribute type 1 has an invalid length. [ 1497.069235][ T1009] netlink: 'syz.5.7273': attribute type 2 has an invalid length. [ 1497.083940][ T1009] netlink: 'syz.5.7273': attribute type 1 has an invalid length. [ 1497.575235][ T1012] bond3: entered promiscuous mode [ 1497.580524][ T1012] bond3: entered allmulticast mode [ 1497.589349][ T1012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1497.848782][ T1048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7280'. [ 1498.021259][ T970] lo speed is unknown, defaulting to 1000 [ 1498.079243][ T970] wg1 speed is unknown, defaulting to 1000 [ 1498.472590][ T1078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1499.060861][ T1094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1499.076891][ T1094] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1499.164971][ T1096] xt_ecn: cannot match TCP bits for non-tcp packets [ 1499.272203][ T1104] syzkaller0: entered promiscuous mode [ 1499.283976][ T1104] syzkaller0: entered allmulticast mode [ 1499.341996][ T1103] tipc: Enabled bearer , priority 0 [ 1499.375432][ T1102] tipc: Resetting bearer [ 1499.414751][ T1102] tipc: Disabling bearer [ 1499.439192][ T1047] lo speed is unknown, defaulting to 1000 [ 1499.451517][ T1047] wg1 speed is unknown, defaulting to 1000 [ 1499.458138][ T977] lo speed is unknown, defaulting to 1000 [ 1499.521245][ T977] wg1 speed is unknown, defaulting to 1000 [ 1499.964868][ T1127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7293'. [ 1502.029974][ T1143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7297'. [ 1502.109382][ T1146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1502.124592][ T1146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1502.338231][ T1148] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1502.357763][ T1148] team0: Port device batadv1 added [ 1502.370587][ T1146] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1502.380967][ T1146] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1502.624829][ T1157] netlink: 'syz.3.7302': attribute type 16 has an invalid length. [ 1502.633109][ T1157] netlink: 'syz.3.7302': attribute type 17 has an invalid length. [ 1502.662309][ T1159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7303'. [ 1502.754190][ T1159] vlan3: entered promiscuous mode [ 1502.951852][ T1165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1503.592961][ T1184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7310'. [ 1503.909039][ T1200] vlan0: entered promiscuous mode [ 1504.095135][ T1213] __nla_validate_parse: 2 callbacks suppressed [ 1504.095156][ T1213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1504.147508][ T1211] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1505.412968][ T1179] lo speed is unknown, defaulting to 1000 [ 1505.456462][ T1179] wg1 speed is unknown, defaulting to 1000 [ 1505.560350][ T1250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7324'. [ 1505.609913][ T1250] vlan3: entered allmulticast mode [ 1505.625174][ T1250] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1506.007002][ T1255] 8021q: VLANs not supported on sit0 [ 1506.012621][ T1212] lo speed is unknown, defaulting to 1000 [ 1506.029502][ T1212] wg1 speed is unknown, defaulting to 1000 [ 1506.430695][ T1268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7326'. [ 1506.609120][ T1229] lo speed is unknown, defaulting to 1000 [ 1506.624653][ T1229] wg1 speed is unknown, defaulting to 1000 [ 1506.748251][ T1272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7328'. [ 1506.854399][ T1274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7329'. [ 1506.878875][ T1276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7330'. [ 1506.923857][ T1272] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.7328'. [ 1506.950395][ T1272] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1507.016938][ T1276] vlan3: entered promiscuous mode [ 1507.138354][ T1279] syzkaller0: entered promiscuous mode [ 1507.143901][ T1279] syzkaller0: entered allmulticast mode [ 1507.273691][ T1279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7331'. [ 1507.325394][ T1284] netlink: 'syz.2.7332': attribute type 13 has an invalid length. [ 1507.956408][ T1284] batman_adv: batadv0: Interface deactivated: geneve2 [ 1508.141500][ T1301] ip6gretap2: entered allmulticast mode [ 1508.149937][T25893] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.160763][T25893] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.170082][T25893] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.179559][T25893] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.228064][T25893] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.275630][T25893] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.333745][T25893] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1508.363445][T25893] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.604730][ T1354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1542.703825][ T1354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1542.943145][ T1354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1543.603609][ T1354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1543.964267][ T1354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1545.333034][ T1357] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1545.652169][ T1357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1545.893712][ T1357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1546.401486][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1546.544026][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1546.582288][ T5148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1547.033509][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1547.122766][ T5148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1547.722441][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1548.483014][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1549.154636][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1549.833752][ T5841] Bluetooth: hci7: command tx timeout [ 1551.903441][ T5148] Bluetooth: hci7: command tx timeout [ 1552.234394][ T5148] Bluetooth: hci4: command tx timeout [ 1554.022443][ T5148] Bluetooth: hci7: command tx timeout [ 1554.314406][ T5148] Bluetooth: hci4: command tx timeout [ 1556.094838][ T5148] Bluetooth: hci7: command tx timeout [ 1556.382941][ T5148] Bluetooth: hci4: command tx timeout [ 1558.504769][ T5148] Bluetooth: hci4: command tx timeout [ 1574.553514][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1574.742446][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1574.844290][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.112496][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.392576][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1578.391831][ T5841] Bluetooth: hci2: command tx timeout [ 1580.483498][ T5841] Bluetooth: hci2: command tx timeout [ 1582.552243][ T5841] Bluetooth: hci2: command tx timeout [ 1584.622611][ T5841] Bluetooth: hci2: command tx timeout [ 1598.153086][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1598.314108][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1598.953679][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1599.623085][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1599.993916][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1603.032350][ T5148] Bluetooth: hci5: command tx timeout [ 1604.092320][ T1322] lo speed is unknown, defaulting to 1000 [ 1605.122715][ T5148] Bluetooth: hci5: command tx timeout [ 1607.193384][ T1357] Bluetooth: hci5: command tx timeout [ 1607.354343][ T1357] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1607.512677][ T1357] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1607.834402][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1608.044395][ T1357] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1608.482410][ T1357] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1609.132578][ T1357] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1609.273497][ T1357] Bluetooth: hci5: command tx timeout [ 1610.843742][ T1322] wg1 speed is unknown, defaulting to 1000 [ 1611.312634][ T5148] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1611.392336][ T5148] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1612.391832][ T5148] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1612.552317][ T5148] Bluetooth: hci8: command tx timeout [ 1613.383456][ T5148] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1613.921375][ T5148] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1614.633643][ T1357] Bluetooth: hci8: command tx timeout [ 1616.723936][ T5148] Bluetooth: hci8: command tx timeout [ 1617.182494][ T5148] Bluetooth: hci9: command tx timeout [ 1618.802271][ T5148] Bluetooth: hci8: command tx timeout [ 1619.301903][ T5148] Bluetooth: hci9: command tx timeout [ 1621.352855][ T5148] Bluetooth: hci9: command tx timeout [ 1623.432736][ T1357] Bluetooth: hci9: command tx timeout [ 1623.682034][ T1357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1623.863691][ T1357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1624.201204][ T1357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1624.573965][ T1357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1624.842849][ T1357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1628.162916][ T1357] Bluetooth: hci0: command tx timeout [ 1630.231694][ T1357] Bluetooth: hci0: command tx timeout [ 1632.333205][ T1357] Bluetooth: hci0: command tx timeout [ 1634.403071][ T1357] Bluetooth: hci0: command tx timeout [ 1634.501856][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1634.883715][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1634.943603][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1635.421376][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1635.924508][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1640.251685][ T5148] Bluetooth: hci10: command tx timeout [ 1642.322768][ T5148] Bluetooth: hci10: command tx timeout [ 1644.393593][ T5148] Bluetooth: hci10: command tx timeout [ 1646.504511][ T5148] Bluetooth: hci10: command tx timeout [ 1668.153893][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1668.372513][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1668.513633][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1669.012400][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1669.283681][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1669.513836][ T1357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1671.341887][ T1357] Bluetooth: hci7: command 0x0406 tx timeout [ 1671.593394][ T5148] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1671.862591][ T5148] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1672.182326][ T5148] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1672.302975][ T5148] Bluetooth: hci1: command tx timeout [ 1672.523097][ T5148] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1673.122768][ T5148] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1674.412515][ T1357] Bluetooth: hci1: command tx timeout [ 1676.512586][ T1357] Bluetooth: hci4: command 0x0406 tx timeout [ 1676.544178][ T1357] Bluetooth: hci1: command tx timeout [ 1676.632098][ T1357] Bluetooth: hci11: command tx timeout [ 1676.772840][ T1357] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1677.331624][ T1357] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1677.462977][ T1357] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1678.191872][ T1357] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1678.643943][ T1357] Bluetooth: hci1: command tx timeout [ 1678.714398][ T1357] Bluetooth: hci11: command tx timeout [ 1679.004692][ T5148] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1680.801259][ T5148] Bluetooth: hci11: command tx timeout [ 1682.304079][ T5148] Bluetooth: hci12: command tx timeout [ 1682.892104][ T5148] Bluetooth: hci11: command tx timeout [ 1684.382350][ T5148] Bluetooth: hci12: command tx timeout [ 1686.491021][ T5148] Bluetooth: hci12: command tx timeout [ 1688.544767][ T5148] Bluetooth: hci12: command tx timeout [ 1690.993140][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1691.172091][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1691.391744][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1691.744698][ T5841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1691.933201][ T5841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1695.122610][ T5841] Bluetooth: hci13: command tx timeout [ 1697.194491][ T5148] Bluetooth: hci13: command tx timeout [ 1697.634353][ T5148] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1697.833821][ T5148] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1698.323217][ T5148] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1699.183264][ T1357] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1699.283000][ T1357] Bluetooth: hci13: command tx timeout [ 1699.524431][ T1357] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1699.981722][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1701.361868][ T5148] Bluetooth: hci13: command tx timeout [ 1701.993789][ T5148] Bluetooth: hci14: command tx timeout [ 1702.062187][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 1704.072096][ T5841] Bluetooth: hci14: command tx timeout [ 1706.143562][ T5841] Bluetooth: hci14: command tx timeout [ 1708.223456][ T5841] Bluetooth: hci14: command tx timeout [ 1724.283194][ T5148] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1724.354052][ T5148] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1724.614693][ T5148] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1725.302302][ T5148] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1725.654340][ T1357] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1727.673649][ T1357] Bluetooth: hci5: command 0x0406 tx timeout [ 1728.553396][ T5148] Bluetooth: hci15: command tx timeout [ 1729.292607][ T1357] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1729.372868][ T1357] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1729.544732][ T1357] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1729.884165][ T1357] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1730.133998][ T1357] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1730.642997][ T5148] Bluetooth: hci15: command tx timeout [ 1730.740990][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1732.701536][ T1357] Bluetooth: hci15: command tx timeout [ 1732.803327][ T1357] Bluetooth: hci8: command 0x0406 tx timeout [ 1733.131594][ T1357] Bluetooth: hci16: command tx timeout [ 1734.254003][ T5148] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1734.701701][ T5148] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1734.800006][ T5148] Bluetooth: hci15: command tx timeout [ 1734.923969][ T8671] bond7 (unregistering): (slave erspan1): Releasing active interface [ 1735.072952][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1735.132078][ T8671] erspan1 (unregistering): left promiscuous mode [ 1735.201342][ T5841] Bluetooth: hci16: command tx timeout [ 1735.614351][ T5841] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1736.122507][ T5148] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1737.284672][ T1357] Bluetooth: hci16: command tx timeout [ 1737.953401][ T1357] Bluetooth: hci9: command 0x0406 tx timeout [ 1739.353270][ T5841] Bluetooth: hci16: command tx timeout [ 1739.952422][ T8671] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 1740.542980][ T5841] Bluetooth: hci17: command tx timeout [ 1742.672403][ T5841] Bluetooth: hci17: command tx timeout [ 1744.851989][ T5841] Bluetooth: hci17: command tx timeout [ 1746.962271][ T5841] Bluetooth: hci17: command tx timeout [ 1750.623675][ T5148] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1750.732382][ T5148] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1751.153205][ T5148] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1751.762871][ T1357] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1752.192781][ T1433] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1753.369981][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 1756.544006][ T5148] Bluetooth: hci18: command tx timeout [ 1758.622320][ T1433] Bluetooth: hci18: command tx timeout [ 1758.703724][ T1433] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1759.103832][ T1433] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1759.601961][ T1433] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1760.201466][ T1433] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1760.621720][ T1433] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1760.721405][ T1433] Bluetooth: hci18: command tx timeout [ 1762.782512][ T5841] Bluetooth: hci18: command tx timeout [ 1763.502362][ T5841] Bluetooth: hci10: command 0x0406 tx timeout [ 1763.761697][ T5841] Bluetooth: hci19: command tx timeout [ 1765.822749][ T5148] Bluetooth: hci19: command tx timeout [ 1767.904418][ T5148] Bluetooth: hci19: command tx timeout [ 1769.762416][ T8671] bond0 (unregistering): Released all slaves [ 1770.022078][ T5148] Bluetooth: hci19: command tx timeout [ 1787.632986][ T5841] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1787.773621][ T5841] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1788.052283][ T8671] bond1 (unregistering): Released all slaves [ 1788.103936][ T5841] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1788.352862][ T31] INFO: task syz-executor:1395 blocked for more than 143 seconds. [ 1788.643346][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1788.852290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1788.893264][ T5841] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1788.983674][ T31] task:syz-executor state:D stack:25368 pid:1395 tgid:1395 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1789.112852][ T31] Call Trace: [ 1789.174608][ T5841] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1789.262951][ T31] [ 1789.502568][ T31] __schedule+0x149b/0x4fd0 [ 1789.694070][ T31] ? __pfx___schedule+0x10/0x10 [ 1790.012764][ T31] ? schedule+0x91/0x360 [ 1790.142576][ T31] schedule+0x165/0x360 [ 1790.272865][ T31] schedule_preempt_disabled+0x13/0x30 [ 1790.482309][ T31] __mutex_lock+0x7e6/0x1350 [ 1790.622534][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1791.151128][ T31] ? add_one_compat_dev+0xf0/0x650 [ 1791.431536][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1791.642626][ T31] ? rdma_dev_init_net+0x22d/0x2f0 [ 1791.782410][ T5148] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1792.004323][ T31] add_one_compat_dev+0xf0/0x650 [ 1792.113794][ T5148] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1792.154375][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1792.194573][ T31] ? down_read+0x274/0x2e0 [ 1792.241679][ T1433] Bluetooth: hci20: command tx timeout [ 1792.311267][ T1433] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1792.414213][ T31] rdma_dev_init_net+0x238/0x2f0 [ 1792.443792][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1792.501586][ T31] ? trace_kmalloc+0x1f/0xb0 [ 1792.701165][ T31] ? __kmalloc_noprof+0x43e/0x800 [ 1792.912816][ T31] ops_init+0x35c/0x5c0 [ 1793.032908][ T1433] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1793.102696][ T31] setup_net+0x110/0x330 [ 1793.224175][ T31] ? __pfx_setup_net+0x10/0x10 [ 1793.302193][ T31] ? preinit_net+0x47d/0x780 [ 1793.403154][ T1433] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1793.522492][ T31] copy_net_ns+0x3e3/0x570 [ 1793.713688][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1793.744140][ T31] ? security_capable+0x7e/0x2e0 [ 1793.983210][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1794.171887][ T31] ksys_unshare+0x4c8/0x8c0 [ 1794.251884][ T1433] Bluetooth: hci1: command 0x0406 tx timeout [ 1794.312452][ T5841] Bluetooth: hci20: command tx timeout [ 1794.491483][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1794.761292][ T31] __x64_sys_unshare+0x38/0x50 [ 1795.082941][ T31] do_syscall_64+0xec/0xf80 [ 1795.304028][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.484307][ T31] ? trace_irq_disable+0x37/0x100 [ 1795.691936][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1795.891253][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.061632][ T31] RIP: 0033:0x7f5a31390f47 [ 1796.243246][ T1354] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1796.394533][ T1354] Bluetooth: hci20: command tx timeout [ 1796.400049][ T31] RSP: 002b:00007fff4f520e58 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1796.503433][ T1354] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1796.681531][ T31] RAX: ffffffffffffffda RBX: 00007f5a315e5f40 RCX: 00007f5a31390f47 [ 1796.722188][ T1354] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1796.924461][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1797.253012][ T31] RBP: 00007f5a315e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1797.422642][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1797.543178][ T1357] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1797.594554][ T31] R13: 0000000000000003 R14: 00007fff4f521128 R15: 0000000000000000 [ 1797.943339][ T1446] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1798.333085][ T31]