last executing test programs: 7m43.692014041s ago: executing program 4 (id=1508): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a133481423729e722bbf5f6ac7186070900010073797a31000000030073797a320100000014000000110001904294ec4b961ef57859cbc6ac46a8b78c3e3c6e000000bf14eda1db2291b69affd49dc46bf5c9bd60233752b1b63f37b60bbeaa82085432"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x91}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x9, 0x1, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x4, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x69}]}, &(0x7f0000001880)='syzkaller\x00', 0x3, 0x40, &(0x7f00000018c0)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000ef784ace7cf00000a200000911152000000000095000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r5}, &(0x7f0000000280)=0x8) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000100)={0x1, 0x101}) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 7m43.307105511s ago: executing program 4 (id=1514): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 7m43.174857397s ago: executing program 4 (id=1516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0xc, 0x1005, &(0x7f0000002500)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff4d}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x2c, 0x12, 0x1, 0x100000, 0x25dfdbfe, "", [@nested={0x1c, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x100}]}]}, 0x2c}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0400ffff7d2328d4fb83b50a31397b50aeab83cd9beb5c1bb29cfafd88db9116df40b774744dcfcd409a5b882c1d724a7823f9fd1bf07e53d6b328ff18a162af9c22a0d15a398f81e1376650df213d995c7f1e7516ecb842a4912d3958ff59467bca6cf6202391684114f185eef7398a79169f5df8a2345a0ab4f9e7ac3b506114639b5b595afcd161db14762ee0ea4e5976858aedc797913f395828172a2aaf7ceb93a6caec2a00417765518982b2f69dea16311fc5e53190b183c664fb65bf6fe971c1c841f46479a22ea9263d3d453f145af66293d6577ff9", @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2100000000fc00000000000000000000000000000109000000200002000a00000000000000ff01000000000000000000000000000100000000"], 0x6c}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x17) sendmmsg(r11, &(0x7f0000000240)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="34610f1ed1040acba96c868684e9b6ca84cce1614d4e1f5cf8e771e0577e4ac44e7020b344894e8b4f02459cdf5b3f6c87439577b789661f926447897ba0ea13fe0fb0ccc913d889ea017c733ad0b62185df9960eb3dad9cfd92e7f6", 0x5c}], 0x1}}, {{&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="bcc61e513f0afe7baec23f771476f351d7498bf331e1a63cb5d05b4a7b8db6882f639c07a480c236d7d6e3d54d0577c3ac1f7b776e932064eaf99a16980201e40e284c4f69550e74ad23a285c448a18ae3e59d215dfd1fd42929fe449cabbdfebbfcbe4da31e6c7a74498b5eee8f3cdbf08b3d6b45765bf4ac15946104404da5e69f53cf44ee75875ffd4c4fde69d341ce09a61e51fe97addcf112fb275ab186ac973d7fab361b1ea7f96278f22a0ba6cf8bd692ee52f96d1eeea51f711ae599f9", 0xc1}], 0x1}}], 0x2, 0x40000) 7m41.412205246s ago: executing program 4 (id=1532): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000050040000000000066c19ca094be010049e8f360177baf304837f195"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9f6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0x20000000002) write$cgroup_int(r4, &(0x7f0000000040)=0x8, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x846, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0), 0x0, 0x801, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) 7m40.906390963s ago: executing program 4 (id=1539): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x5}]}}]}, 0xa4}}, 0x0) sendto$unix(r5, &(0x7f0000000200)="7fe85d330473f423cdd0fe322c8bebb5f499df1f9b16b1", 0x17, 0x4000000, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0800030008000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYBLOB="85343246072d659d8c44bc467efb009c278d08ef977b63c668025215c1ca87650689001d7969f228b0fa5c5b72e7bf37b5c49b0d35810bbbff7fb221ac9b6ffb731bb7979bd35d6b6f1670d2b01834d5dbbdc8d59c475cdc9280c61505f15690ca4af447aa3ffd9df40d5d3a1fdb81243aa7bbc0f0582ff253118b6199fa3d8d72284460b7d623e0e5521fb53b27098daed58c1b2937c264eaafe483824433266729f0ac48384a77d4875b905e76a4fe370207f2ca30819089c2b22034bfbf2c443ed0a2e9c99f23a3927fe41f871aaa7ea408ebbd403612c2fb14c460be906114c19cc63d4307be374856c3f8cb", @ANYRES32, @ANYBLOB="0000000040090056f9e2614ea6c0000024102b00a4b8c601020015f4a2d8a921d6b27e59de450ff65d0002700000"], 0x48) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r11, r12, 0x5}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000300), &(0x7f0000000700)=r10}, 0x20) (async, rerun: 32) sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000090000000100000005000000005f00006161"], 0x0, 0x37}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r14}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r13}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) (async) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) 7m40.658561579s ago: executing program 4 (id=1543): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000227ec0cdf92982053ed55ba649000000000c0000000c0088000200000000000b00"/51, @ANYRES16=0x0, @ANYRESOCT, @ANYRES16], 0x0, 0x26}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03e8ffffff0000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000191000900420073797a3100000000090001007300100000000000080005400000001c0800034000000009140000001000010000000000000000000084256ef7b77b91bddb683390dd9b82000a97ead58ea4773bfb1ead6eb6117700a1c083c788729ea91a036fc26b81bd5032561f5f0252430e4b6658a3541f4c98f3e72a6de9b2d19a019af3d611abd31866573e66e0a2"], 0x8c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001056a833e29b5c0d9936e27e00000000", @ANYRES8=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x100000, 0x0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000180)={r10, r10, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) 7m25.338852493s ago: executing program 32 (id=1543): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000227ec0cdf92982053ed55ba649000000000c0000000c0088000200000000000b00"/51, @ANYRES16=0x0, @ANYRESOCT, @ANYRES16], 0x0, 0x26}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03e8ffffff0000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000191000900420073797a3100000000090001007300100000000000080005400000001c0800034000000009140000001000010000000000000000000084256ef7b77b91bddb683390dd9b82000a97ead58ea4773bfb1ead6eb6117700a1c083c788729ea91a036fc26b81bd5032561f5f0252430e4b6658a3541f4c98f3e72a6de9b2d19a019af3d611abd31866573e66e0a2"], 0x8c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x2b, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001056a833e29b5c0d9936e27e00000000", @ANYRES8=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x100000, 0x0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000180)={r10, r10, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) 2m12.470351239s ago: executing program 5 (id=4311): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="b301916c88b830ac1d513d80506c351315b67509c34a558231904eb8a11147fe7558f28ca0899c1a5890b62ee3aa9a0422ba2a2f4ec31322fc8591ad4e877a21182a3c4bab1850e1dcbaacae38d6d322a52d56af07a854ff9f844a84f126cb9c29a9a0978ce84f464911cc7c97d7", 0x6e}, {&(0x7f00000007c0)="36a0840825fc8b8f4f7258145d450741b0e950e36c29b1c990ae6ad8ab57268928110f23887b986409c8178a48489b7a08f23eeb72033d58d2ff81ac59e41c6a88af8b65d734bf13b83dbce37757f39cb1bc8780e8817c7d4a16cd7cb212fe82d883aafb9501bc7dcab0206eeb7adcfdd6576699baafaf6227a42a940988b680b7a3e5cddbc34e00f4e91324bbeb6ff91233570c29cb513d434e5fe1de30bc9f5ccc0f6fe01bb23e91a892698bd22d373563d6bd2da010310a98d90a184793f6748b8b4117c732a01bf65b24801395f054a6732170fdd07bbee2b5e468370e3c50a63e8381e4b3710da8f9a4a9c7d4b79634097cf430792f3f2408d774b2012c3382fd601ced639d3b778d52a802328e785eae8fa77367f3ec224d331762832041ae1480b37bd144650c97abf4e8292f6afbfd084127962d6135c6afb2709ce58005c2aeec979131931d60e2c57b96c4ec6bbfa441a96cb38139530120346b082380d345e96724de6d46941ae8464ea450b87e14c9d5e20bcda9f8f6ec670965e2917e071392ceb4a4f795d4824aeb318e59856d4ae102f434b7eeaf89e02c9561b34de136b8b647215dbd296d41faef9b901f4cad84b1c9185a1d934bec6e4563b6cc4b96d944fa601172f0e1a02343ea0f6c530a584f6073f3ac1d67c60b84a51bf8cb873ca9d5f0605b5184d6eb10cebc2ef6b32e0205ae8df966dabcdd8b2d9ff853d176620a7ef8c61a1e72285a1fc02387fd3646f454695b38ecad25edb9a7ac72a3ca6fed849a71d4ae387aad5c8d5a2cd095588cf113446e7e178e56861a02a55d40c71b77e526ec7a4f9a46861891aafd32e1a3fe10b437bbbc35cd647074e5a1cc38bc25da4eb04628761cf17464406e9b30b48cd71e40710fcf77b560db078f613aebd3e534403e87e21158207df00b51eba1b326a3eeb99eb574e019bf5ca209f4ba31f19a65067c7dde52e8333663b336015eefda6f3c6bc3d272468bb54e69027b7a39c8080e27ea459cc94f87fb463b6c9e8ba57c799820dae6d0dc47165858434987176808d6c01eb8fd272296d879ed244f413982407548dcdd2b0f12666c94ad40f7853907f412ee035d25f4e2a76da25703de62b2689ce5ab023b4f30d662ebaf8edc4b829d79932dc81d6f73462dcf397fd90cbd75ca539a10db1184066635ebb7ed3552ce248b8f96f6d6d670073f80bc9a9f7c7bcec98478ad9860d01c1b8b625d39ee4aae2b13001c5809bf25df720e6512c948b7ca06f418bb40e095c0238212289a3f3972b3691c2f268e9b209a95e6b1da6d62171ace69889d827fbe1308696a4f63a1e0a0be00050ebc76f485f2bb9a7284a05f252d1c9d8791a447f209c3b58a10148bf15a558a3074d025722fb570178dccd71bd1631ac9fae063345f28c764c9ae346c3d2729194c8dfa3836a048356b21d106df5edb4d209b4ae179ae7a7c2f11d8fc29d893c32f85efcad44372a84c57c9ba4ff4fe39dd087e1547e47f85f653ab52ff0c939e904a5598ccf5a2570643958bf850591849368d2a8b03b0f7cd43868291c3091489b4f42e5291aa13ddfbc484e3686d38e1eeff059bdb0dc7d69a8fec0b76e4df55248676c44e0a5edb0455d885a3e6c8f644bf5047bc9e8d77a4442432c5ad14ccd1a90591012ab7f1c5537559c65df6420681478710354c21f37aa9c5cc9c6a40808f734bc426a01cc81254855fcc3ecbe250423639e3108e7614c3659cb8cd3b1d7b65327bd38502c57566f9eab6c51c48b55ab36e3d5228e5ed540cddb4056bae07072319c77cd9aac8f3c8e0301ed37e7f959d3d1dc614be0a043c4211114e7e8a2551b51a3e4fa25764b17842963fa9bfb8d3e26b5cede92118424b3a3aa57c9423929cd0ee56e0d8dcab54db74dda8a48405da8cbba0e934d62199bc5d16b8c3de515f72e276020193768d35ed70ec62cb07d8b6bd4766e21d3c39b4de4bea9de546f61e9eadfbbfe2be82f4fcf9d051ee5d0f39f07a05c0a72713dc5a6aead6f244aa6e788fd6c1da9ab670a51d75944cc79f61ab0e6d99c003033051d8ee9a3a79bf863c44f8b136215f2db5b0bec3ca29d9e11313f02570baa209dfa9a592defb1e8b042911ba1b6136451b04ea270ceae4f89da6ed76d081459ef538bb80e0df37aad583b5834a46b3b0", 0x605}], 0x2, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xa7, @any, 0x7f, 0x2}, 0xe) unshare(0x42000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(r5, &(0x7f0000001300), 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xac}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m10.343284446s ago: executing program 1 (id=4329): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000580)=0xcdca, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="14002600230700000000fcdbdf251ff2bc624cf9259d3e6dd3e689422b56835d6a4d5c44fa502364b2d5db4faa2c705f41b47a172a0d0f923621a4e4e6b0039f8df8e6bc0e8d47cdb530ebf77c2a0cb4e19d4a4d4aa8ccddb327defeec3da2e4c9b7af44e3dffe396b2a054cae85571a000043c167fe7425100b5cf1cc52d7d0dfc120014dc39e962cef0f19281cf5aee74b34c8ee3041c0766ca9ac9e1b971d218510a10f490b7f475ac3b1a089a884024be589beeb159c9c72c56706ccfc8ef0e6ab498395ab1a502af564151d30c9e7bcfeca9d682ed34703b5f30bf922d76441a9e0e3721197b6a41a66e2042ef4b5f07fe80fef70100810a4a1a69453010cab3d2437980f3eec7c599f8d0e8f74195c63992b304f1a9e63bcad69cea0cdf9ce47e23dff2bec36748ec753ec94ba79807093f53412b45cd2642694a839b801adda35eb864784c771768a64834dbd6335dd1d034271ebcc7b27677ac581d19b3e411de565"], 0x14}], 0x1000000000000054, 0x0, 0x0, 0x24008015}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000180)={r8, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x7, 0x7, 0x4, 0x7fffffff, 0x0, r8}, 0x20) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB="6509812622b7a280af1d468598170cc5da353d831e4e4b0046cb3ca2e5ce1b66014ec54e11ad6b757e31c35d78cca530d63308c5380d7ae6312badc48097a950c47565f4ac1349d17186bd8b71225440995e1a87fc10629c81c1523efe9a8f40a4fd458686d28d47ea314518290e1a7d75bdfcb5b9c2c2c8dd731416c4e0a66596e7a4d872c04fe770c0c63d34fcb1259a12bae0cb603366210b29be7fc24438a6c932b0dd2546da68f1b0828e790585390a7d6ac9ee608a24849db4ea4e17d302", @ANYRES64=r0], 0x150}, 0x1, 0x0, 0x0, 0xc094}, 0x4048094) 2m9.370836534s ago: executing program 1 (id=4333): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x43}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x0, 0x3f, 0x0, 0x8}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2, 0x1, 0x2}, 0xfd}, 0x18) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x8917, 0x0) sendmsg$sock(r0, &(0x7f0000001480)={&(0x7f0000000200)=@can={0x1d, r1}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)="068e671ea0643c6e6bcd2d22c191aa4a2bdd86714ba2f07c8e94056aea2516b688097a8524d1a38cb9935b0942170a9fb91bf9ace26ce3a80c5e8bb7c8c1025ca3814aa9c6581cac00c629910bcd4f32efc8fe6028edf82cc1b47f0ac158ddb39be868e445b58d8b725cf3f06a809626b3423a55d40a", 0x76}, {&(0x7f0000000300)="9c7f47194794dc4a814e4122996edd42e398032ec609746a2f10307da0cafef0af51c468801e20c7c91f0017102b48358640a8a22cee937999f49bc9aeedfe4387faccefb2a6", 0x46}, {&(0x7f0000000380)="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", 0x63e}], 0x3}, 0x811) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f1114f9f4070009010000000000fe000001000000000800040001000000", 0x24) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4b}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) 2m9.16595513s ago: executing program 1 (id=4336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe0ac}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xd}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x60}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x48, r7, 0x207, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x4008080) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000030305000000000000000000020000060c000200fffffffc000000030113b7080003400000f61e0c000200fffffffc000008000c000200fffffffd0000000008000340000003ff0c000200fffffffb000000000c000200fffffffd000000040c0002000000000000000002"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x48801) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x9, [@const={0x8, 0x0, 0x0, 0xa, 0x4}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x3, 0x8}, @fwd={0x3}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @ptr={0x8}, @datasec={0x2, 0x8, 0x0, 0xf, 0x1, [{0x4, 0x40b4, 0xb}, {0x2, 0x5, 0xffffffff}, {0x1, 0x0, 0xf}, {0x2, 0xc350db42, 0x6}, {0x2, 0x1, 0x8}, {0x5, 0xc4, 0x2}, {0x2, 0x6, 0x7}, {0x4, 0x3, 0x695}], '8'}, @enum={0x3, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x2}, {0xc, 0x3}, {0x8, 0x6}, {0x3, 0x2}, {}, {0x9, 0xb00}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000380)=""/245, 0x10d, 0xf5, 0x1}, 0x28) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x303, 0x2, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0x307}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0xb8}, @alu={0x0, 0x1, 0x2, 0x0, 0xa, 0x10, 0xfffffffffffffff0}, @ringbuf_query, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x7, 0x8afdb29b2ee56715, 0xc, 0x2, 0x5, 0x18, 0x8}]}, &(0x7f0000000280)='GPL\x00', 0x80000001, 0x26, &(0x7f0000000740)=""/38, 0x40f00, 0x0, '\x00', r4, 0x0, r10, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000980)=[{0x4, 0x2, 0xa, 0x1}, {0x1, 0x4, 0x4, 0x7}, {0x4, 0x3, 0xc, 0xa}, {0x0, 0x3, 0xc, 0xc}, {0x4, 0x1, 0x8001}, {0x1, 0x2, 0x2, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000240)='fsi_master_write\x00', r12, 0x0, 0x6}, 0x18) 2m8.999337778s ago: executing program 1 (id=4338): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x11, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000240)={0x1, 'veth1_vlan\x00', {}, 0x400}) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x2, {0xa, 0x4e26, 0x8, @mcast2, 0x3}}}, 0x3a) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000100)) 2m8.806814409s ago: executing program 3 (id=4339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000001000008500000013000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7000000}, 0x94) 2m8.786581961s ago: executing program 1 (id=4340): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r1, 0x0, 0x0, 0x10020, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4) 2m8.657865765s ago: executing program 3 (id=4342): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x41061df5efd3e95a, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4010) getsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f0000000240)={@empty, @local, 0x0}, &(0x7f0000000340)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="00000002c50c1a4be1c7e58046ab57def1ad414835328d033564c3151a4dfa62b6f97426e56e3329bf7e86ae1f545a71c39a1de4eff44777cb3b3adedd83060b9134020c7468dc757f6e1fc42824483ad69f700fa30d2c463bcc3e52e7869aabdc1afa5270999b240fa681daf3a54ac4a3cf7c8edfc187effec8f1980a026808f762c4e3626b9f01752c67b9380e06d442542696383845e4"], 0x38, 0x40044}}], 0x1, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@polexpire={0x1e4, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfb, {{{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e23, 0x0, 0x4e21, 0x4, 0x2, 0xc0, 0x80, 0xc0, r4, r7}, {0xfff, 0x2, 0x6, 0x0, 0x0, 0x7ffffffffffffffc, 0x3, 0x5}, {0x3, 0xff67, 0xff, 0x8000000000000001}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x1, 0x2}, 0x8}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3508, 0x6, 0x3, 0x5, 0xff, 0x60, 0x3}, {{@in6=@mcast1, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x4, 0x0, 0x83, 0x5, 0x1}]}, @tmpl={0x44, 0x5, [{{@in=@local, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x34ff, 0x4, 0x0, 0x1, 0x80, 0x100, 0x4cf}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe}, @replay_thresh={0x8, 0xb, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @lifetime_val={0x24, 0x9, {0x8, 0x401, 0x0, 0x7f33}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @lastused={0xc, 0xf, 0x19}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r10, 0x89f6, &(0x7f0000000500)="5492d3a412d7278c630b1fc15f12a39eb90f740856793c692938421edc60b900dea2d6da0d11b18be60a0abfaa28086a4524c35f3ea85e57328afbf95eeda6cdbf8248f7a49aac8b654f9b18fe08b7f543be649ac2bbca1d4d051d4ca1ec1d5ef7b3436274535bf9e238c58b3729039e2f7361b60af63409cdb9c3e95b7c90fa91bbd4cc") sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}}, 0x844) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r12, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x300, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x58}}, 0x8000) 2m8.648506025s ago: executing program 1 (id=4343): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9890000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x4c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 2m8.21577931s ago: executing program 3 (id=4346): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 2m7.990882909s ago: executing program 3 (id=4348): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2ecc3841285ccfc0f1a424465c8136a49e90a848a35f2dd23dc3187c89859d5f96bf72"], 0x50}, 0x1, 0x0, 0x0, 0xc005}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 2m6.888238436s ago: executing program 5 (id=4354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000000c0)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000002f80)={'filter\x00', 0x6002, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7f, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@arp={@dev, @multicast2, 0x0, 0xff000000, 0x10, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x518) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r2, 0x6}, &(0x7f0000000140)=0x8) 2m6.762973871s ago: executing program 3 (id=4355): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 2m6.746439284s ago: executing program 5 (id=4356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffd, 0xc, 0x4}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x800001, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x0, 0xfffffffe, 0x800, 0x1a80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) syz_emit_ethernet(0x1a, &(0x7f0000000400)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x3, 0x0, 0x4}}, {@llc={0x4, {@llc={0x0, 0xf4, 'p', 'S'}}}}}, &(0x7f0000000700)={0x0, 0x4, [0xecf, 0xe9a, 0x45c, 0xce7]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r9, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x21, &(0x7f00000007c0)=ANY=[@ANYBLOB="180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000000160002ff7f0000186000000300000000000000010000008520000005000000186600000e0000000000000004000000183a0000010000000000000000000000d301e0ff0400000018160000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000001c0)='GPL\x00', 0xe45, 0x36, &(0x7f0000000440)=""/54, 0x41100, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r5, r10, 0xffffffffffffffff, r11, r12, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001080)={r13, 0x3, 0x20}, &(0x7f00000010c0)=0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 2m6.726299106s ago: executing program 3 (id=4357): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180040004"], 0x28}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0xca1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04000002", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000000008006001600060000000500120001000000060011000900000008000b0007000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000440)="4b0bd37b172586d2b3b3202947558c124579463838f0eb1ae91575b28aa0f22920797f2292936c794142f7e9fcd5bb06748f44d0ee2aa993c98f0e7d9d26598acd84da998efbbb1f1ea5070eed66a08e117ccdfe77151ad01da154bfc68344b1c7a0e2dc3c2029ab8567637a5ecdc159adb6e79069fb3bbf8cbd71ecc14f9437cfe9ffbd0b03505e49e89026d85f87a58318f9da5b14e8294fb4ade9bc479cbea1bc67f5c83d6f78fe6c8c80c3a42929dc830164bd6dae9036", 0xb9}], 0x1, &(0x7f0000000880)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x2b, 0x90, [@private=0xa010100, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x118, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x91, 0x0, 0x8, [0x80000000, 0x6, 0x40, 0x7, 0x1]}, @timestamp_prespec={0x44, 0x2c, 0xde, 0x3, 0xe, [{@empty, 0x400}, {@remote, 0x100}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xfffffffb}, {@loopback, 0x9}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x7d, 0x3, 0x5, [{@local, 0x10}, {@rand_addr=0x64010101, 0x81}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8e1d9f1d}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x4}]}, @cipso={0x86, 0x58, 0x3, [{0x7, 0xc, "85540382d186ea148e9e"}, {0x1, 0x7, "4efc43f31c"}, {0x2, 0x11, "24bf216b3d7e6f7d6d2532c668878a"}, {0x2, 0x10, "20bdea02748f65d9d033b2cc8f01"}, {0x5, 0x3, 'B'}, {0x5, 0xc, "96e150cd21756ee38329"}, {0x2, 0xf, "e37452da44133460be0cf583b9"}]}, @timestamp_addr={0x44, 0x2c, 0xc8, 0x1, 0x6, [{@multicast2, 0x7}, {@broadcast, 0x17}, {@empty, 0x3}, {@loopback, 0x69c}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @end]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @cipso={0x86, 0x24, 0x0, [{0x7, 0x5, "96d2dd"}, {0x0, 0x6, "03279041"}, {0x1, 0x3, "12"}, {0x2, 0x10, "e0c29efb56eb97a42dd491500da8"}]}, @rr={0x7, 0x17, 0xd, [@rand_addr=0x64010100, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x1e, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0xf, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @timestamp_addr={0x44, 0x4c, 0x7e, 0x1, 0x0, [{@rand_addr=0x64010102, 0x9}, {@empty, 0x7fffffff}, {@rand_addr=0x64010102, 0x5471}, {@multicast2, 0x7}, {@empty, 0x3311}, {@rand_addr=0x64010102, 0xd}, {@broadcast, 0x5}, {@broadcast, 0x10000}, {@remote, 0xe43}]}, @lsrr={0x83, 0xb, 0xa7, [@loopback, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x2b0}}], 0x3, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x0, 0x50bd27, 0x25dfdbfd}, 0xffffffffffffffa1}, 0x1, 0x0, 0x0, 0x4040082}, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r11 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r11) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) 2m6.583469185s ago: executing program 5 (id=4359): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket(0xa, 0x5, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x400000000000009) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) (async) r4 = getpid() sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)={0x19f4, 0x0, 0x3, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x1}, [@nested={0x19d, 0x68, 0x0, 0x1, [@generic="13c4d5e520a6400d01fd714da8f5ada9ec75599324006fdb10950f6b7973a60426246eb41b861143b442a67f53ad9f204f64cd24a13f2c34ba637fcc0cf0947678ba6d1f9f27b34fa68f72ffcc516f65ad1094d66946168e399c732c9489f48435eeb9bf9019403e76865246599063da3efd048cb1bc8cd9a76b42a7d503f5b61702123ec33260f8ee88936fd85196a6e4956f20308f124201a5d5b8b78ae015dd", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x2}, @generic="ad4657fe3aef87d0bed3d7975aaff2c5c90b7e77ebb47c1b2c1c2367e8c659e4047d850a53e8218974469b4712b73b3999df74ebf849e0ec6ff775044aac16298de53eceba8bddd4ce6791edab1dcc581b31a21b91b1e4746c633acf0a8d163fddbaaa03a2f6936f4d125a878d9780d3b1b7cd80ba9f3491bf590377192d6ef4c2c662814f62186b07b91567af637f4df640433f23eab0f3ab626cddcd82f7c4b3ac053ab01f81f77e4ddd90a7c4cadeda078ff9291592c8794b86398a13045341799adcc4f0e9ab664788796416be499354263430853b1e74d764999303f194d0e33a513f81f4136039dd32"]}, @nested={0x101c, 0xd8, 0x0, 0x1, [@nested={0x4, 0xfe}, @nested={0x4, 0x68}, @generic="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", @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x69, 0x0, 0x0, @fd=r1}]}, @nested={0xf6, 0x84, 0x0, 0x1, [@nested={0x4, 0x13}, @nested={0x4, 0xbd}, @typed={0x8, 0x116, 0x0, 0x0, @uid=r3}, @generic="5443bbb71ef4f6e1bb898ed419cae8fe3e1ff71163c6bda1a72a1058198d1844f539a5af0f3a83974bf23946610e96173e01214bd43b7d4a700043bd16e321fd90b17ad27b1f1b375ef96b7f83ea67803a0e81b6a6d3109870eb9163d3775f0cb0b862579bec65add7671e71c4900bedc185530dcd98a022019b7d472157c56af2f89bfe3adc9e122614ba66f64439f04e0d520216335f0924b39d15305a6b501a1dd8ce880e6e37e5d245e99d0be003b3b40ada8129c4af33a0eaaebec2d80894ba6542a035accf8031e2b8dd06db9b258f060982b3d83daac7625582197ed83d38"]}, @typed={0x8, 0x131, 0x0, 0x0, @pid=r4}, @nested={0x200, 0xc1, 0x0, 0x1, [@generic="dee7117f689d324efb56054b89b88bcd8a599d0e6d2a1ce57a6d9187628b40224cd9a1c5173ff8b1972efb7fe62a3acde97be3f5", @generic="911f9dc2a2ce193bde3dcb74f1449f0edea5f6ab66d5d70cc0823c04fe47e69be1a4901f3884af273949fddf0a9ef66b08b50f3773b1ca7d15a8ed9b091847797fb64e8f014bd81cc26102341175175fe8ef208d115d9e37d1dd5cbfb7f22f3785b291b858959befbfb8bc824fbe2b8518106d62c6e4ac0491870c70c8cc0709bbf55c4662dfecc47de7f63edb2ce998fcc8f16bf7094914f97edc81b520b0a991451274653f91acdbc34fb3d06b269914ad4b89e5c50094b9f916469ed4c1e02557ecb29b17edec8f9c53bbb00dd26defe7db9d84136a9baa9caef897d59f94", @nested={0x4, 0x2ecf}, @generic="efde6e98a0df58c545b8505829900d1263d2449314118692a058c686d4b410593b3ff2e811754caba91a9a83", @nested={0x4, 0x5c}, @typed={0x8, 0x12f, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="57798d502b85e7fc518ddb8d4c66ce036d24f1fdde4ca412b8d576cc111e1dc3d770b3f0f9931eb15eaebb6f1912f26617519692c955f23b4f8f598f7079127e4603a07eedba482feb78ce4c004908e733fa921588183f76aa31b9548e5c5defa4474ed51deea8cadb169fd57f02c3729293c20e2359d883093bc96f199ba3029dcf1cc7684e2b701aaa7e3138ef665021c86eb96002ef50f7812cb1c0e3313f79ad3cdf487e79c9b75871d1"]}, @generic, @generic="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", @nested={0x102, 0x141, 0x0, 0x1, [@nested={0x4, 0x40}, @generic="884a0f48f678511a61d8d2b866c5e7e300f4c4349b293010dfac71ea873cfc88b9ab560bccd290667e7ea887cc0d7b1a4d183f8541a6082ad77d11cf8e6dba3fe1c70636ad44f891fc7e7eb90f439f5f9e292bb8771abab31d9ea369812d6147702731337332be7b3a5ebb1a4f4678228484fa4d6c0eb67fb1bf02ebdfdaeda912631950a132f808a3372bee12bdf38f825589acd81201f3241c85f97b83aa060205f5f239e1eeac462c4c6033f8ff63916dda661d3eb3853f85bdd0e243803eb0b0f8e315d582ae669363b2bcb1e35ec653a7ad43e3806006ab4822a0237f82024da6b4397c37b2d90aa348d87a7ba791c1a1474907", @nested={0x4, 0x124}]}, @nested={0x31f, 0x12d, 0x0, 0x1, [@typed={0x4, 0x11}, @typed={0x99, 0x25, 0x0, 0x0, @binary="9d18800861d823aa6a6e3b0266e835544a4c591ed6f07af11d50fd1a43fbfc84a773862f79939762bff5709630a839e9f3e4f13e5df99105db56a894377199377a27f935204a43e1f67c71f3df450b2d0410a9593274aca370a83058e39d7f9ff49aa1236df32628f3ccd641b0707df06de9be35041dde805ff84976a7b892e0f99047d107c9fe496ab891454e67b164097232ccdc"}, @typed={0xd6, 0x6a, 0x0, 0x0, @binary="7fd8095f33d922cc014b8c55e9c96b54bfd8cb799fdcc05b220035c73ab50f0a71da65fea3b86086f7a93bfdd3098e886d2c7d29773477ce07e64cdc1de8e0cbda0943acf51f68a575b36f794fa34d5cfc7b175a487c0382c2ad8f0fe25fd63c0aab317b8b257e4ca479c775d1ccf26afcabf6416257e98e7492009652e975cc677574c1c2ae232bf5fc2e6d5378669d48c8f3a6dab67dbba6789eb23b0d46ca11166056ecbf569c586c0cc2678b07a5a70bd27fdd7f351d49eb12debe6a8e2702b940b91e8bf6499768de25a81e721f353d"}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x5}, @generic="72a25f2fad9bacade574704b2baab128b97682dae32385ac9088f7f6ff50cd70792d78cdd81294cb76d56ab7e44cddec85e651edbf4df26ca27fadeb896c2f5f16e5cfd948c82eda2c8f6b55e8a8aabb667ce9e21cec7f4fbbd5cd5f7629dbc6e5a86e048b8fa3286689aaeb872d34cf189e58c844fcfd09e1bfaf37c83ea742572a70f1728f426682842c4c54fb0e27cbf358b243ac", @generic="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", @typed={0x8, 0x141, 0x0, 0x0, @ipv4=@local}]}]}, 0x19f4}, 0x1, 0x0, 0x0, 0xc081}, 0x0) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 2m6.330913499s ago: executing program 0 (id=4360): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "501040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xfa}]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x26}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfffe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@TCA_RATE={0x4, 0x5, {0xff, 0xce}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@TCA_RATE={0x4, 0x5, {0xff, 0xce}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850) 2m5.94019159s ago: executing program 0 (id=4361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820f089d6dcd3292ea54c7beef915d564c90c200aff6b9e5c0baf8236a0128972a6c5c291195785683974ce34ec01020e5a4359db5179f9432926edaefc38d4ea013db2e20873dd2380b8427ba6c3ac44e53033e83fa849ec91a9660f36dcbc553f5973de7a47ef3cfe392285a33b58f6b6e56f311912190e3453073a1be2084639b87f50c10704c4e1bbbb11262b45c9375316ab92dcf573edb089dd8", 0xa1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="030000730430f9adaa4d1a1debd0417200040000000400000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @remote}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000004e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r3 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0xffffffc7}, {&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a33696dcd4ff3fadde217468488fff5e72e2e67122a26170571c340a23a96bb07ee3bebcd8e4db8b6d6f6dfb6927791579f2b606ae4d55b778cc137a07dc45cedc546e82fba96d4d7b45a036ee839b5087c7e629932d3feba2bf5863938090ee373dfe7e4772cdb83b6e955361710e5c6b67c8d7658e40e", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x41800}], 0x1, 0x40800) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820f089d6dcd3292ea54c7beef915d564c90c200aff6b9e5c0baf8236a0128972a6c5c291195785683974ce34ec01020e5a4359db5179f9432926edaefc38d4ea013db2e20873dd2380b8427ba6c3ac44e53033e83fa849ec91a9660f36dcbc553f5973de7a47ef3cfe392285a33b58f6b6e56f311912190e3453073a1be2084639b87f50c10704c4e1bbbb11262b45c9375316ab92dcf573edb089dd8", 0xa1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="030000730430f9adaa4d1a1debd0417200040000000400000001", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @remote}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000004e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0xffffffc7}, {&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a33696dcd4ff3fadde217468488fff5e72e2e67122a26170571c340a23a96bb07ee3bebcd8e4db8b6d6f6dfb6927791579f2b606ae4d55b778cc137a07dc45cedc546e82fba96d4d7b45a036ee839b5087c7e629932d3feba2bf5863938090ee373dfe7e4772cdb83b6e955361710e5c6b67c8d7658e40e", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x41800}], 0x1, 0x40800) (async) 2m5.742943309s ago: executing program 0 (id=4362): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x4, 0x84) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x4, 0x84) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) (async) 2m5.643365083s ago: executing program 5 (id=4364): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x44}, 0x28) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 2m5.473614289s ago: executing program 0 (id=4366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000000440)='0', 0x1) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="7295883e756627e2c007b28d6de294b0bc113c2701167b937e2bbdde64fa24de272e1776f6e09314c7d5151672687f0ad2fbae9cdbf80606ff1a3394b71a8c4a096803a9737e4131dc50a07a822619efb196621dfe332cd399e1efd6b10e725911657a0ae26445a7e627d926ce9142017e29884090788b579bcbf9dca1869726"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', r4, 0x25, r1}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711213000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 2m5.336527336s ago: executing program 0 (id=4367): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 2m5.231918098s ago: executing program 0 (id=4368): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xff}, 0x18) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2062, 0x4, 0x1}, 0x10) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff, 0x2}, 0x5a) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r7, 0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async) recvmmsg(r8, &(0x7f0000002b80), 0x0, 0x0, 0x0) (async, rerun: 32) shutdown(r8, 0x0) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC=r6, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r9}, 0x18) (async) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000023000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 1m55.781153321s ago: executing program 5 (id=4369): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff70000280", @ANYRES16], 0x398}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000080)={0x7, 'veth0_to_hsr\x00', {0x5}, 0x7fff}) (async) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="bc3c15ae3a1040d549dade496ca3b21f", 0x10}, {&(0x7f00000001c0)="679181513c3fc7955546c1268f196eaadba14802f45592d34474888920310911a4b0c22956edcf02fab208e889126cfb782cd027a581dba62f57a8fd9ddaf5a7e6b87b3076077132619af6c97690002183511b7592edfe5e1ef97ea3244a96961bb18589ca4157a7f956ac097eb72d4fadc470f44aae1f", 0x77}, {&(0x7f0000000240)="5556a5ea917a2cb24c0b8beb674af337946aa782014ad9e256d1d53afb98ce64fd13f0bf3131d8c9f7b6d38874fc87fd429667ead410df9d530722c7478c4a16e191106b0e7560e3c9ed57e113a4b9d36e0047c72100a431a3779a66a4d653e3ef45e74c8c2340311880c42fb8ca06f949e137467c0a1e7a1fd4400c8438500cc218774875763694cadb7beca3c6cc15c2ed", 0x92}, {&(0x7f0000000300)="05bbac8bfeb81041c817706d1e936c77d1750cc34a31e83ea3cef356c9e6cc1b2d431003616b740d7d4f6e67a074dc593fd2b5874ab3865c17cb6c852a7579a9f287006a0946368d1985606a965afab6d3b3a6c875d08698b45754ac4632e8cd5e95ee706fb87041f65b5969a76e1a9497319cd05d0280f1f44ca1c6146ca28bcb36fb652f35468c456235b2e6ae544a2bb94a3ff5a7bee3fa8fcde4f48ce8df7efadb7a3b41a65915", 0xa9}, {&(0x7f00000003c0)="4947ed1d40619374b7ce3f682c1f87bbc762fd946da512fca728c822bf22eaca512a4e1e479a4b57a273978a1ce9a73edbda5e99260ccddd28bffc6cde200d8d31c9cced056306ec8809b5b268624277a3feb96dbc3a748f336dd1c91c032cebafc134cde57235f95a", 0x69}, {&(0x7f0000000140)="693e9a786579e7c99a9608237f8009c9b8babb9573602770efc91196d6b877816908071c785db1f20879e3f65d948d65a5836e", 0x33}, {&(0x7f0000000440)="3df011830951a7480ecbe2604686faafc8a59175fca8bdca6359dd29dfdecd783cfa720e5718c65c87733ca96441f2b9db160dc302", 0x35}], 0x7, 0x0, 0x0, 0x4}, 0x40011) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r4, r2, 0x0, 0x8) 1m47.717423535s ago: executing program 33 (id=4343): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9890000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x4c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 1m42.707681444s ago: executing program 34 (id=4368): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xff}, 0x18) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2062, 0x4, 0x1}, 0x10) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff, 0x2}, 0x5a) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r7, 0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async) recvmmsg(r8, &(0x7f0000002b80), 0x0, 0x0, 0x0) (async, rerun: 32) shutdown(r8, 0x0) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC=r6, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r9}, 0x18) (async) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000023000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 1m40.266282386s ago: executing program 35 (id=4357): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180040004"], 0x28}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0xca1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04000002", @ANYRES16=0x0, @ANYBLOB="100026bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000000008006001600060000000500120001000000060011000900000008000b0007000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000440)="4b0bd37b172586d2b3b3202947558c124579463838f0eb1ae91575b28aa0f22920797f2292936c794142f7e9fcd5bb06748f44d0ee2aa993c98f0e7d9d26598acd84da998efbbb1f1ea5070eed66a08e117ccdfe77151ad01da154bfc68344b1c7a0e2dc3c2029ab8567637a5ecdc159adb6e79069fb3bbf8cbd71ecc14f9437cfe9ffbd0b03505e49e89026d85f87a58318f9da5b14e8294fb4ade9bc479cbea1bc67f5c83d6f78fe6c8c80c3a42929dc830164bd6dae9036", 0xb9}], 0x1, &(0x7f0000000880)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x2b, 0x90, [@private=0xa010100, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x118, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x91, 0x0, 0x8, [0x80000000, 0x6, 0x40, 0x7, 0x1]}, @timestamp_prespec={0x44, 0x2c, 0xde, 0x3, 0xe, [{@empty, 0x400}, {@remote, 0x100}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xfffffffb}, {@loopback, 0x9}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x7d, 0x3, 0x5, [{@local, 0x10}, {@rand_addr=0x64010101, 0x81}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8e1d9f1d}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x4}]}, @cipso={0x86, 0x58, 0x3, [{0x7, 0xc, "85540382d186ea148e9e"}, {0x1, 0x7, "4efc43f31c"}, {0x2, 0x11, "24bf216b3d7e6f7d6d2532c668878a"}, {0x2, 0x10, "20bdea02748f65d9d033b2cc8f01"}, {0x5, 0x3, 'B'}, {0x5, 0xc, "96e150cd21756ee38329"}, {0x2, 0xf, "e37452da44133460be0cf583b9"}]}, @timestamp_addr={0x44, 0x2c, 0xc8, 0x1, 0x6, [{@multicast2, 0x7}, {@broadcast, 0x17}, {@empty, 0x3}, {@loopback, 0x69c}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @end]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@noop, @cipso={0x86, 0x24, 0x0, [{0x7, 0x5, "96d2dd"}, {0x0, 0x6, "03279041"}, {0x1, 0x3, "12"}, {0x2, 0x10, "e0c29efb56eb97a42dd491500da8"}]}, @rr={0x7, 0x17, 0xd, [@rand_addr=0x64010100, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0x1e, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101]}, @ssrr={0x89, 0xf, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @timestamp_addr={0x44, 0x4c, 0x7e, 0x1, 0x0, [{@rand_addr=0x64010102, 0x9}, {@empty, 0x7fffffff}, {@rand_addr=0x64010102, 0x5471}, {@multicast2, 0x7}, {@empty, 0x3311}, {@rand_addr=0x64010102, 0xd}, {@broadcast, 0x5}, {@broadcast, 0x10000}, {@remote, 0xe43}]}, @lsrr={0x83, 0xb, 0xa7, [@loopback, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @rand_addr=0x64010102}}}], 0x2b0}}], 0x3, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x0, 0x50bd27, 0x25dfdbfd}, 0xffffffffffffffa1}, 0x1, 0x0, 0x0, 0x4040082}, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r11 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r11) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) 1m35.935392418s ago: executing program 36 (id=4369): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff70000280", @ANYRES16], 0x398}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000080)={0x7, 'veth0_to_hsr\x00', {0x5}, 0x7fff}) (async) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="bc3c15ae3a1040d549dade496ca3b21f", 0x10}, {&(0x7f00000001c0)="679181513c3fc7955546c1268f196eaadba14802f45592d34474888920310911a4b0c22956edcf02fab208e889126cfb782cd027a581dba62f57a8fd9ddaf5a7e6b87b3076077132619af6c97690002183511b7592edfe5e1ef97ea3244a96961bb18589ca4157a7f956ac097eb72d4fadc470f44aae1f", 0x77}, {&(0x7f0000000240)="5556a5ea917a2cb24c0b8beb674af337946aa782014ad9e256d1d53afb98ce64fd13f0bf3131d8c9f7b6d38874fc87fd429667ead410df9d530722c7478c4a16e191106b0e7560e3c9ed57e113a4b9d36e0047c72100a431a3779a66a4d653e3ef45e74c8c2340311880c42fb8ca06f949e137467c0a1e7a1fd4400c8438500cc218774875763694cadb7beca3c6cc15c2ed", 0x92}, {&(0x7f0000000300)="05bbac8bfeb81041c817706d1e936c77d1750cc34a31e83ea3cef356c9e6cc1b2d431003616b740d7d4f6e67a074dc593fd2b5874ab3865c17cb6c852a7579a9f287006a0946368d1985606a965afab6d3b3a6c875d08698b45754ac4632e8cd5e95ee706fb87041f65b5969a76e1a9497319cd05d0280f1f44ca1c6146ca28bcb36fb652f35468c456235b2e6ae544a2bb94a3ff5a7bee3fa8fcde4f48ce8df7efadb7a3b41a65915", 0xa9}, {&(0x7f00000003c0)="4947ed1d40619374b7ce3f682c1f87bbc762fd946da512fca728c822bf22eaca512a4e1e479a4b57a273978a1ce9a73edbda5e99260ccddd28bffc6cde200d8d31c9cced056306ec8809b5b268624277a3feb96dbc3a748f336dd1c91c032cebafc134cde57235f95a", 0x69}, {&(0x7f0000000140)="693e9a786579e7c99a9608237f8009c9b8babb9573602770efc91196d6b877816908071c785db1f20879e3f65d948d65a5836e", 0x33}, {&(0x7f0000000440)="3df011830951a7480ecbe2604686faafc8a59175fca8bdca6359dd29dfdecd783cfa720e5718c65c87733ca96441f2b9db160dc302", 0x35}], 0x7, 0x0, 0x0, 0x4}, 0x40011) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r4, r2, 0x0, 0x8) 1m14.367275879s ago: executing program 2 (id=4377): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000022c0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x670, 0x5, 0x13b8, 0x1a0, 0x1a0, 0xffffffff, 0x0, 0x1278, 0x1320, 0x1320, 0xffffffff, 0x1320, 0x1320, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0xff, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x94, 0x0, 0x1}}, @common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x10a0, 0x10d8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xcf, {0x6}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @icmp_id=0x65, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'bridge_slave_0\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @private=0xa010101, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1418) 1m3.064822935s ago: executing program 2 (id=4378): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 51.885559794s ago: executing program 2 (id=4379): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r4}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r10) 39.236561936s ago: executing program 2 (id=4380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@bridge_getlink={0x28, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4201, 0x80}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 28.157174559s ago: executing program 2 (id=4381): syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00050000002f907800020000e0000001248088a800"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x44}}, 0x28000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x6) accept4(r1, 0x0, 0x0, 0x80800) shutdown(r1, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) gettid() r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) socket(0x8, 0x0, 0x8000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r8, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r5, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x4, 0x6, @multicast}, 0x14) 16.029316221s ago: executing program 2 (id=4382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000061000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547e9387dbe9005bec1988a8", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc429}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 0s ago: executing program 37 (id=4382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000061000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547e9387dbe9005bec1988a8", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc429}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) kernel console output (not intermixed with test programs): s. [ 464.562638][T17980] netlink: zone id is out of range [ 464.568484][T17980] netlink: zone id is out of range [ 464.573634][T17980] netlink: zone id is out of range [ 464.596091][T17975] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.658991][T17980] netlink: zone id is out of range [ 464.679237][T17977] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.690142][T17980] netlink: get zone limit has 4 unknown bytes [ 464.834302][ T36] IPVS: stop unused estimator thread 0... [ 465.081306][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'. [ 465.122436][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'. [ 465.209216][T18011] netlink: 'syz.1.3051': attribute type 10 has an invalid length. [ 465.282478][T18014] netlink: 'syz.1.3051': attribute type 10 has an invalid length. [ 465.313888][T18011] team0: Failed to send options change via netlink (err -105) [ 465.331808][T18011] team0: Port device dummy0 added [ 465.361756][T18014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 465.397457][T18014] team0: Failed to send options change via netlink (err -105) [ 465.406066][T18014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 465.427653][T18014] team0: Port device dummy0 removed [ 465.441501][T18014] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 465.628877][T18017] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3053'. [ 466.013265][T18021] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.710936][T18035] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.872882][T18044] netlink: 'syz.3.3061': attribute type 2 has an invalid length. [ 467.640275][T18075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3069'. [ 467.659451][T18075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3069'. [ 467.800955][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3070'. [ 467.926374][T18081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'. [ 467.972726][T18084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3072'. [ 468.225849][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 468.313423][T18091] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.537886][T18107] netlink: 'syz.2.3076': attribute type 29 has an invalid length. [ 468.561342][T18107] netlink: 'syz.2.3076': attribute type 29 has an invalid length. [ 468.590503][T18107] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3076'. [ 468.831790][T18116] netlink: 'syz.1.3082': attribute type 16 has an invalid length. [ 468.840986][T18116] netlink: 'syz.1.3082': attribute type 17 has an invalid length. [ 469.000105][T18116] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.007836][T18116] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.139878][T18116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.159740][T18116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.340036][T11010] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.349517][T11010] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.403957][T11010] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.428500][T11010] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.201411][T18157] batadv_slave_1: entered promiscuous mode [ 470.322759][T18163] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 470.372880][T18163] bond1: entered promiscuous mode [ 470.381099][T18163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.388829][T18154] batadv_slave_1: left promiscuous mode [ 470.441335][T18170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.450823][T18170] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 470.462749][T18170] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 470.488855][T18170] bond1: (slave wireguard0): making interface the new active one [ 470.498433][T18170] wireguard0: entered promiscuous mode [ 470.505715][T18170] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 470.522254][T18167] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.534858][T18167] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.636474][T18168] bond10: option ad_user_port_key: invalid value (65535) [ 470.677344][T18168] bond10: option ad_user_port_key: allowed values 0 - 1023 [ 470.700487][T18168] bond10 (unregistering): Released all slaves [ 470.764419][T18163] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 470.782182][T18163] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 470.943578][T18177] __nla_validate_parse: 1 callbacks suppressed [ 470.943596][T18177] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3099'. [ 470.980423][T18177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.035157][T18167] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.046128][T18167] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.164059][T18167] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.209420][T18167] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.324817][T18167] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.353628][T18167] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.396916][T18200] virt_wifi0 speed is unknown, defaulting to 1000 [ 471.433808][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3106'. [ 471.477798][T18213] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3106'. [ 471.502565][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3107'. [ 471.606754][ T49] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.627801][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.661247][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.671799][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.758879][ T49] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.774233][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.804087][ T49] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.820114][ T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.933318][T18232] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3110'. [ 472.102140][T18235] openvswitch: netlink: Flow actions attr not present in new flow. [ 472.333778][T18245] virt_wifi0 speed is unknown, defaulting to 1000 [ 472.567668][T18256] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 472.598299][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3115'. [ 472.679199][T18257] virt_wifi0 speed is unknown, defaulting to 1000 [ 472.759935][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3117'. [ 473.153326][T18283] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3120'. [ 473.175454][T18284] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3120'. [ 473.532905][T18297] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3123'. [ 473.676674][T18296] syzkaller0: entered promiscuous mode [ 473.683619][T18296] syzkaller0: entered allmulticast mode [ 473.792132][T18297] vlan2: entered allmulticast mode [ 473.797813][T18297] gretap0: entered allmulticast mode [ 473.894246][T18305] tipc: Enabling of bearer rejected, failed to enable media [ 474.278663][T18301] virt_wifi0 speed is unknown, defaulting to 1000 [ 474.586296][T18323] Bluetooth: MGMT ver 1.23 [ 474.764954][T18328] can: request_module (can-proto-4) failed. [ 475.211789][T18353] TCP: TCP_TX_DELAY enabled [ 475.648696][T18366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.679675][T18373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.686967][T18373] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 475.698713][T18373] bond7: (slave sit1): Error -95 calling set_mac_address [ 476.071949][T18383] virt_wifi0 speed is unknown, defaulting to 1000 [ 476.302265][T18392] __nla_validate_parse: 6 callbacks suppressed [ 476.302288][T18392] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3151'. [ 476.727300][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3154'. [ 477.163173][T18411] netlink: 'syz.3.3157': attribute type 21 has an invalid length. [ 477.187447][T18411] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3157'. [ 477.403002][T18419] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 477.862453][T18438] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3162'. [ 478.285795][T18450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3165'. [ 478.580948][T18462] netlink: 'syz.3.3170': attribute type 6 has an invalid length. [ 478.697610][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 478.730012][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'. [ 478.983083][T18479] virt_wifi0 speed is unknown, defaulting to 1000 [ 479.202675][T18492] netlink: 'syz.0.3169': attribute type 13 has an invalid length. [ 479.260474][T18496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3180'. [ 479.894191][T18519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3185'. [ 479.992891][T18519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3185'. [ 480.052991][T18526] netlink: 'syz.3.3188': attribute type 3 has an invalid length. [ 480.076298][T18526] netlink: 'syz.3.3188': attribute type 1 has an invalid length. [ 480.293666][T18538] netlink: 'syz.2.3190': attribute type 12 has an invalid length. [ 480.802597][T18555] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001 [ 480.810699][T18555] x_tables: duplicate underflow at hook 2 [ 480.825192][T18555] sctp: [Deprecated]: syz.1.3197 (pid 18555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.825192][T18555] Use struct sctp_sack_info instead [ 480.941734][T18560] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 481.074800][T18560] bond1: entered promiscuous mode [ 481.083678][T18560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.363938][T18587] __nla_validate_parse: 8 callbacks suppressed [ 481.363959][T18587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3207'. [ 481.388528][T18591] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.3209'. [ 481.415021][T18591] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.3209'. [ 481.431696][T18588] virt_wifi0 speed is unknown, defaulting to 1000 [ 481.543645][T18598] netlink: 'syz.1.3208': attribute type 12 has an invalid length. [ 482.052260][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3215'. [ 482.184270][T18615] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 482.198518][T18613] virt_wifi0 speed is unknown, defaulting to 1000 [ 482.254085][T15775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.265970][T15775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.274471][T15775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.286041][T15775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.297976][T15775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.373424][T18615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.384255][T18614] virt_wifi0 speed is unknown, defaulting to 1000 [ 482.417475][T18617] virt_wifi0 speed is unknown, defaulting to 1000 [ 482.957728][ T5826] syz_tun (unregistering): left promiscuous mode [ 482.977926][ T5826] `: Port device syz_tun removed [ 483.196249][T18652] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 483.625391][T18669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3227'. [ 484.127382][T15775] Bluetooth: hci0: command tx timeout [ 484.367611][T15775] Bluetooth: hci2: command tx timeout [ 484.792256][T18709] netlink: 'syz.1.3237': attribute type 2 has an invalid length. [ 484.801836][T18709] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 484.810405][T18709] netlink: 'syz.1.3237': attribute type 2 has an invalid length. [ 484.819045][T18709] netlink: 'syz.1.3237': attribute type 2 has an invalid length. [ 484.933121][T18617] chnl_net:caif_netlink_parms(): no params data found [ 485.064910][T18720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3241'. [ 485.093981][T18715] bond2 (unregistering): Released all slaves [ 485.308181][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 485.322822][T18617] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.331630][T18617] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.339084][T18617] bridge_slave_0: entered allmulticast mode [ 485.359575][T18617] bridge_slave_0: entered promiscuous mode [ 485.419240][T18617] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.431437][T18617] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.440013][T18617] bridge_slave_1: entered allmulticast mode [ 485.449070][T18617] bridge_slave_1: entered promiscuous mode [ 485.481848][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3244'. [ 485.586271][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 485.608300][T18617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.639201][T18617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.795806][T18760] netlink: 'syz.1.3249': attribute type 6 has an invalid length. [ 485.816709][T18617] team0: Port device team_slave_0 added [ 485.847373][T18763] netlink: 'syz.2.3250': attribute type 3 has an invalid length. [ 485.855240][T18763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3250'. [ 485.860332][T18617] team0: Port device team_slave_1 added [ 485.891143][T18763] netlink: zone id is out of range [ 485.902915][T18763] netlink: zone id is out of range [ 485.910270][T18763] netlink: zone id is out of range [ 485.927288][T18763] netlink: zone id is out of range [ 485.940820][T18763] netlink: zone id is out of range [ 485.961047][T18763] netlink: zone id is out of range [ 485.980157][T18763] netlink: zone id is out of range [ 485.985418][T18763] netlink: zone id is out of range [ 486.001165][T18617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.017752][T18617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.038532][T18763] netlink: zone id is out of range [ 486.053945][T18617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.077392][T18763] netlink: zone id is out of range [ 486.090152][T18617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.103416][T18617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.150173][T18617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.351151][T18617] hsr_slave_0: entered promiscuous mode [ 486.370325][T18617] hsr_slave_1: entered promiscuous mode [ 486.388871][T18617] debugfs: 'hsr0' already exists in 'hsr' [ 486.394873][T18617] Cannot create hsr debugfs directory [ 486.435443][T18785] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3258'. [ 486.447865][T15775] Bluetooth: hci2: command tx timeout [ 486.638269][T18793] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3260'. [ 486.676235][T18617] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.693236][T18617] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 486.704167][T18617] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.759790][T18617] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.771525][T18617] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 486.782517][T18617] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.813028][T18797] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.870269][T18617] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.893944][T18800] netlink: 'syz.5.3263': attribute type 21 has an invalid length. [ 486.902375][T18800] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3263'. [ 486.902832][T18617] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 486.947625][T18617] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 486.953650][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3263'. [ 486.975399][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3263'. [ 486.985586][T18800] netlink: 'syz.5.3263': attribute type 4 has an invalid length. [ 487.000014][T18800] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3263'. [ 487.024252][T18801] vlan3: entered promiscuous mode [ 487.033983][T18797] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.092197][T18617] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.102770][T18617] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 487.128058][T18617] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 487.149587][T18806] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3265'. [ 487.210023][T18797] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.324321][T18797] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.429589][T18808] atomic_op ffff88807a061998 conn xmit_atomic 0000000000000000 [ 487.485952][T18798] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3262'. [ 487.604868][T18617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 487.624014][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.636129][T18617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 487.679495][T18617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 487.703522][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.721781][T18617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.735382][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.784998][T18830] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 487.798700][ T6389] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.053587][T18617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.111727][T18617] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.162885][T18842] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3274'. [ 488.196290][T18842] geneve2: entered promiscuous mode [ 488.202504][T18842] geneve2: entered allmulticast mode [ 488.226742][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.233972][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.245027][T18844] virt_wifi0 speed is unknown, defaulting to 1000 [ 488.270369][T18850] batadv_slave_1: entered promiscuous mode [ 488.303624][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.310801][ T6437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.528372][T15775] Bluetooth: hci2: command tx timeout [ 488.898608][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3282'. [ 489.092799][T18849] batadv_slave_1: left promiscuous mode [ 489.350468][T18884] netlink: 'syz.2.3284': attribute type 9 has an invalid length. [ 489.429087][T18887] xt_l2tp: missing protocol rule (udp|l2tpip) [ 489.452698][T18617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.585905][T18617] veth0_vlan: entered promiscuous mode [ 489.710961][T18617] veth1_vlan: entered promiscuous mode [ 489.797497][T18617] veth0_macvtap: entered promiscuous mode [ 489.824231][T18617] veth1_macvtap: entered promiscuous mode [ 489.868622][T18914] syz_tun: entered promiscuous mode [ 489.880963][T18914] IPVS: Error connecting to the multicast addr [ 489.893972][T18617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.925692][T18617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.966394][ T6438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.008676][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.032236][T18919] netlink: 'syz.5.3295': attribute type 1 has an invalid length. [ 490.032614][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.083799][T18921] netlink: 'syz.1.3296': attribute type 13 has an invalid length. [ 490.126344][T18919] bond8: entered promiscuous mode [ 490.131993][T18919] bond8: entered allmulticast mode [ 490.139845][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.190217][T18926] bond8: (slave ip6gretap1): making interface the new active one [ 490.208055][T18926] ip6gretap1: entered promiscuous mode [ 490.213755][T18926] ip6gretap1: entered allmulticast mode [ 490.220920][T18926] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 490.302405][T18919] bond8: left promiscuous mode [ 490.338573][T18919] ip6gretap1: left promiscuous mode [ 490.348012][T18919] bond8: left allmulticast mode [ 490.357833][T18919] ip6gretap1: left allmulticast mode [ 490.376623][T18919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 490.512093][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.524511][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.599733][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.609010][T15775] Bluetooth: hci2: command tx timeout [ 490.622588][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.875652][T18961] syzkaller1: entered promiscuous mode [ 490.881539][T18961] syzkaller1: entered allmulticast mode [ 490.953997][T18964] net_ratelimit: 45 callbacks suppressed [ 490.954018][T18964] openvswitch: netlink: Missing key (keys=40, expected=80) [ 490.972964][T18964] openvswitch: netlink: Missing key (keys=40, expected=80) [ 491.783713][T18990] __nla_validate_parse: 11 callbacks suppressed [ 491.783732][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'. [ 491.860206][T18990] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 492.230283][T19010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3317'. [ 492.421744][T19017] xt_cgroup: invalid path, errno=-2 [ 492.680545][T19022] IPVS: Scheduler module ip_vs_ not found [ 492.752730][T19040] veth10: entered allmulticast mode [ 493.002522][T19042] syzkaller0: entered promiscuous mode [ 493.030321][T19042] syzkaller0: entered allmulticast mode [ 493.078117][T19054] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 493.125556][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3325'. [ 493.510485][T19069] virt_wifi0 speed is unknown, defaulting to 1000 [ 493.530811][T19068] virt_wifi0 speed is unknown, defaulting to 1000 [ 494.764741][T19098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3336'. [ 496.099357][T19107] netlink: 'syz.0.3340': attribute type 13 has an invalid length. [ 496.326873][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3342'. [ 496.526539][T19107] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.534637][T19107] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.672697][T19107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.693549][T19107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.838734][T19131] netlink: 'syz.2.3345': attribute type 3 has an invalid length. [ 496.846560][T19131] netlink: 'syz.2.3345': attribute type 7 has an invalid length. [ 496.857011][T19131] netlink: 'syz.2.3345': attribute type 8 has an invalid length. [ 496.874819][T19131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3345'. [ 496.989214][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.017715][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.055279][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.097826][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.148195][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3348'. [ 497.452877][T19145] syzkaller1: entered promiscuous mode [ 497.467528][T19145] syzkaller1: entered allmulticast mode [ 497.534826][T19133] virt_wifi0 speed is unknown, defaulting to 1000 [ 497.773037][T19162] bridge0: port 1(macvtap1) entered blocking state [ 497.800559][T19162] bridge0: port 1(macvtap1) entered disabled state [ 497.812748][T19162] macvtap1: entered allmulticast mode [ 497.818451][T19162] bridge0: entered allmulticast mode [ 497.881732][T19162] macvtap1: left allmulticast mode [ 497.886964][T19162] bridge0: left allmulticast mode [ 497.980771][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 498.009666][T19134] netlink: 'syz.2.3346': attribute type 2 has an invalid length. [ 498.116316][T19177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3356'. [ 498.460769][T19188] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 498.716951][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3362'. [ 498.730221][T19194] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3362'. [ 498.744356][T19201] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 498.756123][T19201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3361'. [ 498.785595][T19196] openvswitch: netlink: IPv4 tun info is not correct [ 499.234810][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3368'. [ 499.321023][T19217] syz_tun: entered promiscuous mode [ 499.421560][T19217] syz_tun: left promiscuous mode [ 499.439276][T19221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'. [ 499.835151][T19229] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 499.959409][T19237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.048142][T19242] syzkaller1: entered promiscuous mode [ 500.053682][T19242] syzkaller1: entered allmulticast mode [ 500.115813][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 500.575417][T19250] veth0: entered promiscuous mode [ 500.627886][T11010] tipc: Resetting bearer [ 500.642189][T19248] veth0: left promiscuous mode [ 500.695386][T19259] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.058696][T19268] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.115863][T19273] virt_wifi0 speed is unknown, defaulting to 1000 [ 501.314777][T19285] netlink: 'syz.0.3383': attribute type 12 has an invalid length. [ 502.240137][T19300] netlink: 'syz.0.3388': attribute type 1 has an invalid length. [ 502.268652][T19307] __nla_validate_parse: 2 callbacks suppressed [ 502.268672][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 502.293619][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 502.529945][T19307] team_slave_0: entered promiscuous mode [ 502.536031][T19307] team_slave_1: entered promiscuous mode [ 502.597262][T19307] macsec1: entered promiscuous mode [ 502.602652][T19307] team0: entered promiscuous mode [ 502.615969][T19307] macsec1: entered allmulticast mode [ 502.621742][T19307] team0: entered allmulticast mode [ 502.628255][T19307] team_slave_0: entered allmulticast mode [ 502.634969][T19307] team_slave_1: entered allmulticast mode [ 502.680912][T19307] team0: left allmulticast mode [ 502.706242][T19307] team_slave_0: left allmulticast mode [ 502.732435][T19307] team_slave_1: left allmulticast mode [ 502.766290][T19307] team0: left promiscuous mode [ 502.806361][T19307] team_slave_0: left promiscuous mode [ 502.812506][T19307] team_slave_1: left promiscuous mode [ 503.506852][T19337] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 503.578516][T19338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3396'. [ 503.621423][T19341] netlink: 'syz.5.3397': attribute type 1 has an invalid length. [ 503.781126][T19337] bond2: (slave gretap0): making interface the new active one [ 503.799008][T19337] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 503.826089][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3396'. [ 503.837750][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 504.097698][T19367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3403'. [ 504.108934][T19371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3404'. [ 504.163195][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3403'. [ 504.442708][T19391] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 504.576045][T19395] virt_wifi0 speed is unknown, defaulting to 1000 [ 504.942027][T19416] netlink: 'syz.1.3417': attribute type 13 has an invalid length. [ 505.027398][T19416] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 505.035827][T19416] syzkaller0: entered promiscuous mode [ 505.047677][T19416] syzkaller0: entered allmulticast mode [ 505.081526][T19416] tipc: Started in network mode [ 505.086833][T19416] tipc: Node identity 42b3eef883a4, cluster identity 4711 [ 505.101771][T19416] tipc: Enabled bearer , priority 0 [ 505.143285][T19415] tipc: Resetting bearer [ 505.177313][T19415] tipc: Disabling bearer [ 505.402130][T19423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 505.418409][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3419'. [ 506.584611][T19479] syzkaller0: entered promiscuous mode [ 506.600050][T19479] syzkaller0: entered allmulticast mode [ 506.761758][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.771363][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.785453][T19484] ipvlan2: entered promiscuous mode [ 506.791997][T19484] ipvlan2: entered allmulticast mode [ 506.808236][T19484] geneve1: entered allmulticast mode [ 506.824577][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 506.932512][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.942863][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.951540][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.966117][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 507.095359][T19499] tipc: Enabling of bearer rejected, already enabled [ 507.403130][T19482] infiniband syz2: set active [ 507.415322][T19482] infiniband syz2: added ip6_vti0 [ 507.423374][ T5929] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.520274][T19482] RDS/IB: syz2: added [ 507.558197][T19482] smc: adding ib device syz2 with port count 1 [ 507.596728][T19482] smc: ib device syz2 port 1 has no pnetid [ 507.635490][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.655597][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.860499][T19524] __nla_validate_parse: 3 callbacks suppressed [ 507.860517][T19524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3444'. [ 507.898907][T19524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3444'. [ 508.223283][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.258375][T19544] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 508.280333][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3448'. [ 508.301085][T19537] bond9: option arp_validate: invalid value (18446744073491447809) [ 508.329615][T19537] bond9 (unregistering): Released all slaves [ 508.767551][T19559] ¾x9ÿ: renamed from bridge_slave_0 [ 509.007203][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.184907][T19563] ip6t_srh: unknown srh invflags BA61 [ 509.269886][T19572] sch_fq: defrate 0 ignored. [ 509.398661][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.540031][T19574] xt_bpf: check failed: parse error [ 509.821578][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.233527][T19588] netlink: 'syz.1.3460': attribute type 39 has an invalid length. [ 510.462012][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 510.598127][T19599] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3464'. [ 510.730495][T19597] netlink: 'syz.5.3464': attribute type 1 has an invalid length. [ 511.052954][T19608] SET target dimension over the limit! [ 511.093933][T19482] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.254337][T19615] tipc: Enabling of bearer rejected, failed to enable media [ 511.310018][T19616] netlink: 'syz.3.3470': attribute type 1 has an invalid length. [ 511.378463][T19618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3471'. [ 511.662488][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'. [ 511.708925][T19628] virt_wifi0 speed is unknown, defaulting to 1000 [ 512.096307][T19638] netlink: 'syz.2.3478': attribute type 1 has an invalid length. [ 512.111050][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 512.122322][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 512.132307][T19628] ip6_vti0 speed is unknown, defaulting to 1000 [ 512.141912][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 512.188806][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'. [ 512.207064][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 512.215128][ C0] lec:lec_tx_timeout: lec0 [ 512.364353][T19638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.421556][T19643] macvlan2: entered promiscuous mode [ 512.426970][T19643] macvlan2: entered allmulticast mode [ 512.472734][T19643] bond2: entered allmulticast mode [ 512.511139][T19643] bond2: entered promiscuous mode [ 512.523445][T19643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 512.550623][T19643] team0: Port device macvlan2 added [ 513.022584][T19661] sctp: [Deprecated]: syz.3.3482 (pid 19661) Use of int in maxseg socket option. [ 513.022584][T19661] Use struct sctp_assoc_value instead [ 513.658634][T19690] mac80211_hwsim hwsim43 ªªªªª;: renamed from wlan0 [ 513.682430][T17379] IPVS: starting estimator thread 0... [ 513.777243][T19696] IPVS: using max 27 ests per chain, 64800 per kthread [ 513.962396][T19706] __nla_validate_parse: 13 callbacks suppressed [ 513.962416][T19706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3492'. [ 514.173066][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 514.552286][T19726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3496'. [ 514.682411][T19729] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 514.752543][T19732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3499'. [ 514.806264][T19729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.878346][T19737] bond1: (slave geneve2): making interface the new active one [ 514.896864][T19737] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 514.938567][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.959124][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.011222][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.037202][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.256399][T19754] openvswitch: netlink: Flow key attr not present in new flow. [ 515.422491][T19761] tipc: Enabling of bearer rejected, already enabled [ 515.822983][T19772] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 515.839483][T19776] tipc: Resetting bearer [ 516.098201][T19788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3516'. [ 516.160463][T19791] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 516.169396][ T891] IPVS: starting estimator thread 0... [ 516.253807][T19793] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.290288][T19792] IPVS: using max 28 ests per chain, 67200 per kthread [ 516.618632][T19811] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.724931][T19825] netlink: 56863 bytes leftover after parsing attributes in process `syz.5.3524'. [ 516.915193][T19831] netlink: 87 bytes leftover after parsing attributes in process `syz.5.3528'. [ 516.936235][T19831] tipc: Resetting bearer [ 516.987720][T19793] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.177422][T19836] syzkaller1: entered promiscuous mode [ 517.207781][T19836] syzkaller1: entered allmulticast mode [ 517.450910][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3530'. [ 517.463851][T19840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3530'. [ 517.491023][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3530'. [ 517.509190][T19840] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 517.608091][T19811] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.051573][T19863] tipc: Started in network mode [ 518.056521][T19863] tipc: Node identity ff, cluster identity 4711 [ 518.075312][T19863] tipc: Enabling of bearer rejected, failed to enable media [ 518.166762][T19866] netlink: 'syz.3.3539': attribute type 39 has an invalid length. [ 518.586252][T19883] tipc: Enabling of bearer rejected, already enabled [ 519.514824][T19893] : entered promiscuous mode [ 519.548786][T19888] virt_wifi0 speed is unknown, defaulting to 1000 [ 519.699013][T19899] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 519.809321][T19906] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 [ 519.920946][T19904] __nla_validate_parse: 2 callbacks suppressed [ 519.920965][T19904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3553'. [ 519.923736][T19908] syzkaller0: entered promiscuous mode [ 519.954493][T19908] syzkaller0: entered allmulticast mode [ 519.982669][T19888] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.983426][T19908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3555'. [ 520.004167][T19908] sctp: [Deprecated]: syz.3.3555 (pid 19908) Use of int in maxseg socket option. [ 520.004167][T19908] Use struct sctp_assoc_value instead [ 520.019905][T19908] netlink: 'syz.3.3555': attribute type 10 has an invalid length. [ 520.028389][T19910] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 520.036060][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3555'. [ 520.055484][T19910] bond0: (slave dummy0): Releasing backup interface [ 520.079581][T19910] bridge_slave_0: left allmulticast mode [ 520.085286][T19910] bridge_slave_0: left promiscuous mode [ 520.108296][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.119981][T19910] bridge_slave_1: left allmulticast mode [ 520.125671][T19910] bridge_slave_1: left promiscuous mode [ 520.130715][T19911] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 520.149645][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.161546][T19910] bond0: (slave bond_slave_0): Releasing backup interface [ 520.182497][T19910] bond0: (slave bond_slave_1): Releasing backup interface [ 520.194412][T19910] team0: Port device team_slave_0 removed [ 520.203444][T19910] team0: Port device team_slave_1 removed [ 520.211710][T19910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.220683][T19910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.230109][T19910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.256244][T19908] batman_adv: batadv0: Adding interface: virt_wifi0 [ 520.264617][T19908] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.311638][T19908] batman_adv: batadv0: Interface activated: virt_wifi0 [ 520.365257][T19911] mac80211_hwsim hwsim48 wlan1: left allmulticast mode [ 520.380641][T19911] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 520.630768][T19920] vlan2: entered allmulticast mode [ 520.656051][T19920] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 520.772519][T19929] tipc: Started in network mode [ 520.798111][T19929] tipc: Node identity 66ac3731b6c7, cluster identity 4711 [ 520.817842][T19929] tipc: Enabled bearer , priority 0 [ 520.910866][T19937] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.3563'. [ 521.461378][T19942] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3565'. [ 521.899826][T19960] nbd3: detected capacity change from 0 to 63 [ 521.914534][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 521.926199][T19970] block nbd3: NBD_DISCONNECT [ 521.938803][T19970] block nbd3: Disconnected due to user request. [ 521.942072][T17379] tipc: Node number set to 3496687409 [ 521.957143][T19970] block nbd3: shutting down sockets [ 521.968758][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 522.008848][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3567'. [ 522.043331][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 522.052699][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3567'. [ 522.064170][T11012] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.087718][T11012] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.101442][T11012] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.177752][ T6437] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.200915][T19976] netem: change failed [ 522.309269][T19982] veth0_to_bridge: entered promiscuous mode [ 522.401681][T19982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.435638][T19982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.678441][T19982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.719529][T19982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.861274][T19982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.908313][T19982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.915875][T19997] netlink: 'syz.3.3579': attribute type 1 has an invalid length. [ 523.013023][T19997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.133841][T19982] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.178963][T19982] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.218610][T19978] veth0_to_bridge: left promiscuous mode [ 523.295630][T20011] virt_wifi0 speed is unknown, defaulting to 1000 [ 523.389879][ T80] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.398936][ T80] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.560004][ T80] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.568542][ T80] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.585110][T20011] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.677863][T20018] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 523.828702][T11009] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.847213][T11009] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.855566][T11009] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.865197][T11009] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.910368][T20016] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 523.952415][T20016] bond5: (slave lo): Enslaving as a backup interface with an up link [ 523.963929][T20016] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 524.504982][T20041] virt_wifi0 speed is unknown, defaulting to 1000 [ 524.913005][T20064] netlink: 'syz.1.3596': attribute type 1 has an invalid length. [ 525.030429][T20068] __nla_validate_parse: 4 callbacks suppressed [ 525.030451][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3596'. [ 525.151959][T20041] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.246460][T20064] bond2: (slave gretap1): making interface the new active one [ 525.294985][T20064] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 525.660264][T20081] syzkaller0: entered promiscuous mode [ 525.681338][T20081] syzkaller0: entered allmulticast mode [ 526.395539][T20103] Unsupported ieee802154 address type: 0 [ 526.432064][T20105] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 526.492046][T20105] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 526.499171][T20107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.507673][T20107] netlink: 'syz.5.3608': attribute type 1 has an invalid length. [ 526.518524][T20107] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3608'. [ 526.743771][T20114] netlink: 'syz.0.3609': attribute type 10 has an invalid length. [ 526.779383][T20111] vxcan2: entered allmulticast mode [ 526.838465][T20116] can: request_module (can-proto-0) failed. [ 527.454594][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3615'. [ 527.493474][T20150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3616'. [ 527.503302][T20148] netlink: zone id is out of range [ 527.509005][T20148] netlink: zone id is out of range [ 527.514519][T20148] netlink: zone id is out of range [ 527.527363][T20148] netlink: zone id is out of range [ 527.532537][T20148] netlink: zone id is out of range [ 527.547218][T20148] netlink: zone id is out of range [ 527.565457][T20148] netlink: zone id is out of range [ 527.578356][T20148] netlink: zone id is out of range [ 527.583539][T20148] netlink: zone id is out of range [ 527.738372][T20164] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3620'. [ 528.087855][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3629'. [ 528.221120][T20189] delete_channel: no stack [ 528.284482][T20200] netlink: 'syz.2.3632': attribute type 21 has an invalid length. [ 528.551062][T20207] xt_bpf: check failed: parse error [ 528.988935][T20214] Bluetooth: MGMT ver 1.23 [ 530.449173][T20232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3640'. [ 530.494121][ T5929] IPVS: starting estimator thread 0... [ 530.603366][T20243] siw: device registration error -23 [ 530.608767][T20236] IPVS: using max 31 ests per chain, 74400 per kthread [ 530.740894][T20250] virt_wifi0 speed is unknown, defaulting to 1000 [ 530.799330][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3645'. [ 530.883359][T20254] bond0: (slave bond_slave_1): Releasing backup interface [ 530.978933][T20261] netlink: 'syz.5.3649': attribute type 4 has an invalid length. [ 531.007692][T15775] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 531.007859][ T5842] Bluetooth: hci2: command 0x0401 tx timeout [ 531.112759][T20266] virt_wifi0 speed is unknown, defaulting to 1000 [ 531.239164][T20250] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.349028][T20273] gre0: entered allmulticast mode [ 531.659626][T20288] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 532.017552][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 532.018048][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 532.067255][T20266] ip6_vti0 speed is unknown, defaulting to 1000 [ 532.572417][T20305] virt_wifi0 speed is unknown, defaulting to 1000 [ 532.962010][T20330] netlink: 'syz.1.3666': attribute type 5 has an invalid length. [ 533.018605][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3666'. [ 533.051713][T20330] netlink: 'syz.1.3666': attribute type 5 has an invalid length. [ 533.115912][T20334] netlink: 'syz.5.3667': attribute type 21 has an invalid length. [ 533.150606][T20334] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3667'. [ 533.182986][T20334] netlink: 'syz.5.3667': attribute type 4 has an invalid length. [ 533.206722][T20334] netlink: 'syz.5.3667': attribute type 3 has an invalid length. [ 533.362240][T20305] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.262859][T20360] tipc: Enabling of bearer rejected, already enabled [ 534.272905][T20360] syzkaller0: entered promiscuous mode [ 534.278867][T20360] syzkaller0: entered allmulticast mode [ 534.328787][T20360] tipc: Resetting bearer [ 534.522919][T20368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3676'. [ 534.674712][T20352] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 534.792152][T20384] --map-set only usable from mangle table [ 534.802950][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3679'. [ 534.819865][T20368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3676'. [ 535.157673][T20388] pim6reg1: entered promiscuous mode [ 535.192684][T20388] pim6reg1: entered allmulticast mode [ 535.828145][T20426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3689'. [ 535.887187][ T5842] Bluetooth: hci0: command 0x080f tx timeout [ 536.047818][T20426] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 536.049650][T20426] block (null): Could not allocate knbd recv work queue. [ 536.148089][T20426] nbd: failed to add new device [ 536.235122][T20444] netlink: 'syz.1.3693': attribute type 9 has an invalid length. [ 536.250673][T20444] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.3693'. [ 536.361367][T20461] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 536.410419][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3696'. [ 536.562775][ T5842] block nbd2: Receive control failed (result -107) [ 536.619539][T20476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3700'. [ 536.653237][T20474] sctp: [Deprecated]: syz.1.3698 (pid 20474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.653237][T20474] Use struct sctp_sack_info instead [ 536.716796][T20481] xt_hashlimit: size too large, truncated to 1048576 [ 536.840514][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'. [ 537.064100][T20489] virt_wifi0 speed is unknown, defaulting to 1000 [ 537.074735][T20494] virt_wifi0 speed is unknown, defaulting to 1000 [ 537.478612][T20519] tipc: Enabled bearer , priority 0 [ 537.501277][T20519] syzkaller0: entered promiscuous mode [ 537.513594][T20519] syzkaller0: entered allmulticast mode [ 537.587421][T20519] tipc: Resetting bearer [ 537.611019][T20489] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.617883][T20517] tipc: Resetting bearer [ 537.678275][T20517] tipc: Disabling bearer [ 538.085666][T20544] bridge0: entered promiscuous mode [ 538.103688][T20544] macvtap1: entered promiscuous mode [ 538.116947][T20544] macvtap1: entered allmulticast mode [ 538.134724][T20544] bridge0: entered allmulticast mode [ 538.164251][T20544] bridge0: port 3(macvtap1) entered blocking state [ 538.177759][T20544] bridge0: port 3(macvtap1) entered disabled state [ 538.203416][T20544] bridge0: left allmulticast mode [ 538.220049][T20544] bridge0: left promiscuous mode [ 538.328864][T20552] netlink: 'syz.5.3718': attribute type 1 has an invalid length. [ 538.336978][T20552] netlink: 'syz.5.3718': attribute type 2 has an invalid length. [ 538.356821][T20494] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.475660][T20558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 538.794964][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3723'. [ 538.835152][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3723'. [ 538.884146][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3723'. [ 538.906090][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3723'. [ 539.410618][T20581] virt_wifi0 speed is unknown, defaulting to 1000 [ 539.452804][T20593] batadv1: entered promiscuous mode [ 540.068707][T20581] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.075801][T20600] virt_wifi0 speed is unknown, defaulting to 1000 [ 540.085771][T20593] virt_wifi0 speed is unknown, defaulting to 1000 [ 540.504980][T20600] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.860114][T20608] netlink: 'syz.3.3730': attribute type 4 has an invalid length. [ 541.060313][T20614] __nla_validate_parse: 30 callbacks suppressed [ 541.060334][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3732'. [ 541.080740][T20614] netlink: 'syz.3.3732': attribute type 2 has an invalid length. [ 541.084038][T20593] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.296738][T20614] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.010785][T20614] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.409277][T20631] lo: Caught tx_queue_len zero misconfig [ 542.633891][T20637] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 543.169139][T20652] x_tables: duplicate underflow at hook 3 [ 543.302011][T20656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3741'. [ 543.320246][T20658] netlink: 'syz.2.3742': attribute type 1 has an invalid length. [ 543.394742][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'. [ 543.424059][T20658] bond3: entered promiscuous mode [ 543.429797][T20658] bond3: entered allmulticast mode [ 543.435445][T20658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.550454][T20661] macvlan3: entered promiscuous mode [ 543.555843][T20661] macvlan3: entered allmulticast mode [ 543.598582][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 543.608183][T20667] bridge2: entered allmulticast mode [ 544.100750][T20675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 544.592303][T20698] virt_wifi0 speed is unknown, defaulting to 1000 [ 544.640338][T20706] virt_wifi0 speed is unknown, defaulting to 1000 [ 544.665908][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 544.693104][ T3466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.702854][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 544.716761][T20713] netlink: 'syz.3.3757': attribute type 1 has an invalid length. [ 544.757990][ T3466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.767440][ T3466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.801252][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 544.810771][T20717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'. [ 544.890427][ T3466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.938695][T20722] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3758'. [ 545.365595][T20698] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.770775][T20742] syzkaller0: entered promiscuous mode [ 545.796702][T20742] syzkaller0: entered allmulticast mode [ 545.957889][T20706] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.086612][T20749] batadv1: entered promiscuous mode [ 546.290895][T20754] __nla_validate_parse: 3 callbacks suppressed [ 546.290916][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3766'. [ 546.349105][T20754] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3766'. [ 546.525998][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3768'. [ 546.598466][T20765] netlink: 'syz.5.3769': attribute type 1 has an invalid length. [ 546.660593][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3769'. [ 546.785259][T20773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3769'. [ 546.807383][T20773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3769'. [ 546.990491][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3770'. [ 547.083175][T20780] syzkaller0: entered promiscuous mode [ 547.096889][T20780] syzkaller0: entered allmulticast mode [ 547.105952][T20782] netlink: 'syz.1.3772': attribute type 10 has an invalid length. [ 547.167520][T20787] netlink: 'syz.1.3772': attribute type 2 has an invalid length. [ 547.176441][T20787] netlink: 'syz.1.3772': attribute type 15 has an invalid length. [ 547.225354][T20782] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 547.414405][T20796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3774'. [ 547.528663][T20796] tipc: New replicast peer: 255.255.255.255 [ 547.535310][T20796] tipc: Enabled bearer , priority 10 [ 547.570577][T20796] netlink: 'syz.1.3774': attribute type 3 has an invalid length. [ 547.578777][T20796] netlink: 'syz.1.3774': attribute type 3 has an invalid length. [ 547.587812][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3774'. [ 548.044768][T20807] netlink: 'syz.1.3778': attribute type 33 has an invalid length. [ 548.055946][T20807] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3778'. [ 548.089089][T20807] virt_wifi0 speed is unknown, defaulting to 1000 [ 548.396269][T20807] ip6_vti0 speed is unknown, defaulting to 1000 [ 548.540043][T20818] netlink: 'syz.2.3780': attribute type 3 has an invalid length. [ 548.572785][T20818] netlink: 'syz.2.3780': attribute type 1 has an invalid length. [ 548.657669][ T9] tipc: Node number set to 3239571192 [ 548.808198][T20823] virt_wifi0 speed is unknown, defaulting to 1000 [ 548.843331][T20827] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 549.624354][T20848] virt_wifi0 speed is unknown, defaulting to 1000 [ 549.635771][T20823] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.953482][T20849] virt_wifi0 speed is unknown, defaulting to 1000 [ 550.303157][T20848] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.672398][T20849] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.877276][T20856] lo speed is unknown, defaulting to 1000 [ 551.033139][T20856] lo speed is unknown, defaulting to 1000 [ 551.122418][T20856] lo speed is unknown, defaulting to 1000 [ 552.043622][T20867] virt_wifi0 speed is unknown, defaulting to 1000 [ 553.073848][T20867] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.088050][T20883] bond5: option mode: unable to set because the bond device has slaves [ 553.354728][T20856] infiniband syz0: set active [ 553.365854][T20856] infiniband syz0: added lo [ 553.371505][T17379] lo speed is unknown, defaulting to 1000 [ 553.385527][T20856] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 553.410374][T20856] infiniband syz0: Couldn't open port 1 [ 553.472840][T20856] RDS/IB: syz0: added [ 553.476953][T20856] smc: adding ib device syz0 with port count 1 [ 553.492643][T20856] smc: ib device syz0 port 1 has no pnetid [ 553.532446][T17379] lo speed is unknown, defaulting to 1000 [ 553.539440][T20856] lo speed is unknown, defaulting to 1000 [ 553.681104][T20896] virt_wifi0 speed is unknown, defaulting to 1000 [ 554.051793][T20856] lo speed is unknown, defaulting to 1000 [ 554.292089][T20856] lo speed is unknown, defaulting to 1000 [ 554.383704][T20919] __nla_validate_parse: 2 callbacks suppressed [ 554.383721][T20919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3807'. [ 554.437081][T20919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3807'. [ 554.446105][T20919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3807'. [ 554.522054][T20856] lo speed is unknown, defaulting to 1000 [ 554.755204][T20856] lo speed is unknown, defaulting to 1000 [ 554.804478][T20923] netlink: 'syz.3.3809': attribute type 3 has an invalid length. [ 554.812732][T20923] netlink: 'syz.3.3809': attribute type 1 has an invalid length. [ 554.820840][T20923] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3809'. [ 554.904571][T20930] syzkaller1: entered allmulticast mode [ 555.002509][T20856] lo speed is unknown, defaulting to 1000 [ 555.097904][T15775] Bluetooth: hci0: command 0x080f tx timeout [ 555.254366][T20856] lo speed is unknown, defaulting to 1000 [ 555.491580][T20856] lo speed is unknown, defaulting to 1000 [ 555.575824][T20953] netlink: 'syz.3.3817': attribute type 1 has an invalid length. [ 555.641629][T20953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3817'. [ 555.657354][T20953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3817'. [ 555.666567][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 555.736507][T20856] lo speed is unknown, defaulting to 1000 [ 555.929585][T20856] lo speed is unknown, defaulting to 1000 [ 556.090615][T20896] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.090766][T20906] virt_wifi0 speed is unknown, defaulting to 1000 [ 556.576049][T20906] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.946139][T20970] syzkaller1: entered promiscuous mode [ 556.962070][T20970] syzkaller1: entered allmulticast mode [ 557.167631][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'. [ 557.180773][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'. [ 557.879285][T20993] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 557.940734][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3828'. [ 558.553693][T21002] netlink: 'syz.3.3831': attribute type 3 has an invalid length. [ 558.565227][T21002] netlink: 'syz.3.3831': attribute type 1 has an invalid length. [ 558.819571][T21016] IPv6: sit1: Disabled Multicast RS [ 558.916875][T21018] virt_wifi0 speed is unknown, defaulting to 1000 [ 558.961607][T21024] netlink: 'syz.5.3837': attribute type 1 has an invalid length. [ 559.103280][T21031] netlink: 'syz.2.3839': attribute type 1 has an invalid length. [ 559.129847][T21027] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 559.146848][T21027] bond10: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 559.160499][T21027] bond10: (slave vxcan3): making interface the new active one [ 559.188265][T21027] bond10: (slave vxcan3): Enslaving as an active interface with an up link [ 559.224288][T21030] bond10 (unregistering): (slave vxcan3): Releasing backup interface [ 559.251759][T21030] bond10 (unregistering): Released all slaves [ 559.401753][T21018] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.560272][T21044] netlink: 'syz.5.3841': attribute type 1 has an invalid length. [ 559.665076][T21055] __nla_validate_parse: 53 callbacks suppressed [ 559.665100][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3841'. [ 559.720136][T21055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3841'. [ 559.869272][T21044] 8021q: adding VLAN 0 to HW filter on device bond10 [ 559.932219][T21018] lo speed is unknown, defaulting to 1000 [ 559.982011][T21065] virt_wifi0 speed is unknown, defaulting to 1000 [ 559.991387][T21051] virt_wifi0 speed is unknown, defaulting to 1000 [ 560.370546][T21065] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.659626][T21086] netlink: 'syz.5.3852': attribute type 1 has an invalid length. [ 560.714130][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 560.723381][T21087] IPv6: Can't replace route, no match found [ 560.748130][T21090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3852'. [ 560.848639][T21090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3852'. [ 560.877229][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3852'. [ 560.984359][T21065] lo speed is unknown, defaulting to 1000 [ 560.993717][T21051] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.395980][T21051] lo speed is unknown, defaulting to 1000 [ 561.657541][T21107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3859'. [ 561.667932][T21107] nbd: must specify a size in bytes for the device [ 561.696838][T21107] netlink: 'syz.5.3859': attribute type 1 has an invalid length. [ 561.707575][T21107] net_ratelimit: 37 callbacks suppressed [ 561.707596][T21107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.992755][T21112] netlink: 'syz.5.3861': attribute type 3 has an invalid length. [ 562.185150][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3862'. [ 562.202825][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3862'. [ 562.212174][T21115] netlink: 'syz.0.3862': attribute type 12 has an invalid length. [ 562.220307][T21115] netlink: 'syz.0.3862': attribute type 11 has an invalid length. [ 562.938484][T21123] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 562.994303][T21132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3865'. [ 563.693742][T21142] netlink: 'syz.3.3870': attribute type 3 has an invalid length. [ 563.702334][T21142] netlink: 'syz.3.3870': attribute type 1 has an invalid length. [ 564.075359][T21165] ip6gretap1: entered allmulticast mode [ 564.393715][T21185] netlink: 'syz.3.3880': attribute type 1 has an invalid length. [ 564.583444][T21197] vlan1: entered promiscuous mode [ 564.588800][T21197] team0: entered promiscuous mode [ 564.594012][T21197] team_slave_0: entered promiscuous mode [ 564.601780][T21197] team_slave_1: entered promiscuous mode [ 564.641937][T21199] siw: device registration error -23 [ 564.722414][T21204] geneve2: entered promiscuous mode [ 564.729082][T21204] geneve2: entered allmulticast mode [ 564.741101][T21195] pim6reg1: entered promiscuous mode [ 564.755211][T21195] pim6reg1: entered allmulticast mode [ 564.939102][T21218] __nla_validate_parse: 9 callbacks suppressed [ 564.939122][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3890'. [ 564.997802][T21226] netlink: 'syz.3.3893': attribute type 1 has an invalid length. [ 565.010203][T21223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3891'. [ 565.043876][T21223] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3891'. [ 565.079678][T21226] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 565.081232][T21227] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 565.308073][T21239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3897'. [ 565.330769][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 565.358962][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 565.360034][T21239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3897'. [ 565.368154][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 565.376704][T21221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 565.397294][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3896'. [ 565.414706][T21240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3896'. [ 565.461706][T21243] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.603354][T21251] bond5: (slave lo): Releasing backup interface [ 565.633235][T21251] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 565.705330][T21251] ¾x9ÿ: left allmulticast mode [ 565.745363][T21251] ¾x9ÿ: left promiscuous mode [ 565.774473][T21251] bridge0: port 1(1¾x9ÿ) entered disabled state [ 565.849426][T21251] bridge_slave_1: left allmulticast mode [ 565.867414][T21251] bridge_slave_1: left promiscuous mode [ 565.916381][T21251] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.973368][T21251] bond0: (slave bond_slave_0): Releasing backup interface [ 566.022391][T21251] bond0: (slave bond_slave_1): Releasing backup interface [ 566.060873][T21251] team0: Port device team_slave_0 removed [ 566.079917][T21251] team0: Port device team_slave_1 removed [ 566.095336][T21251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.115210][T21251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.132050][T21251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.160026][T21243] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.784448][T21243] lo speed is unknown, defaulting to 1000 [ 566.849706][T21300] validate_nla: 1 callbacks suppressed [ 566.849730][T21300] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 567.138069][T21307] netlink: 'syz.0.3911': attribute type 4 has an invalid length. [ 567.213441][T21313] ip6tnl0: Caught tx_queue_len zero misconfig [ 567.316387][T21308] virt_wifi0 speed is unknown, defaulting to 1000 [ 567.991283][T21308] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.095154][T21338] : renamed from bond_slave_0 [ 568.373929][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.387680][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.396364][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 568.485518][T21308] lo speed is unknown, defaulting to 1000 [ 569.080932][T21356] netlink: 'syz.0.3924': attribute type 1 has an invalid length. [ 569.556407][T21368] tipc: Enabling of bearer rejected, failed to enable media [ 569.675098][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.701465][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.719929][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.777343][T21378] netlink: 'syz.1.3929': attribute type 3 has an invalid length. [ 569.785664][T21378] netlink: 'syz.1.3929': attribute type 3 has an invalid length. [ 569.793743][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.029745][T21391] vxcan1: entered allmulticast mode [ 570.059220][T21393] __nla_validate_parse: 17 callbacks suppressed [ 570.059239][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 570.141794][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3933'. [ 570.338740][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 570.348645][T21406] netlink: 'syz.1.3936': attribute type 1 has an invalid length. [ 570.450886][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3936'. [ 570.619126][T21406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3936'. [ 570.643320][T21418] macsec1: entered promiscuous mode [ 570.651143][T21406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3936'. [ 570.667666][T21418] macsec0: entered promiscuous mode [ 570.680353][T21418] macsec1: entered allmulticast mode [ 570.685698][T21418] macsec0: entered allmulticast mode [ 570.719806][T21418] macsec0: left allmulticast mode [ 570.732327][T21418] macsec0: left promiscuous mode [ 570.891425][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3940'. [ 570.919542][T21420] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3940'. [ 571.165173][T21428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 571.301333][T21432] ieee802154 phy1 wpan1: encryption failed: -90 [ 571.317950][T21439] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.444049][T21441] openvswitch: netlink: Message has 4 unknown bytes. [ 571.523406][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3946'. [ 571.586832][T21457] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 571.707354][T21439] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.778834][T21457] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.912171][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 572.108886][T21468] netlink: 'syz.3.3951': attribute type 1 has an invalid length. [ 572.415567][T21439] lo speed is unknown, defaulting to 1000 [ 572.417802][T21457] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.173624][T21457] lo speed is unknown, defaulting to 1000 [ 573.417638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 573.425771][ C0] lec:lec_tx_timeout: lec0 [ 574.234297][T21506] virt_wifi0 speed is unknown, defaulting to 1000 [ 574.335313][T21503] virt_wifi0 speed is unknown, defaulting to 1000 [ 575.147880][T21536] tipc: Enabled bearer , priority 0 [ 575.158550][T21536] syzkaller0: entered promiscuous mode [ 575.164068][T21536] syzkaller0: entered allmulticast mode [ 575.307952][T21536] tipc: Resetting bearer [ 575.359322][T21535] tipc: Resetting bearer [ 575.431255][T21535] tipc: Disabling bearer [ 575.820713][T21541] virt_wifi0 speed is unknown, defaulting to 1000 [ 575.856856][T21540] bond14: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 575.882024][T21540] bond14 (unregistering): Released all slaves [ 575.913786][T21506] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.981966][T21555] syzkaller0: left promiscuous mode [ 575.989075][T21555] syzkaller0: left allmulticast mode [ 576.240487][T21561] netlink: 'syz.0.3979': attribute type 8 has an invalid length. [ 576.257460][T21561] netlink: 'syz.0.3979': attribute type 9 has an invalid length. [ 576.270992][T21561] netlink: 'syz.0.3979': attribute type 10 has an invalid length. [ 576.289204][T21561] netlink: 'syz.0.3979': attribute type 11 has an invalid length. [ 576.304192][T21561] __nla_validate_parse: 6 callbacks suppressed [ 576.304213][T21561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3979'. [ 576.351810][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'. [ 576.691288][T21569] netlink: 'syz.0.3980': attribute type 1 has an invalid length. [ 576.842726][T21569] bond3: entered promiscuous mode [ 576.852115][T21569] bond3: entered allmulticast mode [ 576.901008][T21569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.024987][T21503] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.032102][T21506] lo speed is unknown, defaulting to 1000 [ 577.041621][T21576] netlink: 'syz.2.3982': attribute type 2 has an invalid length. [ 577.068520][T21576] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3982'. [ 577.235063][T21580] virt_wifi0 speed is unknown, defaulting to 1000 [ 577.245561][T21582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.290223][ T979] lo speed is unknown, defaulting to 1000 [ 577.310183][T21588] netlink: 'syz.2.3984': attribute type 3 has an invalid length. [ 577.318664][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3984'. [ 577.388981][T21585] can: request_module (can-proto-3) failed. [ 577.641755][T21595] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 577.741198][T21541] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.058203][T21503] lo speed is unknown, defaulting to 1000 [ 578.320142][T21580] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.860235][T21541] lo speed is unknown, defaulting to 1000 [ 579.226057][T21580] lo speed is unknown, defaulting to 1000 [ 579.311170][T21655] syzkaller0: entered promiscuous mode [ 579.317523][T21655] syzkaller0: entered allmulticast mode [ 580.019073][T21672] IPVS: set_ctl: invalid protocol: 20 172.20.20.28:20001 [ 580.132614][T21675] netlink: 'syz.2.4001': attribute type 3 has an invalid length. [ 580.142449][T21675] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 580.150281][T21675] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4001'. [ 580.689995][T15775] Bluetooth: hci4: command 0x0406 tx timeout [ 581.653312][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4007'. [ 581.827240][T21706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4008'. [ 582.062702][T21713] netlink: 'syz.0.4010': attribute type 1 has an invalid length. [ 582.136510][T21715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4010'. [ 582.195291][T21718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4010'. [ 582.240518][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4010'. [ 582.501582][T21729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4013'. [ 582.800137][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4016'. [ 582.919348][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 583.272766][T21754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4021'. [ 583.324613][T21761] syzkaller0: entered promiscuous mode [ 583.332000][T21761] syzkaller0: entered allmulticast mode [ 583.363581][T21749] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.495778][T21768] netlink: 'syz.0.4023': attribute type 1 has an invalid length. [ 583.575672][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4023'. [ 583.974745][T21749] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.243294][T21790] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 584.578057][T21795] netlink: 'syz.5.4033': attribute type 12 has an invalid length. [ 584.627516][ T65] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.636870][ T65] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.646585][ T65] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.656360][ T65] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.677906][T21749] lo speed is unknown, defaulting to 1000 [ 584.741264][T21807] virt_wifi0 speed is unknown, defaulting to 1000 [ 584.885969][T21811] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20002 [ 584.988562][T21813] virt_wifi0 speed is unknown, defaulting to 1000 [ 585.332363][T21807] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.415065][T21826] netlink: 'syz.3.4040': attribute type 1 has an invalid length. [ 585.914642][T21813] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.115143][T21813] lo speed is unknown, defaulting to 1000 [ 586.299455][T21807] lo speed is unknown, defaulting to 1000 [ 586.309279][T21850] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.771993][T21850] ip6_vti0 speed is unknown, defaulting to 1000 [ 586.928934][ T5149] Bluetooth: hci2: command 0x0401 tx timeout [ 587.190126][T21850] lo speed is unknown, defaulting to 1000 [ 588.063894][T21867] __nla_validate_parse: 10 callbacks suppressed [ 588.063916][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4051'. [ 588.978939][T21870] virt_wifi0 speed is unknown, defaulting to 1000 [ 589.170973][T21876] netlink: 'syz.3.4053': attribute type 3 has an invalid length. [ 589.189239][T21876] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4053'. [ 589.500828][T21893] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4057'. [ 589.614215][T21870] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.652477][T21896] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4058'. [ 589.691226][T21890] tipc: Enabled bearer , priority 0 [ 589.719136][T21890] syzkaller0: entered promiscuous mode [ 589.734960][T21890] syzkaller0: entered allmulticast mode [ 589.831426][T21890] tipc: Resetting bearer [ 590.033840][T21902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4060'. [ 590.149158][T21902] syz_tun: entered promiscuous mode [ 590.165548][T21902] syz_tun: refused to change device tx_queue_len [ 590.179490][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4065'. [ 590.206117][T21902] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 590.209932][T21920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4065'. [ 590.365544][T21870] lo speed is unknown, defaulting to 1000 [ 590.492438][T21889] tipc: Resetting bearer [ 590.523547][T21889] tipc: Disabling bearer [ 590.546183][T21925] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.634757][T21928] netlink: 'syz.1.4067': attribute type 1 has an invalid length. [ 590.680508][T21928] netlink: 'syz.1.4067': attribute type 3 has an invalid length. [ 590.727459][T21928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4067'. [ 591.270955][T21948] syzkaller1: entered promiscuous mode [ 591.276938][T21948] syzkaller1: entered allmulticast mode [ 591.661750][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4076'. [ 591.839609][T21952] virt_wifi0 speed is unknown, defaulting to 1000 [ 592.160565][T21925] ip6_vti0 speed is unknown, defaulting to 1000 [ 592.192661][T21973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4079'. [ 592.391652][T21976] FAULT_INJECTION: forcing a failure. [ 592.391652][T21976] name failslab, interval 1, probability 0, space 0, times 0 [ 592.417774][T21976] CPU: 1 UID: 0 PID: 21976 Comm: syz.2.4080 Not tainted syzkaller #0 PREEMPT(full) [ 592.417806][T21976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.417820][T21976] Call Trace: [ 592.417829][T21976] [ 592.417838][T21976] dump_stack_lvl+0xe8/0x150 [ 592.417873][T21976] should_fail_ex+0x414/0x560 [ 592.417915][T21976] should_failslab+0xa8/0x100 [ 592.417944][T21976] __kmalloc_noprof+0xdf/0x800 [ 592.417965][T21976] ? sock_kmalloc+0xd6/0x160 [ 592.418005][T21976] sock_kmalloc+0xd6/0x160 [ 592.418035][T21976] ____sys_sendmsg+0x1b5/0x820 [ 592.418068][T21976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.418105][T21976] ? import_iovec+0x74/0xa0 [ 592.418135][T21976] ___sys_sendmsg+0x21f/0x2a0 [ 592.418164][T21976] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.418194][T21976] ? kstrtouint+0x6e/0xe0 [ 592.418242][T21976] ? __fget_files+0x2a/0x420 [ 592.418271][T21976] ? __fget_files+0x3a0/0x420 [ 592.418301][T21976] __sys_sendmmsg+0x227/0x430 [ 592.418327][T21976] ? __pfx___sys_sendmmsg+0x10/0x10 [ 592.418346][T21976] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 592.418387][T21976] ? ksys_write+0x22a/0x250 [ 592.418406][T21976] ? __pfx_ksys_write+0x10/0x10 [ 592.418428][T21976] __x64_sys_sendmmsg+0xa0/0xc0 [ 592.418451][T21976] do_syscall_64+0xec/0xf80 [ 592.418469][T21976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.418485][T21976] ? trace_irq_disable+0x37/0x100 [ 592.418510][T21976] ? clear_bhb_loop+0x60/0xb0 [ 592.418530][T21976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.418547][T21976] RIP: 0033:0x7f94a798f749 [ 592.418563][T21976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.418578][T21976] RSP: 002b:00007f94a88e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.418597][T21976] RAX: ffffffffffffffda RBX: 00007f94a7be5fa0 RCX: 00007f94a798f749 [ 592.418610][T21976] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 592.418621][T21976] RBP: 00007f94a88e4090 R08: 0000000000000000 R09: 0000000000000000 [ 592.418632][T21976] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.418643][T21976] R13: 00007f94a7be6038 R14: 00007f94a7be5fa0 R15: 00007ffc0ec0a838 [ 592.418670][T21976] [ 592.941705][T21952] ip6_vti0 speed is unknown, defaulting to 1000 [ 592.992608][T21984] netpci0: tun_chr_ioctl cmd 1074025677 [ 592.998707][T21984] netpci0: linktype set to 773 [ 593.138686][T21925] lo speed is unknown, defaulting to 1000 [ 593.328825][T21995] virt_wifi0 speed is unknown, defaulting to 1000 [ 593.808914][T21952] lo speed is unknown, defaulting to 1000 [ 593.862556][T21999] __nla_validate_parse: 4 callbacks suppressed [ 593.862575][T21999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'. [ 593.878889][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'. [ 593.965737][T21996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4087'. [ 593.977663][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.045747][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4087'. [ 594.125896][T21995] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.248121][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'. [ 594.633603][T21995] lo speed is unknown, defaulting to 1000 [ 594.759250][T22012] FAULT_INJECTION: forcing a failure. [ 594.759250][T22012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.817149][T22012] CPU: 0 UID: 0 PID: 22012 Comm: syz.5.4091 Not tainted syzkaller #0 PREEMPT(full) [ 594.817180][T22012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.817194][T22012] Call Trace: [ 594.817203][T22012] [ 594.817214][T22012] dump_stack_lvl+0xe8/0x150 [ 594.817250][T22012] should_fail_ex+0x414/0x560 [ 594.817279][T22012] _copy_from_user+0x2d/0xb0 [ 594.817299][T22012] ____sys_sendmsg+0x2fe/0x820 [ 594.817323][T22012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.817349][T22012] ? import_iovec+0x74/0xa0 [ 594.817370][T22012] ___sys_sendmsg+0x21f/0x2a0 [ 594.817391][T22012] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.817414][T22012] ? kstrtouint+0x6e/0xe0 [ 594.817479][T22012] ? __fget_files+0x2a/0x420 [ 594.817506][T22012] ? __fget_files+0x3a0/0x420 [ 594.817548][T22012] __sys_sendmmsg+0x227/0x430 [ 594.817572][T22012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 594.817589][T22012] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 594.817625][T22012] ? ksys_write+0x22a/0x250 [ 594.817641][T22012] ? __pfx_ksys_write+0x10/0x10 [ 594.817661][T22012] __x64_sys_sendmmsg+0xa0/0xc0 [ 594.817681][T22012] do_syscall_64+0xec/0xf80 [ 594.817698][T22012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.817714][T22012] ? clear_bhb_loop+0x60/0xb0 [ 594.817732][T22012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.817747][T22012] RIP: 0033:0x7f616718f749 [ 594.817760][T22012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.817774][T22012] RSP: 002b:00007f6168001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 594.817790][T22012] RAX: ffffffffffffffda RBX: 00007f61673e5fa0 RCX: 00007f616718f749 [ 594.817802][T22012] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 594.817811][T22012] RBP: 00007f6168001090 R08: 0000000000000000 R09: 0000000000000000 [ 594.817821][T22012] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.817830][T22012] R13: 00007f61673e6038 R14: 00007f61673e5fa0 R15: 00007ffe54570118 [ 594.817876][T22012] [ 595.057906][T22014] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 595.063111][T21996] virt_wifi0 speed is unknown, defaulting to 1000 [ 595.071532][T22014] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 595.278231][T22005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 595.508640][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 595.545740][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 596.128204][T21996] ip6_vti0 speed is unknown, defaulting to 1000 [ 596.438399][T22056] FAULT_INJECTION: forcing a failure. [ 596.438399][T22056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.494331][T22056] CPU: 1 UID: 0 PID: 22056 Comm: syz.1.4102 Not tainted syzkaller #0 PREEMPT(full) [ 596.494363][T22056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.494378][T22056] Call Trace: [ 596.494386][T22056] [ 596.494396][T22056] dump_stack_lvl+0xe8/0x150 [ 596.494430][T22056] should_fail_ex+0x414/0x560 [ 596.494471][T22056] _copy_to_user+0x31/0xb0 [ 596.494500][T22056] simple_read_from_buffer+0xe1/0x170 [ 596.494533][T22056] proc_fail_nth_read+0x1b3/0x220 [ 596.494560][T22056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.494587][T22056] ? rw_verify_area+0x2a6/0x4d0 [ 596.494621][T22056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.494646][T22056] vfs_read+0x200/0xa30 [ 596.494665][T22056] ? fdget_pos+0x247/0x320 [ 596.494697][T22056] ? __pfx___mutex_lock+0x10/0x10 [ 596.494723][T22056] ? __pfx_vfs_read+0x10/0x10 [ 596.494745][T22056] ? __fget_files+0x2a/0x420 [ 596.494777][T22056] ? __fget_files+0x3a0/0x420 [ 596.494803][T22056] ? __fget_files+0x2a/0x420 [ 596.494840][T22056] ksys_read+0x145/0x250 [ 596.494862][T22056] ? __pfx_ksys_read+0x10/0x10 [ 596.494895][T22056] do_syscall_64+0xec/0xf80 [ 596.494918][T22056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.494939][T22056] ? trace_irq_disable+0x37/0x100 [ 596.494968][T22056] ? clear_bhb_loop+0x60/0xb0 [ 596.494994][T22056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.495015][T22056] RIP: 0033:0x7f0f2fd8e15c [ 596.495035][T22056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 596.495054][T22056] RSP: 002b:00007f0f30cae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.495076][T22056] RAX: ffffffffffffffda RBX: 00007f0f2ffe5fa0 RCX: 00007f0f2fd8e15c [ 596.495093][T22056] RDX: 000000000000000f RSI: 00007f0f30cae0a0 RDI: 0000000000000004 [ 596.495107][T22056] RBP: 00007f0f30cae090 R08: 0000000000000000 R09: 0000000000000000 [ 596.495121][T22056] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.495134][T22056] R13: 00007f0f2ffe6038 R14: 00007f0f2ffe5fa0 R15: 00007ffd5dddf038 [ 596.495176][T22056] [ 596.865873][T22063] virt_wifi0 speed is unknown, defaulting to 1000 [ 597.035697][T22070] netlink: 'syz.1.4107': attribute type 2 has an invalid length. [ 597.052067][T22070] : entered promiscuous mode [ 597.148991][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 597.159682][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4107'. [ 597.740723][T21996] lo speed is unknown, defaulting to 1000 [ 597.989873][T22063] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.870933][T22063] lo speed is unknown, defaulting to 1000 [ 599.380091][T22108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4115'. [ 599.512176][T22119] pim6reg1: entered promiscuous mode [ 599.518101][T22119] pim6reg1: entered allmulticast mode [ 599.525129][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4117'. [ 599.852787][T22124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4118'. [ 599.925511][T22124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4118'. [ 600.078363][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4119'. [ 600.175293][T22133] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 600.848684][T22157] --map-set only usable from mangle table [ 600.934585][T22157] bond15: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 600.980477][T22157] bond15 (unregistering): Released all slaves [ 601.262895][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4129'. [ 601.296325][T22167] syz_tun: left promiscuous mode [ 601.314813][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4129'. [ 601.353011][T22167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.421406][T22174] netlink: 'syz.2.4128': attribute type 1 has an invalid length. [ 601.494820][T17379] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.562928][T22177] tipc: Enabled bearer , priority 0 [ 601.610833][T22177] syzkaller0: entered promiscuous mode [ 601.644398][T22177] syzkaller0: entered allmulticast mode [ 601.751732][T22177] tipc: Resetting bearer [ 601.829510][T22176] tipc: Resetting bearer [ 601.914630][T22176] tipc: Disabling bearer [ 602.068922][T22196] netlink: 'syz.5.4136': attribute type 32 has an invalid length. [ 602.133303][T22203] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4138'. [ 602.172270][T22205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 602.398526][T22215] netlink: 'syz.0.4143': attribute type 21 has an invalid length. [ 602.398568][T22217] netlink: 'syz.0.4143': attribute type 21 has an invalid length. [ 602.423011][T22215] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 602.530645][T22227] syzkaller0: entered promiscuous mode [ 602.536428][T22227] syzkaller0: entered allmulticast mode [ 602.544005][T22228] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4144'. [ 603.376448][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 603.403197][T22245] bridge_slave_0: mtu less than device minimum [ 603.410467][T22246] bridge_slave_0: mtu less than device minimum [ 603.975697][T22280] virt_wifi0 speed is unknown, defaulting to 1000 [ 604.057647][T22285] netlink: 'syz.1.4164': attribute type 39 has an invalid length. [ 604.180985][T22285] hsr_slave_1 (unregistering): left promiscuous mode [ 604.507714][T22280] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.104238][T22280] lo speed is unknown, defaulting to 1000 [ 605.248464][T22304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4171'. [ 605.267299][T22304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4171'. [ 605.433944][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 605.465960][T22316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.599433][T22305] virt_wifi0 speed is unknown, defaulting to 1000 [ 605.821441][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4174'. [ 605.842443][T22321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4174'. [ 606.199630][T22328] netlink: 'syz.1.4177': attribute type 10 has an invalid length. [ 606.213661][T22328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 606.307654][T22305] ip6_vti0 speed is unknown, defaulting to 1000 [ 606.354924][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4179'. [ 606.436672][T22339] IPv6: NLM_F_REPLACE set, but no existing node found! [ 606.483843][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 606.536652][T22342] ip6gre0: Caught tx_queue_len zero misconfig [ 606.693176][T22305] lo speed is unknown, defaulting to 1000 [ 607.040406][T22343] rdma_rxe: rxe_newlink: failed to add team0 [ 607.159445][T22350] sctp: [Deprecated]: syz.2.4184 (pid 22350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.159445][T22350] Use struct sctp_sack_info instead [ 607.712375][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 607.934271][T22369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4188'. [ 607.947842][T22369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4188'. [ 608.365930][T22383] IPVS: Scheduler module ip_vs_sip not found [ 608.744938][T22406] netlink: 'syz.3.4198': attribute type 2 has an invalid length. [ 608.822019][T22406] : entered promiscuous mode [ 608.974246][T22409] netlink: set zone limit has 4 unknown bytes [ 609.032265][T22420] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 609.349564][T22431] netlink: Unknown conntrack attr (0) [ 609.735448][T22449] virt_wifi0 speed is unknown, defaulting to 1000 [ 610.076805][T22463] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 610.150937][T22466] virt_wifi0 speed is unknown, defaulting to 1000 [ 610.288479][T22449] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.896443][T22482] __nla_validate_parse: 8 callbacks suppressed [ 610.896465][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4218'. [ 610.941352][T22466] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.958690][T22449] lo speed is unknown, defaulting to 1000 [ 611.432854][T22497] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.440611][T22497] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.471131][T22497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4221'. [ 611.482109][T22497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4221'. [ 611.572320][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 611.598164][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'. [ 611.721079][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4225'. [ 611.738215][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4225'. [ 611.765295][T22466] lo speed is unknown, defaulting to 1000 [ 611.866798][T22514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.875628][T22514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.896216][T22514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.947391][T22514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.031533][T22521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4230'. [ 612.178297][T22525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4232'. [ 612.190881][T22509] siw: device registration error -23 [ 612.217080][T22525] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4232'. [ 612.482194][T22532] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 613.322754][T22566] netlink: 'syz.2.4241': attribute type 21 has an invalid length. [ 613.382466][T22569] openvswitch: netlink: Message has 592 unknown bytes. [ 613.415940][T22569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.693740][T22584] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 613.871997][T22589] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 613.883207][T22589] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 613.946896][T22589] bond5: (slave vxcan3): making interface the new active one [ 613.973694][T22589] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 614.033176][T22590] bond5 (unregistering): (slave vxcan3): Releasing backup interface [ 614.070051][T22590] bond5 (unregistering): Released all slaves [ 614.241132][T22599] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 614.311752][T22599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.439473][T22611] pim6reg: entered allmulticast mode [ 614.534211][T22599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.632628][T22611] pim6reg: left allmulticast mode [ 614.885882][T22599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.109249][T22599] bond0: (slave netdevsim0): Releasing backup interface [ 615.133854][T22599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.397762][ T80] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.439958][ T80] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.473860][ T80] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.515456][ T80] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.778876][T22648] tipc: Resetting bearer [ 615.796720][T22648] tipc: Resetting bearer [ 615.861267][T22657] netlink: 'syz.0.4263': attribute type 10 has an invalid length. [ 615.964843][T22649] bridge7: port 1(veth11) entered blocking state [ 615.974605][T22649] bridge7: port 1(veth11) entered disabled state [ 615.981973][T22649] veth11: entered allmulticast mode [ 615.990688][T22649] veth11: entered promiscuous mode [ 616.038800][T22653] bridge7: port 2(veth0_to_bond) entered blocking state [ 616.048612][T22653] bridge7: port 2(veth0_to_bond) entered disabled state [ 616.056140][T22653] veth0_to_bond: entered allmulticast mode [ 616.071602][T22653] veth0_to_bond: entered promiscuous mode [ 616.161150][T22658] bridge7: port 3(veth13) entered blocking state [ 616.178323][T22658] bridge7: port 3(veth13) entered disabled state [ 616.195042][T22658] veth13: entered allmulticast mode [ 616.219657][T22658] veth13: entered promiscuous mode [ 616.294193][T22665] team0: Caught tx_queue_len zero misconfig [ 616.461937][T22673] netlink: 'syz.5.4267': attribute type 1 has an invalid length. [ 616.655644][T22673] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 616.689250][T22687] __nla_validate_parse: 11 callbacks suppressed [ 616.689274][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4266'. [ 616.838459][T22670] block nbd3: server does not support multiple connections per device. [ 616.855595][T22670] block nbd3: shutting down sockets [ 616.873181][T22694] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4271'. [ 616.923382][T22696] netlink: 'syz.5.4271': attribute type 1 has an invalid length. [ 617.069197][T22701] netlink: 'syz.3.4272': attribute type 12 has an invalid length. [ 617.117331][T22701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4272'. [ 617.267115][T22709] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4273'. [ 617.304760][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4273'. [ 617.435296][T22712] syzkaller0: entered promiscuous mode [ 617.455261][T22712] syzkaller0: entered allmulticast mode [ 617.628961][T22719] netlink: 'syz.5.4278': attribute type 1 has an invalid length. [ 617.674594][T22719] 8021q: adding VLAN 0 to HW filter on device bond12 [ 617.709838][T22719] bond12: (slave ip6gretap2): making interface the new active one [ 617.729256][T22719] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 617.799397][T22727] nbd: must specify at least one socket [ 617.835183][T22719] veth15: entered promiscuous mode [ 617.850335][T22719] bond12: (slave veth15): Enslaving as an active interface with a down link [ 617.876835][T22721] erspan0: entered allmulticast mode [ 617.900673][T22721] bond12: (slave erspan0): Enslaving as an active interface with an up link [ 617.974686][T22719] bond12: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 618.083699][T22734] netlink: 'syz.1.4282': attribute type 1 has an invalid length. [ 618.101541][T22734] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4282'. [ 618.345151][T22746] bond5: Unable to set down delay as MII monitoring is disabled [ 618.359751][T22746] bond5 (unregistering): Released all slaves [ 618.838699][T22780] netlink: 'syz.2.4294': attribute type 2 has an invalid length. [ 618.872445][T22780] netlink: 'syz.2.4294': attribute type 1 has an invalid length. [ 619.299038][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'. [ 619.354825][T22808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4302'. [ 619.486574][T22817] netlink: 'syz.1.4306': attribute type 8 has an invalid length. [ 619.531028][T22819] tipc: Enabled bearer , priority 0 [ 619.542422][T22819] syzkaller0: entered promiscuous mode [ 619.549711][T22819] syzkaller0: entered allmulticast mode [ 619.559181][T22819] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 619.603747][T22819] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 619.664328][T22827] syzkaller1: entered promiscuous mode [ 619.681947][T22827] syzkaller1: entered allmulticast mode [ 619.690021][T22818] tipc: Resetting bearer [ 619.709337][T22818] tipc: Disabling bearer [ 619.721528][T22822] veth0_vlan: left promiscuous mode [ 619.729234][T22822] veth0_vlan: entered promiscuous mode [ 619.735682][T22822] team0: Device veth0_vlan failed to register rx_handler [ 620.040120][T22845] virt_wifi0 speed is unknown, defaulting to 1000 [ 620.213644][T22855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 620.919632][T22845] ip6_vti0 speed is unknown, defaulting to 1000 [ 621.519276][T22897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4325'. [ 621.649186][T22845] lo speed is unknown, defaulting to 1000 [ 621.731615][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4326'. [ 622.125192][T22882] siw: device registration error -23 [ 622.148050][T22848] virt_wifi0 speed is unknown, defaulting to 1000 [ 622.411094][T22848] ip6_vti0 speed is unknown, defaulting to 1000 [ 622.556924][T22848] lo speed is unknown, defaulting to 1000 [ 623.086275][T22921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4333'. [ 623.281264][T22925] syzkaller0: entered promiscuous mode [ 623.287770][T22925] syzkaller0: entered allmulticast mode [ 623.467680][T22934] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4337'. [ 623.477967][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4337'. [ 623.985136][T22947] virt_wifi0 speed is unknown, defaulting to 1000 [ 624.191699][T22959] syzkaller1: entered promiscuous mode [ 624.219414][T22959] syzkaller1: entered allmulticast mode [ 624.452640][T22965] vxcan3: entered allmulticast mode [ 624.966917][T22974] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.974252][T22974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.981895][T22974] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.989108][T22974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.022772][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4350'. [ 625.037732][T22974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.057887][T22947] ip6_vti0 speed is unknown, defaulting to 1000 [ 625.102431][T22974] pim6reg: entered allmulticast mode [ 625.553080][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'. [ 625.601179][T22947] lo speed is unknown, defaulting to 1000 [ 625.890227][T23000] virt_wifi0 speed is unknown, defaulting to 1000 [ 626.244009][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4360'. [ 626.258373][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4360'. [ 626.388784][T23000] ip6_vti0 speed is unknown, defaulting to 1000 [ 626.725633][T23019] validate_nla: 1 callbacks suppressed [ 626.725652][T23019] netlink: 'syz.0.4362': attribute type 1 has an invalid length. [ 626.758013][T23019] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4362'. [ 626.776095][T23019] NCSI netlink: No device for ifindex 0 [ 626.929219][T23030] gre0: left allmulticast mode [ 626.935163][T23030] erspan0: left allmulticast mode [ 626.943150][T23030] ip6tnl0: left allmulticast mode [ 626.971357][T23030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.058420][T23000] lo speed is unknown, defaulting to 1000 [ 629.895132][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.005808][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 635.254379][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 635.264963][ C0] lec:lec_tx_timeout: lec0 [ 643.336362][T23042] virt_wifi0 speed is unknown, defaulting to 1000 [ 643.835763][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4369'. [ 644.196123][T23046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4369'. [ 646.334244][T23046] netlink: 540 bytes leftover after parsing attributes in process `syz.5.4369'. [ 664.446358][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 664.775621][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 664.935370][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 665.513905][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 665.965163][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 668.715897][ T5842] Bluetooth: hci1: command tx timeout [ 668.964963][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.115978][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.315689][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 670.095425][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 670.745932][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 670.796708][ T5842] Bluetooth: hci1: command tx timeout [ 672.855145][T15775] Bluetooth: hci1: command tx timeout [ 673.385575][T15775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 673.563786][T15775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 673.996383][ T5149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 674.373757][T15775] Bluetooth: hci6: command tx timeout [ 674.845466][T15775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 674.946675][T15775] Bluetooth: hci1: command tx timeout [ 675.176032][T15775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 676.466249][ T5842] Bluetooth: hci6: command tx timeout [ 678.214135][T23059] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.496373][ T5842] Bluetooth: hci7: command tx timeout [ 678.536324][ T5842] Bluetooth: hci6: command tx timeout [ 680.553617][ T5842] Bluetooth: hci7: command tx timeout [ 680.616495][ T5842] Bluetooth: hci6: command tx timeout [ 681.175657][T15775] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 681.475985][T15775] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 681.706125][T15775] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 682.255927][T15775] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 682.664207][T15775] Bluetooth: hci7: command tx timeout [ 683.196497][T15775] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 684.694693][T15775] Bluetooth: hci7: command tx timeout [ 685.714538][T23061] virt_wifi0 speed is unknown, defaulting to 1000 [ 686.145219][T15775] Bluetooth: hci8: command tx timeout [ 686.986226][T23064] virt_wifi0 speed is unknown, defaulting to 1000 [ 688.215832][T15775] Bluetooth: hci8: command tx timeout [ 690.296573][T15775] Bluetooth: hci8: command tx timeout [ 691.266763][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.375805][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 692.395768][T15775] Bluetooth: hci8: command tx timeout [ 696.390781][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 696.402172][ C0] lec:lec_tx_timeout: lec0 [ 707.206880][T23067] virt_wifi0 speed is unknown, defaulting to 1000 [ 709.566814][T23042] ip6_vti0 speed is unknown, defaulting to 1000 [ 732.233592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.936295][T23086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.986402][T23086] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 735.076565][T23086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 735.216788][T23086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 735.256406][T23086] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 735.746208][T23089] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 736.055088][T23089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.364126][T23089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.896124][T23089] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 737.373807][T23089] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 741.196038][T15775] Bluetooth: hci9: command tx timeout [ 741.506461][ T5149] Bluetooth: hci5: command tx timeout [ 742.824850][T15775] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 742.944772][T15775] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 743.291445][T15775] Bluetooth: hci9: command tx timeout [ 743.416827][T15775] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 743.596742][T15775] Bluetooth: hci5: command tx timeout [ 744.131480][T15775] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 744.866811][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 745.335810][ T5149] Bluetooth: hci9: command tx timeout [ 745.655264][ T5149] Bluetooth: hci5: command tx timeout [ 746.185247][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 746.285911][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 746.845232][ T5149] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 747.416363][ T5149] Bluetooth: hci9: command tx timeout [ 747.506621][ T5149] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 747.736507][ T5842] Bluetooth: hci5: command tx timeout [ 748.123760][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 748.533703][T15775] Bluetooth: hci10: command tx timeout [ 749.665482][T23089] Bluetooth: hci2: command 0x0401 tx timeout [ 750.655098][T23089] Bluetooth: hci10: command tx timeout [ 752.706212][ T5149] Bluetooth: hci10: command tx timeout [ 752.774256][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.865256][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 753.026752][ T5149] Bluetooth: hci11: command tx timeout [ 754.784730][ T5149] Bluetooth: hci10: command tx timeout [ 755.094324][ T5149] Bluetooth: hci11: command tx timeout [ 757.186534][ T5149] Bluetooth: hci11: command tx timeout [ 758.211990][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 758.223794][ C0] lec:lec_tx_timeout: lec0 [ 759.256127][ T5149] Bluetooth: hci11: command tx timeout [ 775.374881][T23089] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 775.495841][T23089] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 775.545975][T23089] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 776.046442][T23089] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 776.496330][T23089] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 779.545506][T23089] Bluetooth: hci12: command tx timeout [ 781.684900][T23089] Bluetooth: hci12: command tx timeout [ 783.744573][T23089] Bluetooth: hci12: command tx timeout [ 785.846788][T23089] Bluetooth: hci12: command tx timeout [ 790.715441][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 791.925327][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 792.145537][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 792.266172][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 792.864571][T23089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.226753][T23089] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 793.344996][T23089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.804749][T23089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 794.265278][T23089] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 794.556299][T23089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 795.105602][T15775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 797.673664][ T5149] Bluetooth: hci13: command tx timeout [ 798.385726][T15775] Bluetooth: hci3: command tx timeout [ 798.606271][T15775] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 798.816847][T15775] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 799.144715][T23086] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 799.785416][ T5842] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 799.804080][ T5842] Bluetooth: hci13: command tx timeout [ 799.981270][ T5842] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 800.455685][ T5842] Bluetooth: hci3: command tx timeout [ 800.994475][T23110] Bluetooth: hci7: command 0x0406 tx timeout [ 801.035361][ T5149] Bluetooth: hci6: command 0x0406 tx timeout [ 801.894439][T23086] Bluetooth: hci13: command tx timeout [ 802.545457][T23089] Bluetooth: hci3: command tx timeout [ 804.026405][T23089] Bluetooth: hci13: command tx timeout [ 804.056063][T23110] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 804.226863][T23110] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 804.385462][T23110] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 804.626841][T23110] Bluetooth: hci3: command tx timeout [ 804.906785][T23110] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 805.345659][T23110] Bluetooth: hci14: command tx timeout [ 805.904699][T23110] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 807.431939][T23110] Bluetooth: hci14: command tx timeout [ 809.341655][T23110] Bluetooth: hci15: command tx timeout [ 809.522332][T23110] Bluetooth: hci14: command tx timeout [ 810.216621][ T3688] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.094473][T23110] Bluetooth: hci8: command 0x0406 tx timeout [ 811.415452][T23110] Bluetooth: hci15: command tx timeout [ 811.605154][T23110] Bluetooth: hci14: command tx timeout [ 813.515661][T15775] Bluetooth: hci15: command tx timeout [ 814.195743][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.280875][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 815.576106][T23110] Bluetooth: hci15: command tx timeout [ 817.746419][ T3688] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.303877][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 819.315240][ C0] lec:lec_tx_timeout: lec0 [ 823.305198][ T3688] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.766021][ T3688] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.385424][T15775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 835.535883][T15775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 835.745544][T15775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 836.345940][T15775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 836.605475][T15775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 839.676633][T15775] Bluetooth: hci4: command tx timeout [ 841.746632][T15775] Bluetooth: hci4: command tx timeout [ 843.832366][T15775] Bluetooth: hci4: command tx timeout [ 845.895843][T15775] Bluetooth: hci4: command tx timeout [ 853.996284][T23110] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 854.094585][T23110] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 854.323869][T23110] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 855.445459][T23089] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 855.934119][T23089] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 856.165812][T23086] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 856.861341][T15775] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 857.146345][T15775] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 857.875946][T23086] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 858.062096][T23086] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 859.095982][T23086] Bluetooth: hci16: command tx timeout [ 861.105671][T15775] Bluetooth: hci17: command tx timeout [ 861.174962][T15775] Bluetooth: hci16: command tx timeout [ 862.315559][T15775] Bluetooth: hci9: command 0x0406 tx timeout [ 862.415394][T15775] Bluetooth: hci5: command 0x0406 tx timeout [ 863.185664][ T5149] Bluetooth: hci17: command tx timeout [ 863.274560][ T5149] Bluetooth: hci16: command tx timeout [ 863.304139][T23089] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 864.186614][T23086] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 864.393663][T23110] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 865.205752][T23110] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 865.266796][T23110] Bluetooth: hci17: command tx timeout [ 865.425925][T23110] Bluetooth: hci16: command tx timeout [ 865.954759][T23086] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 866.895630][T15775] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 867.154585][T15775] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 867.354632][T23086] Bluetooth: hci17: command tx timeout [ 867.515236][T15775] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 868.235128][T15775] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 868.535524][T15775] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 869.415886][T23110] Bluetooth: hci18: command tx timeout [ 871.496682][T23086] Bluetooth: hci18: command tx timeout [ 871.836230][T23086] Bluetooth: hci19: command tx timeout [ 872.536077][T23086] Bluetooth: hci11: command 0x0406 tx timeout [ 872.625659][T23086] Bluetooth: hci10: command 0x0406 tx timeout [ 873.585822][T23110] Bluetooth: hci18: command tx timeout [ 873.895668][T23110] Bluetooth: hci19: command tx timeout [ 875.594253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.654723][T23110] Bluetooth: hci18: command tx timeout [ 875.785570][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 875.991753][T23110] Bluetooth: hci19: command tx timeout [ 878.091666][T23110] Bluetooth: hci19: command tx timeout [ 880.474781][ T3688] bond2 (unregistering): (slave gretap1): Releasing active interface [ 881.253372][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 881.265580][ C0] lec:lec_tx_timeout: lec0 [ 897.895318][T15775] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 898.074326][T15775] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 898.325376][T15775] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 898.984382][T15775] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 899.685149][T15775] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 902.534305][T23110] Bluetooth: hci20: command tx timeout [ 903.285935][T23110] Bluetooth: hci12: command 0x0406 tx timeout [ 904.616013][T23110] Bluetooth: hci20: command tx timeout [ 906.704253][T15775] Bluetooth: hci20: command tx timeout [ 908.776282][T15775] Bluetooth: hci20: command tx timeout [ 918.624488][T23086] Bluetooth: hci3: command 0x0406 tx timeout [ 918.706125][T23086] Bluetooth: hci13: command 0x0406 tx timeout [ 919.824568][T23089] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 920.305012][T15775] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 920.796044][T15775] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 921.244853][ T5149] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 921.575304][ T5149] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 921.744374][ T5149] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 921.874755][ T5149] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 922.096487][ T5149] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 922.876294][T23086] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 923.116773][ T31] INFO: task syz.3.4357:23000 blocked for more than 143 seconds. [ 923.154687][T23110] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to recv rpc [ 923.615958][ T31] Not tainted syzkaller #0 [ 923.924271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 924.113943][ T31] task:syz.3.4357 state:D stack:24416 pid:23000 tgid:22991 ppid:17153 task_flags:0x400140 flags:0x00080003 [ 924.576469][ T31] Call Trace: [ 924.856501][T23110] Bluetooth: hci21: command tx timeout [ 925.233649][ T31] [ 925.236670][ T31] __schedule+0x149b/0x4fd0 [ 925.444920][ T31] ? __pfx___schedule+0x10/0x10 [ 925.715645][ T31] ? schedule+0x91/0x360 [ 925.856547][ T31] schedule+0x165/0x360 [ 926.016302][ T31] schedule_preempt_disabled+0x13/0x30 [ 926.224366][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 926.394256][T23110] Bluetooth: hci22: command tx timeout [ 926.594627][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 926.655659][T23089] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 926.896400][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 926.934038][ T5149] Bluetooth: hci21: command tx timeout [ 927.174945][ T5149] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 927.385953][ T5149] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 927.486503][ T31] ? wake_up_q+0x99/0xd0 [ 927.915733][ T5149] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 928.144701][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 928.345536][ T31] down_write+0x1ab/0x1f0 [ 928.455724][ T5149] Bluetooth: hci22: command tx timeout [ 928.525894][ T5149] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 928.556059][ T31] ? __pfx_down_write+0x10/0x10 [ 928.834511][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 928.866722][T23086] Bluetooth: hci14: command 0x0406 tx timeout [ 928.986535][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 929.016313][T23086] Bluetooth: hci21: command tx timeout [ 929.095604][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 929.265860][ T31] rdma_dev_exit_net+0x8c/0x340 [ 929.455987][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 929.473836][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 929.483092][ T31] ? rtnl_is_locked+0x15/0x20 [ 929.491743][ T31] ops_undo_list+0x49a/0x990 [ 929.496397][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 929.506724][ T31] ? ops_init+0x469/0x5c0 [ 929.526044][ T31] setup_net+0x2e8/0x330 [ 929.756670][ T31] ? __pfx_setup_net+0x10/0x10 [ 929.896647][ T31] ? preinit_net+0x47d/0x780 [ 930.095041][ T31] copy_net_ns+0x3e3/0x570 [ 930.445858][ T31] create_new_namespaces+0x3e7/0x6a0 [ 930.535075][T23110] Bluetooth: hci22: command tx timeout [ 930.586359][ T31] ? security_capable+0x7e/0x2e0 [ 930.784617][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 931.106054][T23110] Bluetooth: hci21: command tx timeout [ 931.164855][ T31] ksys_unshare+0x4c8/0x8c0 [ 931.475658][ T5149] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 932.664306][ T5842] Bluetooth: hci22: command tx timeout