last executing test programs: 1m36.937878495s ago: executing program 3 (id=3030): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="240000001200010200000000fe3ad5000000000000000000060000000800e88004004380"], 0x24}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000b0000000000300000003000000003000000000000000000000900000000010000000000000700000000000000000000000300000000040000000200000000000000006100"], 0x0, 0x4b}, 0x28) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'veth1_vlan\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800048004000500080000003e"], 0x44}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000000380)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r7, &(0x7f0000000400)={0xa, 0x5e20, 0x4821, @mcast2, 0x2}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x5e1f, 0xfffffffe, @empty, 0x4}, 0x1c) close(0x3) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002abd7000fcdbdf2570001000030a0300", @ANYRES32=r3, @ANYBLOB="0c00990005000000240000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a0006000802110000010000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', 0x3}, 0x18) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x5) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) listen(r9, 0x2) listen(r9, 0x1) r11 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, &(0x7f0000000300)="60467123623d2b34c54a45a16b579ce99812b8d4adebfc9641c59f46269992457e29c54ef3554031b5f5dc7592f0973973626d51469e6a9fdf83cf7b3b8d4340c3c82b326d7df591dc8b16ee1b7729ec59aff946690fede468126a89641c2d93e51c2a74663de258ad") 1m36.764737672s ago: executing program 3 (id=3031): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000480)=@phonet={0x23, 0xff, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/13, 0xd}, 0x3}], 0x1, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getrule={0x14, 0x22, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x44) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) 1m34.779322575s ago: executing program 3 (id=3041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911016000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m34.411356927s ago: executing program 1 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffe00, 0x100000000000, 0x7}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x20, 0x8, 0x6a7, {{0x1f, 0x4, 0x0, 0x3, 0x7c, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0x3, [{@private=0xa010101, 0x3ff}, {@multicast1, 0x8}, {@multicast1, 0x1000}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}, {@broadcast, 0xfff}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x17, 0x3, 0x7, [{@empty, 0xf}, {@loopback, 0x8}, {@local}, {@private=0xa010102, 0x800}]}]}}}}}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000006c0)=@buf={0x5c, &(0x7f0000000640)="d360d6c85403b0fd0e2f92bc01e053cfa359f6949f9925c25adaec8ea01a5df34d49c7cdb7ad29ee29e65022ddfa256247d61fdb74cb0b068c6212c04db976e3881c3d1634c45599b5fd05d0bc7315a46499e39fd7348df3ab5a0d83"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x14, "4375bc038782496c3594ecd4b2bac97972070000"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0x2}, {}, {0x1c, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}]}}]}, 0x44}}, 0x24004000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={0x0, 0x23, "03c636b172cb9b0f37c78fa2520dff1540db125e62c107d9581950eaf3a4c2fc2e2486"}, &(0x7f0000000740)=0x2b) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000780)={r9, 0xfffffffd}, &(0x7f0000000800)=0x8) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xb0, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20020005}, 0x48000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b119e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a030000000000000000000700000009000100000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007440000000c0a01010000000000650c20dcaff5000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800b0001001d88d56a159a4500140000001000010000000008000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 1m34.323579911s ago: executing program 3 (id=3044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffe00, 0x100000000000, 0x7}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x20, 0x8, 0x6a7, {{0x1f, 0x4, 0x0, 0x3, 0x7c, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0x17, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0x3, [{@private=0xa010101, 0x3ff}, {@multicast1, 0x8}, {@multicast1, 0x1000}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}, {@broadcast, 0xfff}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x17, 0x3, 0x7, [{@empty, 0xf}, {@loopback, 0x8}, {@local}, {@private=0xa010102, 0x800}]}]}}}}}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000006c0)=@buf={0x5c, &(0x7f0000000640)="d360d6c85403b0fd0e2f92bc01e053cfa359f6949f9925c25adaec8ea01a5df34d49c7cdb7ad29ee29e65022ddfa256247d61fdb74cb0b068c6212c04db976e3881c3d1634c45599b5fd05d0bc7315a46499e39fd7348df3ab5a0d83"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x14, "4375bc038782496c3594ecd4b2bac97972070000"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0x2}, {}, {0x1c, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}]}}]}, 0x44}}, 0x24004000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={0x0, 0x23, "03c636b172cb9b0f37c78fa2520dff1540db125e62c107d9581950eaf3a4c2fc2e2486"}, &(0x7f0000000740)=0x2b) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000780)={r9, 0xfffffffd}, &(0x7f0000000800)=0x8) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xb0, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20020005}, 0x48000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b119e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a030000000000000000000700000009000100000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007440000000c0a01010000000000650c20dcaff5000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800b0001001d88d56a159a4500140000001000010000000008000000000084000a"], 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 1m34.234215543s ago: executing program 3 (id=3045): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x278, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x248, 0x2, [@TCA_CGROUP_ACT={0x184, 0x1, [@m_nat={0x180, 0x12, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xfff, 0x8, 0x10, 0x3}, @loopback, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x3, 0x1, 0xe, 0x3}, @local, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x41a, 0x1, 0x0, 0x288, 0x9}, @private=0xa010101, @private=0xa010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x1, 0x7, 0x33, 0x4}, @multicast1, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x5, 0x10000000, 0xa, 0x6}, @multicast1, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0x0, 0x6, 0xa}, @empty, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffca4, 0x20000007, 0x5, 0x80000000}, @multicast2, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1c000, 0x1, 0x2, 0xe465, 0x6}, @multicast2, @remote, 0xffffff00}}]}, {0x16, 0x6, "1e1b1f46506a3ca4cd2abe1f695c9173b230"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_CGROUP_EMATCHES={0xb0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1507fc7d2292", @TCF_META_TYPE_VAR="e9a887bc3dffdd35"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="046b2c0b106a", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cdf72e88329c0869d3", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f90a", @TCF_META_TYPE_VAR="da21", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0xdf36}, {0x4, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x16e, 0x7, 0x8}, {{0x4, 0x0, 0x1}, {0x4}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae1c}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff01}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100037af8ce4c94aa258acb75da70104fcfffffd80004f0000000000", @ANYRES32=0x0, @ANYBLOB="43120000000000001c0012800b0001006d616373656300000c00028005000b000100000008000500", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m34.145755733s ago: executing program 1 (id=3046): r0 = socket(0x23, 0x1, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x2400c8d4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)={0x54, r4, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @supported_rates={0x1, 0x4, [{0x4, 0x1}, {0x60}, {0x1}, {0x12, 0x1}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}]}, 0x54}}, 0x4014080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) accept$packet(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) unshare(0x20040600) pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="3752f4a83e012adf", 0x8}], 0x1, 0x100000000000000) close(r8) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x8010, r9, 0x80000000) 1m33.920793354s ago: executing program 3 (id=3049): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r6, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x8, 0x932, 0x8, 0x23691, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000540)=r0}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r9, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r10}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%ps \x00'}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5, 0x8}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x4a, &(0x7f0000000180)=""/74, 0x41000, 0xc, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x2, 0x80000000}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r7, r1, r8, r9, 0xffffffffffffffff, r11, r12, 0xffffffffffffffff, 0x1, r13], &(0x7f0000000700)=[{0x3, 0x4, 0xd, 0xc}, {0x2, 0x4, 0x8, 0x9}, {0x3, 0x1, 0x0, 0x6}, {0x2, 0x5, 0xd, 0x6}, {0x2, 0x5, 0xc, 0x6}, {0x3, 0x5, 0x3, 0x6}], 0x10, 0x4}, 0x94) 1m33.205224518s ago: executing program 1 (id=3053): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1014}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e1e, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x1}}}], 0x18}, 0x4004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000ed4c38253f939b1272acc8fec12a3be09dfce34e867fc31715141dc04c3407edc32f64262b147cca4282b6f7dd7707af8a3f547b6fc4d1e26b5c05b1368f56147a5077422f63d36aec6626cd381f9024fb20251540f9560d2f99cd01a88777ef048604b3dacad538d42d1453f9b2f461dda21cfdd03c1d5dbd7f7973aa6a725f57b1911bca9f2c4cae45d656826fcbaa8589545bd1c5c46cbef75068d20c6817e28a964184955db9044cdcdc5e96f12dba871d389764e43"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="1400"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1m32.634905328s ago: executing program 1 (id=3057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="5800000014001923", 0x8}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0xc6e9f000) mmap(&(0x7f0000131000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0xffffe000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0300007b8af8ff0000c56aeae3a5021ebe2c565bd2948100000000000000000007020000f4ffffffb703000008000020b70400"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x24, &(0x7f00000001c0)=""/36, 0x41100, 0x8, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0x2, 0x7}, 0x10, 0x17a19, r3, 0x6, &(0x7f0000000280)=[r0], &(0x7f0000000340)=[{0x1, 0x4, 0x7, 0xb}, {0x4, 0x4, 0xd, 0x17}, {0x4, 0x3, 0xf, 0x4}, {0x2, 0x1, 0xb, 0x8}, {0x5, 0x5, 0x7, 0xc}, {0x4, 0x5, 0xc, 0x5}], 0x10, 0x7}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x80800) shutdown(r5, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 1m30.108205984s ago: executing program 4 (id=3081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, 0x0, 0x8) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x68000005}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0xaf294b17a31401d5}) 1m29.911828239s ago: executing program 4 (id=3082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x6c}}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x1145, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"/4421], 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x1}, {0xe, 0xffe0}, {0xfff2, 0x1}}}, 0x24}}, 0x20040080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x7, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb85f, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x1, 0xd, 0x0, 0xc, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x400}], 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01020000000000000000010080030900010073797a300000000034000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000008000b400000000350000000060a010400000000000000000100000008000b400000000328000480240001800b000100657874686472000014000280080001400000000c05000200070000000900010073797a3000000000140000001100010000000000000043cc9a474defe064d054ebb92e00000700000a"], 0xcc}}, 0x20008000) sendto$inet(r3, &(0x7f00000002c0)="04594d798ffc4fc19e99d1fceaf1c71d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79ffffffff1019736e82", 0x33, 0x20008040, 0x0, 0x0) getpid() ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000600)={0x1000, 0x5, 0x3, 0x40000000, 0x6, 0x0, [{0x3, 0x3, 0x9, '\x00', 0x338e}, {0xa, 0xffffffffffffc120, 0x49, '\x00', 0x2000}, {0x3, 0x6, 0x1b, '\x00', 0x1}, {0xa31, 0x3ff, 0x8, '\x00', 0x209}, {0x0, 0x5, 0xb5, '\x00', 0x1202}, {0x7, 0xe76, 0x0, '\x00', 0x3c05}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) splice(r3, 0x0, r2, 0x0, 0x8a, 0xa) accept4$inet(r2, 0x0, &(0x7f0000000240), 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r11, 0x5452, &(0x7f0000000280)=0xf25) listen(r11, 0x20) shutdown(r11, 0x0) 1m29.201071884s ago: executing program 4 (id=3086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m28.916361751s ago: executing program 4 (id=3090): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x4, &(0x7f0000001400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x58e8, 0xb}, &(0x7f00000011c0)=0x1, &(0x7f0000001200)=0x2, 0x8444, 0x400, 0x3, 0x9, 0x15, 0x8b0}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0xb}, &(0x7f0000001240)=0x9ba2, &(0x7f0000001280)=0x8c8, 0x8000000000000000, 0x5, 0x4, 0x6, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x1ff}, {&(0x7f00000012c0)=""/15, 0xf}, &(0x7f0000001340)=[{&(0x7f0000001300)=""/39, 0x27}], 0x1, 0x32, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0xffff63d1, 0x5}, &(0x7f0000001380)=0x6, &(0x7f00000013c0)=0x3ff, 0x7, 0x9, 0x7f, 0x6, 0x2, 0x4}}, @rdma_dest={0x18}], 0x168, 0x4000000}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='cgroup.freeze\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000001600)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58) r2 = accept4(r1, &(0x7f0000001680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001700)=0x80, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x800) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001980)='veth1_virt_wifi\x00', 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000019c0)={'wlan1\x00'}) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000001a00)) clock_gettime(0x0, &(0x7f0000001b00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001a40)={0x780000000000000, 0xfffffffffffffffb, 0xffffffff00000000, 0x1, 0xfffffffffffffff8, 0x100000001, 0x8000000000000001, 0x66}, &(0x7f0000001a80)={0x4, 0x5, 0xfffffffffffffffa, 0x156c, 0x0, 0x7, 0x5, 0x95f}, &(0x7f0000001ac0)={0x8000000000000001, 0x100, 0x1, 0x6, 0x0, 0x5, 0x7, 0x1ff}, &(0x7f0000001b40)={r5, r6+60000000}, &(0x7f0000001bc0)={&(0x7f0000001b80), 0x8}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000001c00)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001c80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001cc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001d00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001d40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001d80)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x5c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004850}, 0x800) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001ec0)={0xffffffffffffffff}, 0x4) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) ppoll(&(0x7f0000001f00)=[{r12, 0x20}, {r1, 0x80}, {r0, 0x4004}, {r0, 0x8002}, {r2, 0x20}], 0x5, &(0x7f0000001f80)={r13, r14+60000000}, &(0x7f0000001fc0), 0x8) r15 = openat$cgroup_ro(r1, &(0x7f0000002000)='cpuacct.usage_user\x00', 0x0, 0x0) connect$rds(r15, &(0x7f0000002040)={0x2, 0x4e22, @loopback}, 0x10) r16 = openat$cgroup(r1, &(0x7f0000002080)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r15, 0xc400941d, &(0x7f00000020c0)={0x0, 0xb62c}) ioctl$BTRFS_IOC_DEV_INFO(r16, 0xd000941e, &(0x7f00000024c0)={r17, "cd59fc2f8c76035b358455f0dcf8bddb"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000034c0), &(0x7f0000003500)=0x4) 1m28.758861263s ago: executing program 0 (id=3092): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) sendto$packet(r0, 0x0, 0x0, 0x20048050, &(0x7f0000000240)={0x11, 0x15, 0x0, 0x1, 0x20, 0x6, @remote}, 0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c52ee12f61779c6ec498f039d375a61ca25f0864d4138abd45f49cb2db61a5845be6a4e0f6bc91f6239ed6d7393e1709", @ANYRES8=r0, @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="29000300010003", 0x7) unshare(0x2c020400) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000740000001800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r7, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="1a0000000000000000000000843d7c26b3eb353f27bda7d39d19e9528014c33548", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r8, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x7c, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x820, 0x8, 0xfffffffffffffd80, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x2a, 0x80000, 0x8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r13, @ANYRES16, @ANYRES16=r12, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYRESDEC=r4, @ANYRES16=0x0, @ANYBLOB="cb1e88cd601c7459258e0ac19bc4f18af7e5c12c23522da8b78755269674a7535e0678d646ead1ddca1754b8644f31abaee1e48ab42b3277e75edcd87509ef6a8b746ea6b365cdd532a9be9c8c896063d71a0084c61e", @ANYRESDEC=r8], 0x20) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r12, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000004bc0)=ANY=[@ANYBLOB="8013", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0800100001000000080001005a7ae29fd97428f06027468206ab79a7e6509c5f64961121e2e00783f3cf32f9651e35f77d2759f6a2f3874258ba49afd1f74afb935c872e7da459ff3719c179e9c00d4de41a4bee045c5bd353583fa96bdd6180e5060eda38e5", @ANYRES32=r6, @ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="140002006d6163766c616e31000000000000000014000200697036746e6c30000000000000000000"], 0x1380}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000050) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000940)="c8de2e6b56ff8bfaa28f81d7a82a4335ec3ccbca37dee6a4914f644f9bcbafb59f3f9d67ce9dc7dd5e2ea732f6963e2ccdbb5efe3221e58362547980ddfb74ce91a7f680d4f554a6e78b2b6a93071bac3096edb9237aedc70ed350e5be996b2e911f37c06ad506deb2a6ceee5a74dc5ab89068e87966b4e6156638e98ddb34062a28d1684ee2a347811525bafbdf091405d0db83e90bb5cb0a0f651cf400521f62d768cee159e01bcf643ec76e1435aa9c3d73bb3cf20ec9b91f127957be81853b36f9f794f8aa5d9384ddaec12591cb334f61a101db05c41cbffe18523213a78154a8644fc0a6f9e4ad2d0630ddb09900"/250, &(0x7f0000000180)=""/160, &(0x7f0000000240)="1ecdf605ec91712413ca8d3bdf49f2dddccdbcf8544039432b0a254b86b23b041d85a76c9ce17b223c9928e3579a7446095c536c0126a4", &(0x7f0000000300)="f05533c84a043ffdaf0fbdc9107fcd0ca242aba00c94c75443d49b36", 0x4, r14}, 0x38) 1m28.742277285s ago: executing program 4 (id=3093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x900e484848487a9d, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_CARRIER={0x5}]}, 0x30}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 1m28.559750372s ago: executing program 1 (id=3094): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x400, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0xffffffffffffff58, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0xd234}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x800) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @none, 0xd}, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="924016c29c99b475a6652c43fa2a2a819e4617b0c7ec8e24e3225e7a042396d9f1e1cdee0d487cd5706e1b702318cc7266672638d02fbd7d94be8996cad76152237ac716ebba90a30017026590e46c2f33af63ac95c2d373670e414288b9b3a9b3486fbfb2cb595b27091cd4e802d7b626608cdac25956ca10d9583c46496174af497a919b0b2343f578c18616b6fec46dd758f0690ddd5f437e", @ANYBLOB="01000000ffffff7f000000000000280017db2c955f26c824683a766c616e30000000140002800800010012100000060003ea"], 0x3c}}, 0xc020) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16=r6, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080) r7 = socket(0xa, 0x2, 0x4) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4) connect$bt_rfcomm(r3, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa) 1m28.111700326s ago: executing program 0 (id=3095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x6, [@var={0xb, 0x0, 0x0, 0xe, 0x4, 0x1}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x1}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0xf, 0x6}, {0x2, 0x4}, {0xc, 0x3}, {0xd, 0x3}, {0x4, 0x5}, {0xb, 0x9}, {0xf, 0xff}, {0x9, 0x7}, {0x8, 0xa39}]}, @restrict={0x8}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x6}]}, {0x0, [0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000006c0)=""/158, 0xba, 0x9e, 0x0, 0x5}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x25, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @alu={0x7, 0x1, 0x4, 0x8, 0xa, 0x100, 0xfffffffffffffffc}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @alu={0x7, 0x1, 0xd, 0x4, 0xb, 0x8, 0xfffffffffffffff0}, @generic={0x8, 0xc, 0x5, 0x25e, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x72}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x7c, &(0x7f0000000180)=""/124, 0x40f00, 0x1, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x8, 0xfffffffe, 0xf}, 0x10, 0x159fd, r1, 0x7, &(0x7f0000000400)=[r0], &(0x7f0000000580)=[{0x4, 0x1}, {0x5, 0x4, 0x10, 0x7}, {0x4, 0x3, 0x9, 0xb}, {0x3, 0x1, 0x3, 0x6}, {0x5, 0x5, 0x4, 0x2}, {0x5, 0x2, 0xf, 0x8}, {0x4, 0x3, 0xf, 0x8}], 0x10, 0x9}, 0x94) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1daa0000000000006110000000009500001835bf852ee8bc12b95ca4a12791f00000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1m28.109540161s ago: executing program 4 (id=3096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000700)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000001dab9e048c34cf2c00240001800600050500230000060700000000000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) (async, rerun: 32) listen(r9, 0x0) (rerun: 32) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 1m22.418328595s ago: executing program 1 (id=3098): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x3) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000efffffffffc5dac9fd57a3a042398f4d2f24fd3560ffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000040)={{r7}, 0x3, 0xb6, 0x177}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) close(r1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r11, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) splice(r0, 0x0, r10, 0x0, 0x10d00, 0x0) 1m18.752923535s ago: executing program 0 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m16.069575881s ago: executing program 2 (id=3100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x40, 0x119, 0xfffffffe, 0x2000, {0x1, 0x7c}, [@nested={0x10, 0x141, 0x0, 0x1, [@typed={0x9, 0xa, 0x0, 0x0, @binary="4720c694fe"}]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e1'}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 1m10.928272485s ago: executing program 32 (id=3096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000700)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000001dab9e048c34cf2c00240001800600050500230000060700000000000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r10, 0x1000) ioctl$SIOCAX25NOUID(r10, 0x89e3, &(0x7f0000000440)=0x1) (async, rerun: 32) listen(r9, 0x0) (rerun: 32) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 1m5.057879349s ago: executing program 33 (id=3098): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x3) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000efffffffffc5dac9fd57a3a042398f4d2f24fd3560ffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000040)={{r7}, 0x3, 0xb6, 0x177}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x81) close(r1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r11, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) splice(r0, 0x0, r10, 0x0, 0x10d00, 0x0) 1m4.487761382s ago: executing program 0 (id=3103): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b25, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x8864}, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xf4, 0x0, 0x41, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x13}}, "6cbf0b0781843969"}}}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m4.487329972s ago: executing program 2 (id=3104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="02030900000000f0e56aafe5ce4aa80002000d22ac1e0001000000000002000100000000000000070c000000030005000000000002004e22ac14140a00bf3121c900000001000800000000006b8897468370eb51ca67db818f1d2edfb734adfa7b9c42cc97474a88bbe4f5ecd2d37a829795260854074e3cf48cfabe4973c00ba7137a78c8a0c3230a7d37d74a5d64e2b037ace33b00e1308f7bb6bf7933cba1e743ff72b4c57edad6f02b20156a892c12da264c93ba262656d0d2ea497c4a6f72a022fb7704b4ef8d0850039013dd461514bab6fece05bcc8c2cfe40def0e262e2c2bc75d295d4276984a137d1e71d4593a63509603000000a376841cdcedc307a841ba011175e5dbdf0d4bf1cb5c1df3c9bba9aaa65830249bcac8dc3c524ab3cb5b7b0c8a4ca2f77578c5ddc81223ac5f318f13ebd457393fc1cb0f0b62281184c882cec668118c09b553814f0a7387d96d8d7d30440a770573bb512e1734f5ae822eabe89472bbd72bbbf965236b74a44144b4f52a8042539094c3e65ff1951e7ee7118224ab69bf706f3ba9b6c925d7cebb0fd5d8a96e72fbc103bab251440834b9b84d22e6bc263aee219258cf3602b2d4b8742f2d2442059a2d9a6abe229fd9b75d2e4f15226d0dc0376f393e3db3279e280ba1e11fc06d381708304b7016c6aaedf9b1017f6ce0a36ed61ed5845192ad826e478391467d10302b02f51282f700d122b994e5bd4e89106b4e7ef2998d252519d4bc8ca97ea0b613702c2769075b6bce2ff0512453a445c99e6a61d30d7fbf0082f5fc150d0b43bb525b2e74d682f3ec3fbec4ee8555526a97a43a13cb867d7443effceb"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2829"], 0xe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYBLOB="34145216876721cf79945aa12e80718a16893e9358f2f50c0a1040034e531dc4ec753e9064a7b935061846cfd5e06f8ea063d561da2bd8530333407b818a636b2b11276ab9e89f", @ANYRESDEC=r2, @ANYRES16=r2], 0x7c}}, 0x8000) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) listen(r4, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0xf, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x80) close(r0) 55.255770665s ago: executing program 2 (id=3105): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x104}], 0x1}, 0x84) unshare(0x26020480) socket(0x2d, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210007000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'veth1_to_bond\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0x8, 0x0, 0x9, 0x3, 0x7, 0x6, 0x18000000, 0x2, 0x9, 0x8, 0x4, 0x6e0, 0x4, 0x7, 0x5, 0x8000, 0x8, 0x743, 0x23, 0x4, 0x5, 0x10000}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xffe0}}]}}]}, 0x48}}, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000680)={0x0, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r7, 0x0, 0x10}, 0xc) close(r8) recvmmsg(r5, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r5, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$netlink(r1, 0x0, 0x4000841) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="ab985a5482c6abd36f4a447610debf76dbe2", @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 51.657204272s ago: executing program 0 (id=3106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 40.527731694s ago: executing program 2 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="78000000730201080000000000000000000000080c000000060003400004000006000340000100000c0002800500010006000000440003802c00ca018014000300000000000000000000000eb7bb8c000014000400fc02000000000000000000000000000006000340000100000c008280050001003a0000005dc41ba20924a80d7c511d8b7eb79464494980587ba5e661eb8a922387fe3f17c857990649d900faf9e5414b3548469977f9a1555514b5c03f2ec1ca1affa5c39e2b2c78663718ea1cc280a549e0790301c79262b1bcfff4e125007667b0d35334caf60360effee696b8e6ad1bbfec4af2b5c61341589906b51426879ac06d21a151475c1486dbcea8ba34322447e3101627598ae69d35d143cb4271edcf452e91e9fff9733200f3f5e2371fba035a2b52f0c45cdf5fa79e59cefdc211e9b380020060516461822605229c834a5e870e0df3e29736bea76abc47c6a41f0f1e974b1531dc76f58f2ca09bb1948611409c"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000000800050000000300240007"], 0xd0}}, 0x0) socketpair(0x28, 0x80000, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x1, {0x2, 0x1, 0x1ba7529ff88293c3}, 0xfe}, 0x18) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x3, {0x1, 0xff, 0x4}}, 0x18) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, "00186371ae9b1c03"}}}}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000500)={r9, 0xffff}, &(0x7f0000000600)=0x8) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800009a0100000000000000000091e3432a006ac377655c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r13, 0x0, 0x0, 0x0, 0x0, 0x99f2}, 0x94) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r14, 0x112, 0x13, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r10, @ANYRESDEC=r13, @ANYRESHEX=r13, @ANYRES8=r14, @ANYRES16=r3], &(0x7f00000004c0)='GPL\x00', 0x40000, 0x0, 0x0, 0x41000, 0x3c, '\x00', r6, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r15, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r16}, 0x10) 39.387053469s ago: executing program 0 (id=3108): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0x7fff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}]}]}, 0x13c}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 30.39470491s ago: executing program 2 (id=3109): unshare(0x22020600) socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x8005) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r6, @ANYBLOB="0500360000000000050037003d9dde0e"], 0x50}, 0x4, 0x700000000000000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="58d30000100001040090aa3df206df4581e2dbde603c80e3dc6e15d89e00000003000000", @ANYRES32=0x0, @ANYBLOB="fab0847dbcb5f31a24001280110001006272696467655f736c617665000000000c00058005001900ff000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0xc, &(0x7f0000001e40)=ANY=[@ANYBLOB="1800000007000000000000000002000018749cf193bb80d8de4d9166c2cc5a8b1100", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00ebff00bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xd7, &(0x7f0000001a40)=""/215, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2a24952108325567, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0xaa}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=[{0x3, 0x1, 0x5}, {0x2, 0x4, 0x6, 0xa}, {0x3, 0x2, 0x2, 0x6}, {0x5, 0x4, 0xa}, {0x3, 0x4, 0xa, 0xc}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x4, 0xf, 0x5}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f00000000c0), &(0x7f00000005c0)=r9}, 0x20) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) syz_genetlink_get_family_id$team(&(0x7f00000007c0), r11) r12 = openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000f759000000000600000000000000190013fd7ebf0000005fbe4992a43e784ce0192f12a287e9a10c0de04d8634f56a1ce71c50bdce9815533867fc270f79975bf57d905acfd1473ccfba918b8cc0c79afdb3187a63c6e4671c8e19d88e080c9486bf5e268de352c15d85"], &(0x7f00000003c0)='GPL\x00'}, 0x90) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000a40)=""/4096, 0x1000, 0x1400, 0x7ff}, 0x20) 21.757037856s ago: executing program 34 (id=3108): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0x7fff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x80}}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}]}]}, 0x13c}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 19.763862137s ago: executing program 2 (id=3111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010000000000400f4ffffffffffffff0000000000322f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000380)=[{r4, 0x100}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0da, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x800, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="181d000000e22321475b9b62ccffffffd5000000000008015dca9535e864fb24f931992be89fd581401efc72e046f4dea11806312fbc5b532bc987f31d28ab954df3a01ae5abd527697206d5ece6cd9279ee665f7a7cb454e62aa5fcd717bd9f71a92b7ddff9436775c7ff143cdb18670f49c872d9e7ee9d356821000f10708316ecf78fd07828f3c334fabff2b68117e81d112bfd8d2df36d6ff3b07af44de25cd648a11fd61c65ce3233f9b272f908a1cbfc6f43865c8428fc5c8c113377a85494"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r10, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac"], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)=0x1) 0s ago: executing program 35 (id=3111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010000000000400f4ffffffffffffff0000000000322f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000380)=[{r4, 0x100}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@empty, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0da, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x800, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="181d000000e22321475b9b62ccffffffd5000000000008015dca9535e864fb24f931992be89fd581401efc72e046f4dea11806312fbc5b532bc987f31d28ab954df3a01ae5abd527697206d5ece6cd9279ee665f7a7cb454e62aa5fcd717bd9f71a92b7ddff9436775c7ff143cdb18670f49c872d9e7ee9d356821000f10708316ecf78fd07828f3c334fabff2b68117e81d112bfd8d2df36d6ff3b07af44de25cd648a11fd61c65ce3233f9b272f908a1cbfc6f43865c8428fc5c8c113377a85494"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYRES32=r10, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac"], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)=0x1) kernel console output (not intermixed with test programs): ed activation_rf_tech_and_mode 0x6 [ 334.519398][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 334.521728][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1628'. [ 334.528496][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 334.685519][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 334.744608][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 335.626378][T12499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1644'. [ 335.810696][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1649'. [ 335.829996][T12505] macvlan5: entered promiscuous mode [ 335.843162][T12505] batman_adv: batadv0: Adding interface: macvlan5 [ 335.854607][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 335.863869][T12505] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.916418][T12505] batman_adv: batadv0: Not using interface macvlan5 (retrying later): interface not active [ 336.092563][T12517] block nbd0: Unsupported socket: should be TCP or UNIX. [ 336.557592][T12530] pimreg: entered allmulticast mode [ 336.595880][T12530] pimreg: left allmulticast mode [ 337.760887][T12586] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.876909][T12598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 338.004487][T12604] netlink: 'syz.4.1670': attribute type 1 has an invalid length. [ 338.101229][T12586] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.161728][T12607] syzkaller0: entered promiscuous mode [ 338.167288][T12607] syzkaller0: entered allmulticast mode [ 338.173958][T12607] tipc: Resetting bearer [ 338.210628][T12586] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.354493][T12586] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.793419][ T1105] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.811378][ T8216] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.914309][ T1105] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.024614][ T9039] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.110103][T12630] __nla_validate_parse: 15 callbacks suppressed [ 339.110134][T12630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1685'. [ 339.173409][T12634] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1687'. [ 339.194308][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1688'. [ 339.261290][T12630] x_tables: duplicate underflow at hook 2 [ 339.272258][T12630] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.440033][T12649] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1691'. [ 339.672611][T12659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1694'. [ 339.713187][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 339.879374][T12661] wg1 speed is unknown, defaulting to 1000 [ 339.885429][T12661] wg1 speed is unknown, defaulting to 1000 [ 339.902791][T12661] wg1 speed is unknown, defaulting to 1000 [ 339.912449][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1695'. [ 339.923171][T12664] openvswitch: netlink: Flow actions attr not present in new flow. [ 339.935132][T12661] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.958108][T12661] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 339.990746][T12667] xt_cgroup: path and classid specified [ 340.011403][T12661] wg1 speed is unknown, defaulting to 1000 [ 340.020119][T12661] wg1 speed is unknown, defaulting to 1000 [ 340.030521][T12661] wg1 speed is unknown, defaulting to 1000 [ 340.038969][T12661] wg1 speed is unknown, defaulting to 1000 [ 340.047179][T12661] wg1 speed is unknown, defaulting to 1000 [ 340.055469][T12661] wg1 speed is unknown, defaulting to 1000 [ 340.200090][T12670] netlink: 'syz.3.1697': attribute type 13 has an invalid length. [ 340.281273][T12674] netlink: 'syz.4.1699': attribute type 1 has an invalid length. [ 340.742824][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1704'. [ 341.040595][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1708'. [ 341.062247][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 341.089218][T12702] --map-set only usable from mangle table [ 341.094360][T12707] IPVS: stopping backup sync thread 10509 ... [ 342.141837][T12761] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 342.169052][T12760] delete_channel: no stack [ 342.860876][T12791] netlink: 'syz.1.1730': attribute type 83 has an invalid length. [ 342.966311][T12745] wg1 speed is unknown, defaulting to 1000 [ 343.483811][T12810] netlink: 'syz.1.1737': attribute type 33 has an invalid length. [ 343.722261][T12755] wg1 speed is unknown, defaulting to 1000 [ 344.826394][T12884] netlink: 'syz.1.1754': attribute type 2 has an invalid length. [ 345.183367][T12893] netlink: 'syz.1.1756': attribute type 21 has an invalid length. [ 345.214378][T12893] __nla_validate_parse: 8 callbacks suppressed [ 345.214398][T12893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1756'. [ 345.580761][T12905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'. [ 345.682414][T12911] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1763'. [ 346.209974][ T30] audit: type=1107 audit(1768001991.202:4): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 346.253640][T12939] xt_TCPMSS: Only works on TCP SYN packets [ 346.441679][T12943] tipc: Enabling of bearer rejected, already enabled [ 346.482727][T12945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1776'. [ 346.536137][T12943] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 346.644835][T12957] netlink: 'syz.3.1780': attribute type 39 has an invalid length. [ 346.762780][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'. [ 346.777642][T12957] hsr_slave_1 (unregistering): left promiscuous mode [ 346.893921][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'. [ 347.345561][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 347.374231][T12986] netlink: 'syz.4.1791': attribute type 12 has an invalid length. [ 347.703803][T12987] wg1 speed is unknown, defaulting to 1000 [ 347.989278][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1795'. [ 349.700024][T13057] kthread_run failed with err -4 [ 349.902269][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 350.096818][T13045] tipc: Enabled bearer , priority 0 [ 350.261601][T13044] tipc: Disabling bearer [ 350.586634][T13076] wg1 speed is unknown, defaulting to 1000 [ 350.628930][T13102] --map-set only usable from mangle table [ 350.827309][T13115] netlink: 'syz.2.1825': attribute type 6 has an invalid length. [ 350.944697][T13121] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1827'. [ 351.024510][T13123] netlink: 'syz.0.1828': attribute type 2 has an invalid length. [ 351.439997][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1835'. [ 351.449623][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1835'. [ 351.469825][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1835'. [ 351.489306][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1835'. [ 351.508846][T13146] sctp: [Deprecated]: syz.1.1834 (pid 13146) Use of int in maxseg socket option. [ 351.508846][T13146] Use struct sctp_assoc_value instead [ 351.527085][T13146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1834'. [ 351.547697][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 351.710541][T13155] syzkaller0: entered promiscuous mode [ 351.729771][T13155] syzkaller0: entered allmulticast mode [ 352.148046][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 352.194468][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 352.249078][T13192] ipt_REJECT: TCP_RESET invalid for non-tcp [ 352.267794][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 352.269403][T13197] openvswitch: netlink: IP tunnel dst address not specified [ 352.322707][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 352.450952][T13206] netlink: 'syz.0.1848': attribute type 12 has an invalid length. [ 353.125076][T13227] netlink: 'syz.3.1857': attribute type 15 has an invalid length. [ 353.224487][T13231] --map-set only usable from mangle table [ 353.315114][T13234] netlink: 'syz.3.1860': attribute type 39 has an invalid length. [ 353.440054][T13237] netlink: 'syz.3.1860': attribute type 5 has an invalid length. [ 353.472871][T13235] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 353.489860][T13235] bond9 (unregistering): Released all slaves [ 353.546361][T13237] vlan3: entered allmulticast mode [ 353.565541][T13237] bridge_slave_0: entered allmulticast mode [ 353.658649][T13243] dummy0: entered promiscuous mode [ 354.320719][T13268] netlink: 'syz.2.1868': attribute type 33 has an invalid length. [ 354.355435][T13242] dummy0: left promiscuous mode [ 354.909139][T13239] netlink: 'syz.0.1861': attribute type 6 has an invalid length. [ 355.044181][T13289] netlink: 'syz.4.1871': attribute type 11 has an invalid length. [ 355.195224][T13292] netlink: 'syz.4.1871': attribute type 39 has an invalid length. [ 355.332100][T13295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.967545][T13325] __nla_validate_parse: 10 callbacks suppressed [ 355.967566][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1883'. [ 355.987960][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 356.162484][ T6213] IPVS: starting estimator thread 0... [ 356.171128][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 356.189245][T13335] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 356.281035][T13338] IPVS: using max 25 ests per chain, 60000 per kthread [ 356.492166][ T6213] IPVS: starting estimator thread 0... [ 356.506030][T13352] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 356.598942][T13354] IPVS: using max 24 ests per chain, 57600 per kthread [ 356.621423][T13357] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 356.641917][T13360] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 356.692412][T13357] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.724763][T13357] bond0: (slave team0): Enslaving as an active interface with an up link [ 356.874844][T13374] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1899'. [ 356.885268][T13373] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1899'. [ 357.232025][T13400] syzkaller0: entered promiscuous mode [ 357.245456][T13400] syzkaller0: entered allmulticast mode [ 357.535333][T13411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.671967][T13417] netlink: 'syz.4.1914': attribute type 11 has an invalid length. [ 357.697274][T13417] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1914'. [ 357.756542][T13426] sctp: [Deprecated]: syz.2.1915 (pid 13426) Use of int in maxseg socket option. [ 357.756542][T13426] Use struct sctp_assoc_value instead [ 358.836446][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 358.888856][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 358.921924][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 358.949045][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 358.979110][T13462] netlink: 'syz.0.1926': attribute type 18 has an invalid length. [ 359.309785][T13476] netlink: 'syz.1.1929': attribute type 10 has an invalid length. [ 359.359630][T13476] bond0: (slave dummy0): Releasing backup interface [ 359.377775][T13476] team0: Port device dummy0 added [ 359.399622][T13476] netlink: 'syz.1.1929': attribute type 10 has an invalid length. [ 359.435136][T13476] team0: Port device dummy0 removed [ 359.452217][T13476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 359.817966][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 361.078103][T13528] netlink: 'syz.1.1945': attribute type 1 has an invalid length. [ 361.106429][T13528] netlink: 'syz.1.1945': attribute type 2 has an invalid length. [ 361.349799][T13533] tipc: Enabling of bearer rejected, already enabled [ 361.571814][T13540] __nla_validate_parse: 2 callbacks suppressed [ 361.571835][T13540] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1949'. [ 361.982888][T13558] syzkaller0: left promiscuous mode [ 361.993611][T13558] syzkaller0: left allmulticast mode [ 362.007737][T13558] tipc: Resetting bearer [ 362.050378][T13558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.273967][T13569] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 362.290213][T13567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1957'. [ 362.303489][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 362.350184][T13567] : entered promiscuous mode [ 362.381673][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 362.418985][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 362.486501][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1961'. [ 362.512934][T13578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1961'. [ 362.745688][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 363.180553][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 363.201978][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 363.317644][T13613] block nbd0: not configured, cannot reconfigure [ 363.449145][T13610] bond9 (unregistering): Released all slaves [ 363.973105][T13632] netlink: 'syz.1.1975': attribute type 2 has an invalid length. [ 364.019754][T13632] @„;: entered promiscuous mode [ 364.699536][T13668] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 364.799683][T13668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.847257][T13671] bond6: (slave ip6erspan0): making interface the new active one [ 364.916629][T13671] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 364.944725][T13684] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 365.386064][T13692] netlink: 'syz.2.1992': attribute type 10 has an invalid length. [ 365.456887][T13707] netlink: 'syz.4.1993': attribute type 13 has an invalid length. [ 365.765157][ T9039] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.775045][ T9039] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.824983][ T9039] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.861181][ T9039] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.352239][T13733] syzkaller0: entered promiscuous mode [ 366.373193][T13733] syzkaller0: entered allmulticast mode [ 366.619158][T13756] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 366.628827][T13756] __nla_validate_parse: 10 callbacks suppressed [ 366.628848][T13756] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2008'. [ 366.710035][T13762] netlink: 'syz.0.2009': attribute type 3 has an invalid length. [ 366.757078][T13762] syz_tun: entered allmulticast mode [ 366.986087][T13772] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2012'. [ 367.003893][T13772] .70·: renamed from hsr0 [ 367.012271][T13772] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.024812][T13772] .70·: entered allmulticast mode [ 367.030528][T13772] hsr_slave_0: entered allmulticast mode [ 367.039421][T13772] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 367.259447][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 367.566976][T13761] syz_tun: left allmulticast mode [ 367.570368][T13762] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 367.904034][T13803] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2022'. [ 367.977042][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 368.104082][T13814] netlink: 'syz.1.2023': attribute type 83 has an invalid length. [ 369.146626][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 369.224722][T13837] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 369.236405][T13837] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 369.263856][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.288733][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.299385][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.309515][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.516775][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 370.085504][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 370.260370][T13876] bond7: option mode: invalid value (254) [ 370.331276][T13876] bond7 (unregistering): Released all slaves [ 370.476591][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 370.526787][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2035'. [ 370.610208][T13889] netlink: 'syz.2.2044': attribute type 33 has an invalid length. [ 371.365438][T13931] syzkaller1: entered promiscuous mode [ 371.383564][T13931] syzkaller1: entered allmulticast mode [ 371.696045][T13950] siw: device registration error -23 [ 371.850182][T13959] tipc: Resetting bearer [ 372.003540][T13969] __nla_validate_parse: 3 callbacks suppressed [ 372.003559][T13969] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2067'. [ 372.340272][T13989] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 372.348378][T13989] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2070'. [ 372.468364][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'. [ 372.498810][T13984] netlink: 121 bytes leftover after parsing attributes in process `syz.2.2070'. [ 372.662741][T13998] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 372.734143][T13979] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2072'. [ 372.750308][T13979] block nbd0: not configured, cannot reconfigure [ 373.196883][T14034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2084'. [ 373.393222][T14045] netlink: 'syz.2.2085': attribute type 11 has an invalid length. [ 373.560822][T14050] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 373.663013][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2091'. [ 373.742497][T14050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.967750][T14066] openvswitch: netlink: Key 6 has unexpected len 14 expected 2 [ 373.987120][T14071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2093'. [ 374.039015][T14075] tipc: Enabling of bearer rejected, failed to enable media [ 374.066921][T14074] dvmrp1: entered allmulticast mode [ 374.079274][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2093'. [ 374.089330][T14071] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 374.101617][T14080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2095'. [ 374.122877][T14078] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 374.159339][T14074] dvmrp1: left allmulticast mode [ 374.530703][T14101] bond0: entered promiscuous mode [ 374.545446][T14101] bond_slave_0: entered promiscuous mode [ 374.588707][T14101] bond_slave_1: entered promiscuous mode [ 374.596671][T14101] batadv0: entered promiscuous mode [ 374.604201][T14101] debugfs: 'hsr1' already exists in 'hsr' [ 374.610761][T14101] Cannot create hsr debugfs directory [ 374.616537][T14101] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 374.627216][T14101] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 374.638858][T14101] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 374.652587][T14103] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 375.062772][T14116] wg1: entered promiscuous mode [ 375.071606][T14116] wg1: entered allmulticast mode [ 375.227133][T14121] netlink: 'syz.3.2108': attribute type 13 has an invalid length. [ 375.749136][T14131] vlan3: entered promiscuous mode [ 375.801455][T14131] vlan3: entered promiscuous mode [ 375.901838][T14131] vlan3: entered promiscuous mode [ 375.971905][T14131] vlan3: entered promiscuous mode [ 376.056710][T14131] vlan3: entered promiscuous mode [ 376.266361][T14131] vlan3: entered promiscuous mode [ 376.329608][T14131] vlan3: entered promiscuous mode [ 376.411970][T14131] vlan3: entered promiscuous mode [ 376.486767][T14131] vlan3: entered promiscuous mode [ 376.761125][T14131] vlan3: entered promiscuous mode [ 377.934171][T14175] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 377.938620][T14174] __nla_validate_parse: 13 callbacks suppressed [ 377.938642][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2124'. [ 377.990546][T14174] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 378.156911][T14184] tipc: Enabled bearer , priority 0 [ 378.246002][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'. [ 378.269122][T14184] syzkaller0: entered promiscuous mode [ 378.274788][T14184] syzkaller0: entered allmulticast mode [ 378.281921][T14184] tipc: Resetting bearer [ 378.289275][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'. [ 378.338732][T14183] tipc: Resetting bearer [ 378.588872][T14197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2130'. [ 378.600682][T14197] --map-set only usable from mangle table [ 378.632665][T14197] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.208754][T14183] tipc: Disabling bearer [ 380.228818][T14203] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2133'. [ 380.246581][ T7791] tipc: Node number set to 2266879619 [ 380.766943][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 380.780609][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 380.934849][T14234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.948798][T14236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2144'. [ 382.040979][T14288] xt_hashlimit: max too large, truncated to 1048576 [ 382.042198][T14290] xt_hashlimit: max too large, truncated to 1048576 [ 382.424980][T14303] ipip0: entered promiscuous mode [ 382.438227][T14305] netlink: 'syz.0.2162': attribute type 11 has an invalid length. [ 382.479501][T14303] ipip0: entered allmulticast mode [ 382.513771][T14306] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2164'. [ 382.580846][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.627956][T14305] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2162'. [ 383.070448][T14325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.650753][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2173'. [ 383.795455][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'. [ 384.404381][T14370] netlink: 'syz.2.2181': attribute type 1 has an invalid length. [ 384.415603][T14370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2181'. [ 384.632122][T14375] can: request_module (can-proto-0) failed. [ 384.932091][T14385] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 384.996781][T14385] netlink: 'syz.0.2184': attribute type 8 has an invalid length. [ 385.251209][T14388] IPVS: persistence engine module ip_vs_pe_ not found [ 385.412830][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 386.139376][T14421] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2191'. [ 386.163176][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 386.189228][T14424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 386.570041][T14435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.586202][T14435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.600890][T14435] batman_adv: batadv0: Removing interface: macvlan5 [ 386.851243][T14449] pimreg: entered allmulticast mode [ 387.055567][T14467] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.069679][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 387.091860][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 387.093727][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 387.207553][T14467] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.418544][T14467] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.524014][T14467] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.731397][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.843945][ T60] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.954078][ T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.026030][ T8216] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.823403][T14514] __nla_validate_parse: 3 callbacks suppressed [ 388.823425][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2216'. [ 388.917444][T14519] raw_sendmsg: syz.1.2217 forgot to set AF_INET. Fix it! [ 388.927483][T14519] syzkaller1: entered promiscuous mode [ 388.933851][T14519] syzkaller1: entered allmulticast mode [ 389.085460][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 389.175085][T14532] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 389.201550][T14534] SET target dimension over the limit! [ 389.212594][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 389.223055][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 389.504552][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2228'. [ 390.027745][T14575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2232'. [ 390.440829][T14594] netlink: 'syz.4.2235': attribute type 21 has an invalid length. [ 390.469671][T14594] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2235'. [ 390.831340][T14604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2239'. [ 390.894982][T14618] openvswitch: netlink: IP tunnel dst address not specified [ 390.909204][T14621] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 390.956469][T14621] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.030918][T14632] netlink: 'syz.2.2246': attribute type 11 has an invalid length. [ 391.087243][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 391.223860][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'. [ 391.270551][T14647] pim6reg: entered allmulticast mode [ 391.333388][T14647] pim6reg: left allmulticast mode [ 391.480592][T14656] sctp: [Deprecated]: syz.2.2252 (pid 14656) Use of int in max_burst socket option. [ 391.480592][T14656] Use struct sctp_assoc_value instead [ 391.583027][T14661] netlink: 'syz.4.2256': attribute type 1 has an invalid length. [ 391.733022][T14670] netlink: 'syz.2.2257': attribute type 39 has an invalid length. [ 391.750283][T14666] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 391.990789][T14675] netlink: 'syz.1.2258': attribute type 1 has an invalid length. [ 392.012586][T14675] netlink: 'syz.1.2258': attribute type 1 has an invalid length. [ 392.215376][T14689] sctp: [Deprecated]: syz.1.2261 (pid 14689) Use of int in maxseg socket option. [ 392.215376][T14689] Use struct sctp_assoc_value instead [ 392.471825][T14702] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 392.701719][T14726] IPVS: length: 153 != 24 [ 392.886656][T14733] netlink: 'syz.0.2268': attribute type 28 has an invalid length. [ 393.180130][T14739] geneve2: entered promiscuous mode [ 393.193408][T14739] geneve2: entered allmulticast mode [ 393.208904][ T9039] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.223294][ T9039] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.254182][ T9039] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.267772][T14739] xt_connbytes: Forcing CT accounting to be enabled [ 393.279684][ T9039] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.642809][ T30] audit: type=1800 audit(1768002038.642:5): pid=14760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2280" name=CB dev="tmpfs" ino=2366 res=0 errno=0 [ 393.709375][T14763] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 393.857324][T14768] block nbd0: Unsupported socket: should be TCP or UNIX. [ 394.030751][T14770] syzkaller0: entered promiscuous mode [ 394.036306][T14770] syzkaller0: entered allmulticast mode [ 394.097659][T14768] tipc: Enabled bearer , priority 0 [ 394.175940][T14775] __nla_validate_parse: 15 callbacks suppressed [ 394.175964][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 394.193692][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 394.206984][T14768] tipc: Resetting bearer [ 394.222729][T14767] tipc: Resetting bearer [ 394.307169][T14767] tipc: Disabling bearer [ 394.777259][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 394.803183][T14795] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2290'. [ 394.814355][T14795] tipc: Enabling of bearer rejected, failed to enable media [ 395.123783][T14811] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2292'. [ 395.585263][T14829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2300'. [ 395.665278][T14833] syzkaller1: entered promiscuous mode [ 395.678981][T14833] syzkaller1: entered allmulticast mode [ 395.700348][T14831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2301'. [ 396.752573][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 396.788636][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2311'. [ 396.857400][T14893] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 396.897853][T14893] openvswitch: netlink: Message has 8 unknown bytes. [ 396.927407][T14885] geneve3: entered promiscuous mode [ 396.943902][T14885] geneve3: entered allmulticast mode [ 396.994392][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 397.004644][T14885] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 397.052601][T13743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.136513][T14897] batadv3: entered promiscuous mode [ 397.187525][T13743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.208128][T13743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.225157][T13743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.278874][T14906] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 397.289616][T14906] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 397.624138][ T9039] tipc: Subscription rejected, illegal request [ 397.695988][T14931] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 397.826336][T14942] netlink: 'syz.3.2327': attribute type 13 has an invalid length. [ 397.982197][T14942] tipc: Enabling of bearer rejected, failed to enable media [ 397.997455][T14950] netlink: 'syz.3.2327': attribute type 13 has an invalid length. [ 398.230610][T14959] bond0: entered promiscuous mode [ 398.253236][T14959] bond_slave_0: entered promiscuous mode [ 398.288143][T14959] bond_slave_1: entered promiscuous mode [ 398.310702][T14959] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 398.334690][T14968] nbd: must specify at least one socket [ 398.373147][T14959] bond0: left promiscuous mode [ 398.380442][T14959] bond_slave_0: left promiscuous mode [ 398.394619][T14959] bond_slave_1: left promiscuous mode [ 398.419475][T14959] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 398.522738][T14963] bridge0: port 3(batadv0) entered disabled state [ 398.579526][T14963] bridge_slave_1: left allmulticast mode [ 398.588060][T14963] bridge_slave_1: left promiscuous mode [ 398.606254][T14963] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.635054][T14963] bridge_slave_0: left allmulticast mode [ 398.651522][T14963] bridge_slave_0: left promiscuous mode [ 398.670231][T14963] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.463994][T14996] __nla_validate_parse: 3 callbacks suppressed [ 399.464015][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 399.627274][T13749] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 399.699879][T15016] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2345'. [ 401.300036][T15073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2360'. [ 401.373672][T15073] unsupported nlmsg_type 40 [ 401.681655][T15088] bridge6: entered promiscuous mode [ 401.686961][T15088] bridge6: entered allmulticast mode [ 401.721262][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 401.746292][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 401.792359][T15095] netlink: 'syz.0.2369': attribute type 2 has an invalid length. [ 401.806699][T15095] netlink: 'syz.0.2369': attribute type 6 has an invalid length. [ 401.825269][T15096] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2368'. [ 401.972655][T15104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2372'. [ 402.005520][T15104] x_tables: duplicate underflow at hook 1 [ 402.083778][T15107] netlink: 'syz.2.2374': attribute type 8 has an invalid length. [ 402.093387][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 402.132135][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 402.142278][T15108] bridge_slave_0: default FDB implementation only supports local addresses [ 402.440295][T15125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2379'. [ 403.230320][T15148] --map-set only usable from mangle table [ 403.948775][T15171] IPVS: stopping backup sync thread 6295 ... [ 404.084893][T15174] veth0_to_bond: entered allmulticast mode [ 404.488384][T15197] __nla_validate_parse: 4 callbacks suppressed [ 404.488403][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'. [ 405.235090][T15219] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 405.255863][T15219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2405'. [ 405.411785][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 405.478143][T15227] can: request_module (can-proto-0) failed. [ 405.531137][T15237] netlink: 'syz.1.2410': attribute type 2 has an invalid length. [ 405.558452][T15237] : entered promiscuous mode [ 406.649229][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 406.758727][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2423'. [ 406.826081][T15293] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 406.841656][T15293] bond9 (unregistering): Released all slaves [ 406.853058][T15298] openvswitch: netlink: Duplicate or invalid key (type 0). [ 406.861339][T15298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.880667][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2416'. [ 406.975797][T15293] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 407.011468][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2425'. [ 407.154801][T15306] tipc: Enabling of bearer rejected, already enabled [ 407.201058][T15306] syzkaller0: entered promiscuous mode [ 407.214973][T15306] syzkaller0: entered allmulticast mode [ 407.222845][T15306] tipc: Resetting bearer [ 407.748543][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2437'. [ 407.811076][T15332] netlink: 'syz.1.2438': attribute type 11 has an invalid length. [ 407.971435][T15334] bond8: option packets_per_slave: invalid value (1048582) [ 408.088883][T15334] bond8: option packets_per_slave: allowed values 0 - 65535 [ 408.110996][T15334] bond8 (unregistering): Released all slaves [ 408.414342][T15358] syz_tun: entered promiscuous mode [ 408.437505][T15358] syz_tun: refused to change device tx_queue_len [ 408.444578][T15358] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 408.556428][T15362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2447'. [ 408.660568][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 408.692734][T15372] syzkaller0: entered promiscuous mode [ 408.738250][T15372] syzkaller0: entered allmulticast mode [ 409.065492][T15389] geneve3: entered promiscuous mode [ 409.076629][T13743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.097493][T13743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.110135][T13743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.148705][T13743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.339525][T15405] netlink: 'syz.2.2460': attribute type 32 has an invalid length. [ 409.692131][T15425] netlink: 'syz.4.2465': attribute type 22 has an invalid length. [ 409.869353][T15433] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 409.928329][T15430] block nbd0: server does not support multiple connections per device. [ 409.946853][T15430] block nbd0: shutting down sockets [ 410.041184][T15443] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20003 [ 410.081586][T15445] netem: change failed [ 410.175927][T15446] nftables ruleset with unbound chain [ 410.405559][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 410.463017][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 410.515902][T15458] macvlan3: entered promiscuous mode [ 410.525356][T15458] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 410.545393][T15458] macvlan3: entered allmulticast mode [ 410.559704][T15458] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 410.730739][T15469] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 411.208958][T15490] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:32769 [ 411.509340][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2485'. [ 411.748701][T15501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2486'. [ 411.788939][T15501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2486'. [ 411.851702][T15501] vlan2: entered allmulticast mode [ 411.857112][T15501] bridge_slave_0: entered allmulticast mode [ 412.154834][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2491'. [ 412.599883][T15539] 8021q: VLANs not supported on ip_vti0 [ 413.100518][T15547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.143483][T15547] netlink: 'syz.1.2501': attribute type 10 has an invalid length. [ 413.173539][T15547] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2501'. [ 413.284946][T15547] batadv_slave_1: entered promiscuous mode [ 413.301669][T15547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.311913][T15547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.319726][T15547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.349283][T15554] netlink: 'syz.4.2502': attribute type 27 has an invalid length. [ 413.436561][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2502'. [ 414.387359][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 415.282115][T15606] bridge0: port 1(macvtap1) entered blocking state [ 415.294373][T15606] bridge0: port 1(macvtap1) entered disabled state [ 415.303512][T15606] macvtap1: entered allmulticast mode [ 415.311858][T15606] bridge0: entered allmulticast mode [ 415.321525][T15606] macvtap1: left allmulticast mode [ 415.327145][T15606] bridge0: left allmulticast mode [ 415.601793][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2519'. [ 416.160299][T15649] netlink: 'syz.1.2530': attribute type 21 has an invalid length. [ 416.168996][T15639] block nbd0: server does not support multiple connections per device. [ 416.187269][T15649] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2530'. [ 416.197626][T15639] block nbd0: shutting down sockets [ 416.241538][T15651] wg1: entered promiscuous mode [ 416.265105][T15651] wg1: entered allmulticast mode [ 416.293768][T15649] netlink: 'syz.1.2530': attribute type 4 has an invalid length. [ 416.347377][T15649] netlink: 'syz.1.2530': attribute type 3 has an invalid length. [ 416.390204][T15649] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 416.439178][T15652] netlink: 'syz.1.2530': attribute type 21 has an invalid length. [ 416.448768][T15652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2530'. [ 416.467886][T15652] netlink: 'syz.1.2530': attribute type 4 has an invalid length. [ 416.492818][T15652] netlink: 'syz.1.2530': attribute type 3 has an invalid length. [ 416.621382][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 416.770776][T15663] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2534'. [ 416.799591][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 417.121422][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 417.175183][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 417.262398][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 417.283230][T15714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2547'. [ 417.464334][T15731] tipc: Enabling of bearer rejected, failed to enable media [ 417.602879][T15735] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 417.706442][T15689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 417.891949][T15752] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 418.246104][T15765] xt_recent: Unsupported userspace flags (000000b1) [ 418.254064][T15766] xt_recent: Unsupported userspace flags (000000b1) [ 418.307015][T15768] sctp: [Deprecated]: syz.4.2560 (pid 15768) Use of int in max_burst socket option deprecated. [ 418.307015][T15768] Use struct sctp_assoc_value instead [ 418.691281][T15775] netlink: 'syz.3.2562': attribute type 178 has an invalid length. [ 418.730362][T15775] 8021q: VLANs not supported on lo [ 418.939033][T15782] FAULT_INJECTION: forcing a failure. [ 418.939033][T15782] name failslab, interval 1, probability 0, space 0, times 1 [ 418.951973][T15782] CPU: 1 UID: 0 PID: 15782 Comm: syz.3.2566 Not tainted syzkaller #0 PREEMPT(full) [ 418.952004][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.952026][T15782] Call Trace: [ 418.952035][T15782] [ 418.952045][T15782] dump_stack_lvl+0xe8/0x150 [ 418.952079][T15782] should_fail_ex+0x414/0x560 [ 418.952120][T15782] should_failslab+0xa8/0x100 [ 418.952149][T15782] kmem_cache_alloc_noprof+0x88/0x710 [ 418.952181][T15782] ? apparmor_capable+0x137/0x1a0 [ 418.952215][T15782] ? skb_clone+0x212/0x3a0 [ 418.952249][T15782] skb_clone+0x212/0x3a0 [ 418.952276][T15782] ? nfnetlink_rcv+0x4ba/0x2590 [ 418.952305][T15782] nfnetlink_rcv+0x4ec/0x2590 [ 418.952340][T15782] ? is_bpf_text_address+0x26/0x2b0 [ 418.952383][T15782] ? unwind_get_return_address+0x4d/0x90 [ 418.952409][T15782] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 418.952443][T15782] ? arch_stack_walk+0xfc/0x150 [ 418.952477][T15782] ? __lock_acquire+0x6b6/0x2cf0 [ 418.952503][T15782] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 418.952548][T15782] ? __lock_acquire+0x6b6/0x2cf0 [ 418.952582][T15782] ? __netlink_lookup+0xbd/0x8a0 [ 418.952624][T15782] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.952654][T15782] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.952701][T15782] netlink_unicast+0x82f/0x9e0 [ 418.952737][T15782] ? __pfx_netlink_unicast+0x10/0x10 [ 418.952762][T15782] ? __alloc_skb+0x198/0x3a0 [ 418.952785][T15782] ? netlink_sendmsg+0x642/0xb30 [ 418.952812][T15782] ? skb_put+0x11b/0x210 [ 418.952841][T15782] netlink_sendmsg+0x805/0xb30 [ 418.952880][T15782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.952920][T15782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.952950][T15782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.952970][T15782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.953001][T15782] __sock_sendmsg+0x21c/0x270 [ 418.953037][T15782] ____sys_sendmsg+0x505/0x820 [ 418.953071][T15782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.953108][T15782] ? import_iovec+0x74/0xa0 [ 418.953139][T15782] ___sys_sendmsg+0x21f/0x2a0 [ 418.953168][T15782] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.953234][T15782] ? __fget_files+0x2a/0x420 [ 418.953260][T15782] ? __fget_files+0x3a0/0x420 [ 418.953299][T15782] __x64_sys_sendmsg+0x19b/0x260 [ 418.953336][T15782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.953374][T15782] ? __pfx_ksys_write+0x10/0x10 [ 418.953408][T15782] do_syscall_64+0xec/0xf80 [ 418.953432][T15782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.953453][T15782] ? trace_irq_disable+0x37/0x100 [ 418.953482][T15782] ? clear_bhb_loop+0x60/0xb0 [ 418.953508][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.953534][T15782] RIP: 0033:0x7f03ad58f749 [ 418.953554][T15782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.953573][T15782] RSP: 002b:00007f03ae455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.953598][T15782] RAX: ffffffffffffffda RBX: 00007f03ad7e5fa0 RCX: 00007f03ad58f749 [ 418.953615][T15782] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 418.953629][T15782] RBP: 00007f03ae455090 R08: 0000000000000000 R09: 0000000000000000 [ 418.953643][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.953656][T15782] R13: 00007f03ad7e6038 R14: 00007f03ad7e5fa0 R15: 00007ffc7a0e3348 [ 418.953692][T15782] [ 419.451338][T15792] netlink: 'syz.0.2568': attribute type 13 has an invalid length. [ 419.488077][T15792] netlink: 'syz.0.2568': attribute type 17 has an invalid length. [ 420.531679][T15861] netlink: 'syz.1.2590': attribute type 1 has an invalid length. [ 420.579530][T15861] bond7: entered promiscuous mode [ 420.586593][T15861] 8021q: adding VLAN 0 to HW filter on device bond7 [ 420.611981][T15861] bond7: (slave bridge6): making interface the new active one [ 420.622507][T15865] __nla_validate_parse: 9 callbacks suppressed [ 420.622526][T15865] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2587'. [ 420.641105][T15861] bridge6: entered promiscuous mode [ 420.649122][T15861] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 420.663872][T15857] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 420.684386][T15868] ip6gre1: entered promiscuous mode [ 420.770086][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'. [ 420.779395][T15868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2591'. [ 421.065325][T15883] netlink: 'syz.2.2596': attribute type 29 has an invalid length. [ 421.074916][T15885] netlink: 'syz.2.2596': attribute type 29 has an invalid length. [ 421.085654][T15883] netlink: 'syz.2.2596': attribute type 3 has an invalid length. [ 421.287732][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 421.626837][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 421.870250][T13750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.889621][T13750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.686514][T15941] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2613'. [ 422.905001][T15946] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2614'. [ 423.411471][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'. [ 423.625610][T15973] tipc: Enabled bearer , priority 0 [ 423.654947][T15973] tipc: Resetting bearer [ 423.715717][T15981] FAULT_INJECTION: forcing a failure. [ 423.715717][T15981] name failslab, interval 1, probability 0, space 0, times 0 [ 423.743052][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.1.2626 Not tainted syzkaller #0 PREEMPT(full) [ 423.743089][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.743104][T15981] Call Trace: [ 423.743113][T15981] [ 423.743122][T15981] dump_stack_lvl+0xe8/0x150 [ 423.743157][T15981] should_fail_ex+0x414/0x560 [ 423.743197][T15981] should_failslab+0xa8/0x100 [ 423.743226][T15981] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 423.743252][T15981] ? kasprintf+0xd4/0x120 [ 423.743289][T15981] kvasprintf+0xdc/0x190 [ 423.743314][T15981] ? nf_tables_newset+0x136f/0x2540 [ 423.743335][T15981] ? nfnetlink_rcv+0x11d9/0x2590 [ 423.743359][T15981] ? netlink_unicast+0x82f/0x9e0 [ 423.743385][T15981] ? __pfx_kvasprintf+0x10/0x10 [ 423.743410][T15981] ? __x64_sys_sendmsg+0x19b/0x260 [ 423.743452][T15981] kasprintf+0xd4/0x120 [ 423.743486][T15981] ? __pfx_kasprintf+0x10/0x10 [ 423.743529][T15981] nf_tables_set_alloc_name+0x109/0x720 [ 423.743563][T15981] ? rcu_is_watching+0x15/0xb0 [ 423.743591][T15981] ? trace_kmalloc+0x1f/0xb0 [ 423.743609][T15981] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 423.743636][T15981] ? nla_strdup+0xb8/0x140 [ 423.743671][T15981] nf_tables_newset+0x1390/0x2540 [ 423.743708][T15981] ? __pfx_nf_tables_newset+0x10/0x10 [ 423.743753][T15981] ? __nla_parse+0x40/0x60 [ 423.743782][T15981] nfnetlink_rcv+0x11d9/0x2590 [ 423.743853][T15981] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 423.743929][T15981] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.743959][T15981] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.744007][T15981] netlink_unicast+0x82f/0x9e0 [ 423.744049][T15981] ? __pfx_netlink_unicast+0x10/0x10 [ 423.744073][T15981] ? __alloc_skb+0x198/0x3a0 [ 423.744097][T15981] ? netlink_sendmsg+0x642/0xb30 [ 423.744124][T15981] ? skb_put+0x11b/0x210 [ 423.744152][T15981] netlink_sendmsg+0x805/0xb30 [ 423.744191][T15981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.744225][T15981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.744255][T15981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.744276][T15981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.744307][T15981] __sock_sendmsg+0x21c/0x270 [ 423.744343][T15981] ____sys_sendmsg+0x505/0x820 [ 423.744377][T15981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.744414][T15981] ? import_iovec+0x74/0xa0 [ 423.744445][T15981] ___sys_sendmsg+0x21f/0x2a0 [ 423.744475][T15981] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.744543][T15981] ? __fget_files+0x2a/0x420 [ 423.744569][T15981] ? __fget_files+0x3a0/0x420 [ 423.744608][T15981] __x64_sys_sendmsg+0x19b/0x260 [ 423.744638][T15981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.744677][T15981] ? __pfx_ksys_write+0x10/0x10 [ 423.744711][T15981] do_syscall_64+0xec/0xf80 [ 423.744735][T15981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.744755][T15981] ? trace_irq_disable+0x37/0x100 [ 423.744784][T15981] ? clear_bhb_loop+0x60/0xb0 [ 423.744811][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.744832][T15981] RIP: 0033:0x7f284538f749 [ 423.744857][T15981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.744877][T15981] RSP: 002b:00007f28462df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.744901][T15981] RAX: ffffffffffffffda RBX: 00007f28455e5fa0 RCX: 00007f284538f749 [ 423.744917][T15981] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 423.744931][T15981] RBP: 00007f28462df090 R08: 0000000000000000 R09: 0000000000000000 [ 423.744945][T15981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.744958][T15981] R13: 00007f28455e6038 R14: 00007f28455e5fa0 R15: 00007ffd32b8a198 [ 423.744995][T15981] [ 424.313301][T15996] openvswitch: netlink: IPv4 tunnel dst address is zero [ 424.371008][T16000] openvswitch: netlink: IPv4 tunnel dst address is zero [ 424.566830][T15973] tipc: Disabling bearer [ 424.619564][T16009] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 424.754868][T16019] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 424.775285][T16019] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 424.831700][T16024] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.2639'. [ 424.848157][T16024] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2639'. [ 425.155381][T16040] openvswitch: netlink: IP tunnel dst address not specified [ 425.591660][T16063] netlink: zone id is out of range [ 425.614647][T16063] netlink: zone id is out of range [ 425.626661][T16063] netlink: zone id is out of range [ 425.643865][T16063] netlink: zone id is out of range [ 425.654445][T16069] netlink: 'syz.2.2652': attribute type 1 has an invalid length. [ 425.664204][T16069] netlink: 'syz.2.2652': attribute type 1 has an invalid length. [ 425.684650][T16063] netlink: zone id is out of range [ 425.718169][T16063] netlink: zone id is out of range [ 425.723369][T16063] netlink: zone id is out of range [ 425.853456][T16074] gre0: left allmulticast mode [ 425.959428][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 425.994561][T16075] bridge7: entered allmulticast mode [ 426.009975][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.041652][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.363498][T16074] infiniband syz2: set down [ 426.368385][T16074] infiniband syz2: added ip6_vti0 [ 426.377230][ T6213] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.476107][T16074] RDS/IB: syz2: added [ 426.482492][T16074] smc: adding ib device syz2 with port count 1 [ 426.521035][T16074] smc: ib device syz2 port 1 has no pnetid [ 426.528486][ T6213] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.569969][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 426.585866][T16079] __nla_validate_parse: 2 callbacks suppressed [ 426.585886][T16079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2656'. [ 426.697436][T16092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2660'. [ 426.722611][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2660'. [ 426.786865][T16096] netlink: 'syz.4.2661': attribute type 10 has an invalid length. [ 426.795573][T16096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2661'. [ 426.804834][T16096] dummy0: entered promiscuous mode [ 426.891017][T16099] FAULT_INJECTION: forcing a failure. [ 426.891017][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 426.915869][T16099] CPU: 0 UID: 0 PID: 16099 Comm: syz.2.2662 Not tainted syzkaller #0 PREEMPT(full) [ 426.915901][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.915916][T16099] Call Trace: [ 426.915924][T16099] [ 426.915933][T16099] dump_stack_lvl+0xe8/0x150 [ 426.915967][T16099] should_fail_ex+0x414/0x560 [ 426.916007][T16099] should_failslab+0xa8/0x100 [ 426.916037][T16099] __kmalloc_cache_noprof+0x84/0x700 [ 426.916060][T16099] ? nft_pernet+0x23/0x240 [ 426.916082][T16099] ? nf_tables_commit+0x8d9/0xa350 [ 426.916120][T16099] nf_tables_commit+0x8d9/0xa350 [ 426.916160][T16099] ? __pfx_stack_trace_save+0x10/0x10 [ 426.916208][T16099] ? kasan_save_track+0x4f/0x80 [ 426.916229][T16099] ? kasan_save_track+0x3e/0x80 [ 426.916248][T16099] ? __kasan_kmalloc+0x93/0xb0 [ 426.916270][T16099] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 426.916289][T16099] ? nfnetlink_rcv+0xf97/0x2590 [ 426.916312][T16099] ? netlink_unicast+0x82f/0x9e0 [ 426.916334][T16099] ? netlink_sendmsg+0x805/0xb30 [ 426.916361][T16099] ? __sock_sendmsg+0x21c/0x270 [ 426.916390][T16099] ? ____sys_sendmsg+0x505/0x820 [ 426.916414][T16099] ? ___sys_sendmsg+0x21f/0x2a0 [ 426.916440][T16099] ? __pfx_nf_tables_commit+0x10/0x10 [ 426.916520][T16099] ? __kasan_kmalloc+0x93/0xb0 [ 426.916556][T16099] nfnetlink_rcv+0x1ac9/0x2590 [ 426.916627][T16099] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 426.916702][T16099] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.916732][T16099] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.916778][T16099] netlink_unicast+0x82f/0x9e0 [ 426.916813][T16099] ? __pfx_netlink_unicast+0x10/0x10 [ 426.916838][T16099] ? __alloc_skb+0x198/0x3a0 [ 426.916861][T16099] ? netlink_sendmsg+0x642/0xb30 [ 426.916888][T16099] ? skb_put+0x11b/0x210 [ 426.916916][T16099] netlink_sendmsg+0x805/0xb30 [ 426.916957][T16099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.916990][T16099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.917022][T16099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.917042][T16099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.917086][T16099] __sock_sendmsg+0x21c/0x270 [ 426.917121][T16099] ____sys_sendmsg+0x505/0x820 [ 426.917153][T16099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.917190][T16099] ? import_iovec+0x74/0xa0 [ 426.917221][T16099] ___sys_sendmsg+0x21f/0x2a0 [ 426.917250][T16099] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.917316][T16099] ? __fget_files+0x2a/0x420 [ 426.917342][T16099] ? __fget_files+0x3a0/0x420 [ 426.917380][T16099] __x64_sys_sendmsg+0x19b/0x260 [ 426.917409][T16099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.917447][T16099] ? __pfx_ksys_write+0x10/0x10 [ 426.917481][T16099] do_syscall_64+0xec/0xf80 [ 426.917504][T16099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.917524][T16099] ? trace_irq_disable+0x37/0x100 [ 426.917551][T16099] ? clear_bhb_loop+0x60/0xb0 [ 426.917577][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.917605][T16099] RIP: 0033:0x7f549278f749 [ 426.917624][T16099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.917643][T16099] RSP: 002b:00007f549369a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.917666][T16099] RAX: ffffffffffffffda RBX: 00007f54929e5fa0 RCX: 00007f549278f749 [ 426.917682][T16099] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 426.917696][T16099] RBP: 00007f549369a090 R08: 0000000000000000 R09: 0000000000000000 [ 426.917709][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.917721][T16099] R13: 00007f54929e6038 R14: 00007f54929e5fa0 R15: 00007ffce084b038 [ 426.917757][T16099] [ 427.453759][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.538897][T16107] tipc: Enabled bearer , priority 0 [ 427.546672][T16107] syzkaller0: entered promiscuous mode [ 427.553142][T16107] syzkaller0: entered allmulticast mode [ 427.563747][T16107] tipc: Resetting bearer [ 427.624971][T16107] tipc: Disabling bearer [ 427.800062][T16118] tipc: Enabling of bearer rejected, already enabled [ 427.819626][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.433870][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.836542][T16139] bpq0: entered promiscuous mode [ 428.841720][T16139] bpq0: entered allmulticast mode [ 428.912458][T16074] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.256702][T16180] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2685'. [ 429.573306][T16193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2690'. [ 429.635790][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'. [ 430.166660][T16222] FAULT_INJECTION: forcing a failure. [ 430.166660][T16222] name failslab, interval 1, probability 0, space 0, times 0 [ 430.180734][T16222] CPU: 1 UID: 0 PID: 16222 Comm: syz.1.2696 Not tainted syzkaller #0 PREEMPT(full) [ 430.180763][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.180778][T16222] Call Trace: [ 430.180787][T16222] [ 430.180796][T16222] dump_stack_lvl+0xe8/0x150 [ 430.180831][T16222] should_fail_ex+0x414/0x560 [ 430.180870][T16222] should_failslab+0xa8/0x100 [ 430.180898][T16222] __kmalloc_cache_noprof+0x84/0x700 [ 430.180919][T16222] ? __asan_memcpy+0x40/0x70 [ 430.180964][T16222] ? nft_trans_elem_alloc+0x55/0x320 [ 430.180993][T16222] ? nft_set_elem_expr_setup+0xab/0x830 [ 430.181026][T16222] nft_trans_elem_alloc+0x55/0x320 [ 430.181054][T16222] ? nf_tables_newsetelem+0x23c3/0x4050 [ 430.181078][T16222] nf_tables_newsetelem+0x23e2/0x4050 [ 430.181147][T16222] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 430.181184][T16222] ? nla_validate_array+0xfc/0x260 [ 430.181244][T16222] ? __pfx___nla_validate_parse+0x10/0x10 [ 430.181277][T16222] ? __pfx_nf_tables_newset+0x10/0x10 [ 430.181304][T16222] ? nfnl_pernet+0x23/0x240 [ 430.181329][T16222] ? nfnl_pernet+0x23/0x240 [ 430.181364][T16222] ? __nla_parse+0x40/0x60 [ 430.181393][T16222] nfnetlink_rcv+0x11d9/0x2590 [ 430.181457][T16222] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 430.181533][T16222] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.181563][T16222] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.181611][T16222] netlink_unicast+0x82f/0x9e0 [ 430.181647][T16222] ? __pfx_netlink_unicast+0x10/0x10 [ 430.181671][T16222] ? __alloc_skb+0x198/0x3a0 [ 430.181695][T16222] ? netlink_sendmsg+0x642/0xb30 [ 430.181722][T16222] ? skb_put+0x11b/0x210 [ 430.181750][T16222] netlink_sendmsg+0x805/0xb30 [ 430.181791][T16222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.181824][T16222] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.181855][T16222] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.181875][T16222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.181906][T16222] __sock_sendmsg+0x21c/0x270 [ 430.181950][T16222] ____sys_sendmsg+0x505/0x820 [ 430.181984][T16222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.182021][T16222] ? import_iovec+0x74/0xa0 [ 430.182052][T16222] ___sys_sendmsg+0x21f/0x2a0 [ 430.182082][T16222] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.182149][T16222] ? __fget_files+0x2a/0x420 [ 430.182175][T16222] ? __fget_files+0x3a0/0x420 [ 430.182214][T16222] __x64_sys_sendmsg+0x19b/0x260 [ 430.182245][T16222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.182283][T16222] ? __pfx_ksys_write+0x10/0x10 [ 430.182318][T16222] do_syscall_64+0xec/0xf80 [ 430.182342][T16222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.182363][T16222] ? trace_irq_disable+0x37/0x100 [ 430.182392][T16222] ? clear_bhb_loop+0x60/0xb0 [ 430.182419][T16222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.182440][T16222] RIP: 0033:0x7f284538f749 [ 430.182461][T16222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.182480][T16222] RSP: 002b:00007f28462df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.182504][T16222] RAX: ffffffffffffffda RBX: 00007f28455e5fa0 RCX: 00007f284538f749 [ 430.182520][T16222] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 430.182534][T16222] RBP: 00007f28462df090 R08: 0000000000000000 R09: 0000000000000000 [ 430.182548][T16222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.182561][T16222] R13: 00007f28455e6038 R14: 00007f28455e5fa0 R15: 00007ffd32b8a198 [ 430.182598][T16222] [ 430.753583][T16220] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.810781][T16230] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2698'. [ 430.823244][T16232] netlink: 'syz.4.2699': attribute type 153 has an invalid length. [ 430.882691][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2699'. [ 430.915959][T16235] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2700'. [ 430.957012][T16235] net_ratelimit: 5 callbacks suppressed [ 430.957033][T16235] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 431.065956][T16240] batadv0: left allmulticast mode [ 431.077715][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.652452][T16260] __nla_validate_parse: 1 callbacks suppressed [ 431.652474][T16260] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2706'. [ 431.696562][T16260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2706'. [ 432.317572][T16276] veth0_to_hsr: entered promiscuous mode [ 432.326215][T16276] veth0_to_hsr: entered allmulticast mode [ 433.141928][T16300] xt_CT: No such helper "syz0" [ 433.185871][T16307] m1Ie5nè‹Ò: entered promiscuous mode [ 433.438551][T16314] xt_bpf: check failed: parse error [ 433.533324][T16289] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.591256][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'. [ 433.825468][T16296] netlink: 'syz.0.2712': attribute type 6 has an invalid length. [ 434.262955][T16330] tipc: Enabling of bearer rejected, failed to enable media [ 434.340065][T16318] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.606473][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 435.135888][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'. [ 435.137411][T16361] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 435.160605][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'. [ 435.169569][T16361] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 435.169612][T16361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.230135][T16360] netlink: 'syz.1.2727': attribute type 15 has an invalid length. [ 435.284061][T16364] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2729'. [ 435.436234][T16339] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.713544][T16377] syzkaller0: entered promiscuous mode [ 435.719467][T16377] syzkaller0: entered allmulticast mode [ 435.753094][T16377] netlink: 'syz.4.2734': attribute type 3 has an invalid length. [ 436.400985][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.438565][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.463407][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.472454][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.481050][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.494023][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.520614][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.559677][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.580995][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2735'. [ 436.590704][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.600520][T16399] xt_HMARK: spi-set and port-set can't be combined [ 436.884258][T16409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 437.050791][T16379] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.221073][T16418] sctp: [Deprecated]: syz.1.2748 (pid 16418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.221073][T16418] Use struct sctp_sack_info instead [ 437.407723][T16422] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2749'. [ 437.451967][T16422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2749'. [ 437.693605][T16416] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.473284][T16448] IPVS: Scheduler module ip_vs_sip not found [ 438.570493][T16450] tipc: Enabling of bearer rejected, failed to enable media [ 439.133406][T16460] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2759'. [ 439.819069][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 439.855136][T16453] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.893983][T16462] netlink: 'syz.2.2760': attribute type 8 has an invalid length. [ 440.002862][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 440.186009][T16473] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2761'. [ 440.220085][T16475] FAULT_INJECTION: forcing a failure. [ 440.220085][T16475] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 440.283963][T16475] CPU: 0 UID: 0 PID: 16475 Comm: syz.4.2764 Not tainted syzkaller #0 PREEMPT(full) [ 440.283994][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.284009][T16475] Call Trace: [ 440.284017][T16475] [ 440.284053][T16475] dump_stack_lvl+0xe8/0x150 [ 440.284086][T16475] should_fail_ex+0x414/0x560 [ 440.284127][T16475] _copy_from_user+0x2d/0xb0 [ 440.284155][T16475] ___sys_sendmsg+0x158/0x2a0 [ 440.284185][T16475] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.284255][T16475] ? __fget_files+0x2a/0x420 [ 440.284282][T16475] ? __fget_files+0x3a0/0x420 [ 440.284320][T16475] __x64_sys_sendmsg+0x19b/0x260 [ 440.284351][T16475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.284389][T16475] ? __pfx_ksys_write+0x10/0x10 [ 440.284423][T16475] do_syscall_64+0xec/0xf80 [ 440.284447][T16475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.284468][T16475] ? trace_irq_disable+0x37/0x100 [ 440.284496][T16475] ? clear_bhb_loop+0x60/0xb0 [ 440.284523][T16475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.284545][T16475] RIP: 0033:0x7f28bfd8f749 [ 440.284565][T16475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.284583][T16475] RSP: 002b:00007f28c0b95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.284606][T16475] RAX: ffffffffffffffda RBX: 00007f28bffe5fa0 RCX: 00007f28bfd8f749 [ 440.284623][T16475] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 440.284637][T16475] RBP: 00007f28c0b95090 R08: 0000000000000000 R09: 0000000000000000 [ 440.284651][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.284664][T16475] R13: 00007f28bffe6038 R14: 00007f28bffe5fa0 R15: 00007fff7898c4a8 [ 440.284702][T16475] [ 440.617932][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 441.106583][T16488] bond0: (slave rose0): Releasing backup interface [ 441.916452][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 442.365000][T16526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2777'. [ 442.437320][T16534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2777'. [ 442.699947][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 442.821694][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2784'. [ 442.843349][T16557] FAULT_INJECTION: forcing a failure. [ 442.843349][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 442.911432][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.2.2783 Not tainted syzkaller #0 PREEMPT(full) [ 442.911464][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.911477][T16557] Call Trace: [ 442.911486][T16557] [ 442.911495][T16557] dump_stack_lvl+0xe8/0x150 [ 442.911529][T16557] should_fail_ex+0x414/0x560 [ 442.911570][T16557] should_failslab+0xa8/0x100 [ 442.911600][T16557] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 442.911636][T16557] ? __alloc_skb+0x1dc/0x3a0 [ 442.911657][T16557] ? __local_bh_enable_ip+0xd0/0x130 [ 442.911681][T16557] ? __alloc_skb+0x198/0x3a0 [ 442.911705][T16557] __alloc_skb+0x1dc/0x3a0 [ 442.911733][T16557] nf_tables_setelem_notify+0xcf/0x310 [ 442.911778][T16557] nf_tables_commit+0x2648/0xa350 [ 442.911836][T16557] ? kasan_save_track+0x4f/0x80 [ 442.911859][T16557] ? nfnetlink_rcv+0xf97/0x2590 [ 442.911882][T16557] ? netlink_unicast+0x82f/0x9e0 [ 442.911904][T16557] ? netlink_sendmsg+0x805/0xb30 [ 442.911937][T16557] ? __pfx_nf_tables_commit+0x10/0x10 [ 442.912028][T16557] ? __kasan_kmalloc+0x93/0xb0 [ 442.912066][T16557] nfnetlink_rcv+0x1ac9/0x2590 [ 442.912131][T16557] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 442.912207][T16557] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.912237][T16557] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.912286][T16557] netlink_unicast+0x82f/0x9e0 [ 442.912322][T16557] ? __pfx_netlink_unicast+0x10/0x10 [ 442.912347][T16557] ? __alloc_skb+0x198/0x3a0 [ 442.912371][T16557] ? netlink_sendmsg+0x642/0xb30 [ 442.912398][T16557] ? skb_put+0x11b/0x210 [ 442.912427][T16557] netlink_sendmsg+0x805/0xb30 [ 442.912467][T16557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.912500][T16557] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.912531][T16557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.912550][T16557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.912580][T16557] __sock_sendmsg+0x21c/0x270 [ 442.912617][T16557] ____sys_sendmsg+0x505/0x820 [ 442.912648][T16557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.912704][T16557] ? import_iovec+0x74/0xa0 [ 442.912735][T16557] ___sys_sendmsg+0x21f/0x2a0 [ 442.912762][T16557] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.912828][T16557] ? __fget_files+0x2a/0x420 [ 442.912854][T16557] ? __fget_files+0x3a0/0x420 [ 442.912893][T16557] __x64_sys_sendmsg+0x19b/0x260 [ 442.912924][T16557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.912968][T16557] ? __pfx_ksys_write+0x10/0x10 [ 442.913002][T16557] do_syscall_64+0xec/0xf80 [ 442.913025][T16557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.913046][T16557] ? trace_irq_disable+0x37/0x100 [ 442.913074][T16557] ? clear_bhb_loop+0x60/0xb0 [ 442.913098][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.913118][T16557] RIP: 0033:0x7f549278f749 [ 442.913137][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.913156][T16557] RSP: 002b:00007f549369a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.913178][T16557] RAX: ffffffffffffffda RBX: 00007f54929e5fa0 RCX: 00007f549278f749 [ 442.913194][T16557] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 442.913206][T16557] RBP: 00007f549369a090 R08: 0000000000000000 R09: 0000000000000000 [ 442.913219][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.913232][T16557] R13: 00007f54929e6038 R14: 00007f54929e5fa0 R15: 00007ffce084b038 [ 442.913264][T16557] [ 442.930575][T16561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.092990][T16563] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2786'. [ 443.323493][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 443.406503][T16574] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 443.428279][T16574] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2790'. [ 443.452504][T16575] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 443.478067][T16574] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 443.783642][T16597] æÿîÿ: entered promiscuous mode [ 443.824693][T16605] IPv6: Can't replace route, no match found [ 443.833445][T16604] netlink: 'syz.3.2798': attribute type 5 has an invalid length. [ 444.074539][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'. [ 444.129027][T16629] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2802'. [ 444.149974][T16629] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2802'. [ 444.384970][T16637] netlink: 'syz.3.2806': attribute type 13 has an invalid length. [ 444.394025][T16637] netlink: 'syz.3.2806': attribute type 17 has an invalid length. [ 444.492231][T16637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.511679][T16637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.531266][T16626] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.065364][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.090770][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.097757][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.104658][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.111546][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.118413][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.125242][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.132140][T16660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.211941][T16628] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.817665][T16651] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.182363][T16668] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2815'. [ 446.245212][T16674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2817'. [ 446.271555][T16674] netlink: 'syz.3.2817': attribute type 6 has an invalid length. [ 446.300481][T16674] netlink: 'syz.3.2817': attribute type 5 has an invalid length. [ 446.755134][T16672] syz_tun: entered allmulticast mode [ 447.682762][ T30] audit: type=1800 audit(1768002092.682:6): pid=16725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2828" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2894 res=0 errno=0 [ 447.949685][T16730] __nla_validate_parse: 4 callbacks suppressed [ 447.949706][T16730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2830'. [ 448.430294][T16751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2837'. [ 448.684299][T16762] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 448.739096][T16762] net_ratelimit: 2297 callbacks suppressed [ 448.739118][T16762] openvswitch: netlink: IP tunnel dst address not specified [ 449.270873][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2846'. [ 449.287565][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 449.334131][T16780] 8021q: adding VLAN 0 to HW filter on device bond12 [ 449.366466][T16776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 449.591239][T16796] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2849'. [ 449.634260][T16796] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2849'. [ 449.653925][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2853'. [ 449.678259][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2853'. [ 449.766176][T16796] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 449.794421][T16796] bond0 (unregistering): (slave team0): Releasing backup interface [ 449.821148][T16796] bond0 (unregistering): Released all slaves [ 450.686697][T16822] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.741818][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.752541][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.761413][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.779099][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.786860][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.922054][T16859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2869'. [ 450.959027][T16860] netlink: 'syz.0.2868': attribute type 5 has an invalid length. [ 451.235314][ T5830] syz_tun (unregistering): left allmulticast mode [ 451.355552][T16856] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.923885][T16853] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.868026][ T5829] Bluetooth: hci5: command tx timeout [ 453.137499][T16886] netlink: 'syz.0.2876': attribute type 8 has an invalid length. [ 453.177238][T16886] __nla_validate_parse: 3 callbacks suppressed [ 453.177258][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 453.213163][T16888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2876'. [ 453.292801][T16853] chnl_net:caif_netlink_parms(): no params data found [ 453.321050][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2876'. [ 453.572592][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.587133][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.594633][T16853] bridge_slave_0: entered allmulticast mode [ 453.602622][T16853] bridge_slave_0: entered promiscuous mode [ 453.612642][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.620145][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.627525][T16853] bridge_slave_1: entered allmulticast mode [ 453.635707][T16853] bridge_slave_1: entered promiscuous mode [ 453.723672][T16853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.761126][T16853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.942606][T16853] team0: Port device team_slave_0 added [ 454.022392][T16853] team0: Port device team_slave_1 added [ 454.069503][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2884'. [ 454.122849][T16853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.140157][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.190732][T16853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.217310][T16853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.233507][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.264833][T16919] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2886'. [ 454.308069][T16853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.516242][T16929] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2885'. [ 454.529147][T16853] hsr_slave_0: entered promiscuous mode [ 454.552970][T16853] hsr_slave_1: entered promiscuous mode [ 454.562271][T16910] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.578086][T16929] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2885'. [ 454.938230][ T5835] Bluetooth: hci5: command tx timeout [ 454.958804][T16941] netlink: 'syz.1.2889': attribute type 1 has an invalid length. [ 455.212794][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2891'. [ 455.221910][T16951] netlink: 'syz.1.2891': attribute type 7 has an invalid length. [ 455.234425][T16951] netlink: 'syz.1.2891': attribute type 8 has an invalid length. [ 455.243096][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 455.255061][T16853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.267168][T16853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.292049][T16921] ip6_vti0 speed is unknown, defaulting to 1000 [ 455.306915][T16951] dummy0: entered promiscuous mode [ 455.328254][T16951] dummy0: left promiscuous mode [ 455.528982][T16956] netlink: 584 bytes leftover after parsing attributes in process `syz.0.2892'. [ 456.154587][T16853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.165291][T16853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.434291][T16853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.454305][T16853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.485191][T16963] bond0: (slave rose0): Enslaving as an active interface with an up link [ 456.700198][T16966] netlink: 'syz.0.2896': attribute type 7 has an invalid length. [ 456.802675][T16853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.820701][T16853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.018228][ T5835] Bluetooth: hci5: command tx timeout [ 457.297357][T16853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.337313][T16853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.381424][T16853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.404830][T16853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.585573][T16984] pimreg1: tun_chr_ioctl cmd 1074025677 [ 457.593193][T16984] pimreg1: linktype set to 804 [ 457.600759][T16983] pimreg1: tun_chr_ioctl cmd 2147767521 [ 457.679329][T16989] tipc: Enabling of bearer rejected, already enabled [ 457.735091][T16991] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 457.844405][T16853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.905818][T16853] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.932008][T13750] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.939320][T13750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.012160][T13750] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.019440][T13750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.105370][T17017] netlink: 'syz.0.2905': attribute type 21 has an invalid length. [ 458.539179][T16853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.613314][T16853] veth0_vlan: entered promiscuous mode [ 458.632678][T16853] veth1_vlan: entered promiscuous mode [ 458.678035][T16853] veth0_macvtap: entered promiscuous mode [ 458.691846][T16853] veth1_macvtap: entered promiscuous mode [ 458.725811][T16853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.746054][T16853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.772547][T13747] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.808612][T13747] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.850005][T13747] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.891225][T13747] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.095598][T13747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.108495][ T5835] Bluetooth: hci5: command tx timeout [ 459.137932][T13747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.209015][ T9039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.236502][ T9039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.327963][T17053] x_tables: duplicate underflow at hook 1 [ 459.335112][T17053] __nla_validate_parse: 4 callbacks suppressed [ 459.335130][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2917'. [ 459.335758][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2917'. [ 459.352658][T17053] netlink: 'syz.4.2917': attribute type 1 has an invalid length. [ 459.374050][T17053] netlink: 'syz.4.2917': attribute type 2 has an invalid length. [ 459.432527][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 459.469055][T17054] netlink: 'syz.4.2917': attribute type 1 has an invalid length. [ 459.476951][T17054] netlink: 'syz.4.2917': attribute type 2 has an invalid length. [ 459.494028][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 459.549073][T17058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2918'. [ 459.878307][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2923'. [ 459.882138][T17080] nr4: entered allmulticast mode [ 459.904613][T17077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2923'. [ 460.430915][T17074] ip6_vti0 speed is unknown, defaulting to 1000 [ 460.508781][T17086] bond0: (slave netdevsim0): Releasing backup interface [ 460.981562][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 461.019173][T17109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2930'. [ 462.774174][T17138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2939'. [ 462.787230][T17115] infiniband !yz!: set down [ 462.819686][T17115] infiniband !yz!: added team_slave_0 [ 462.846032][T17115] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 462.850874][T17115] infiniband !yz!: Couldn't open port 1 [ 462.911772][T17144] netlink: 'syz.3.2941': attribute type 6 has an invalid length. [ 462.921259][T17144] netlink: 'syz.3.2941': attribute type 5 has an invalid length. [ 462.935968][T17115] RDS/IB: !yz!: added [ 462.946653][T17143] netlink: 'syz.3.2941': attribute type 4 has an invalid length. [ 462.956249][T17115] smc: adding ib device !yz! with port count 1 [ 462.969278][T17144] netlink: 'syz.3.2941': attribute type 4 has an invalid length. [ 462.973361][T17115] smc: ib device !yz! port 1 has no pnetid [ 462.988219][T17143] netlink: 'syz.3.2941': attribute type 4 has an invalid length. [ 463.166964][T17150] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 463.311152][T17150] syzkaller1: entered promiscuous mode [ 463.323247][T17150] syzkaller1: entered allmulticast mode [ 463.925751][T17181] netlink: 'syz.0.2953': attribute type 2 has an invalid length. [ 464.515514][T17210] __nla_validate_parse: 7 callbacks suppressed [ 464.515541][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2958'. [ 464.533065][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2958'. [ 464.559172][T17210] gretap0: entered promiscuous mode [ 464.566825][T17210] gretap0: left promiscuous mode [ 464.598865][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2958'. [ 464.740611][T17211] bond9: entered promiscuous mode [ 464.758334][T17211] 8021q: adding VLAN 0 to HW filter on device bond9 [ 464.982862][T17192] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.251194][T17220] validate_nla: 1 callbacks suppressed [ 465.251218][T17220] netlink: 'syz.2.2962': attribute type 21 has an invalid length. [ 465.293831][T17220] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2962'. [ 465.318280][T17220] netlink: 'syz.2.2962': attribute type 4 has an invalid length. [ 465.341332][T17220] netlink: 'syz.2.2962': attribute type 3 has an invalid length. [ 465.364355][T17220] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2962'. [ 465.710499][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 465.754477][T17236] tipc: Started in network mode [ 465.808023][T17236] tipc: Node identity fafc63b8ca04, cluster identity 4711 [ 465.868189][T17236] tipc: Enabled bearer , priority 0 [ 465.875247][T17237] syzkaller0: entered promiscuous mode [ 465.882045][T17237] syzkaller0: entered allmulticast mode [ 466.035817][T17237] tipc: Resetting bearer [ 466.071804][T17237] tipc: Disabling bearer [ 466.759556][T17249] ip6_vti0 speed is unknown, defaulting to 1000 [ 468.167438][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.180030][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.189535][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.197689][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.205657][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.910522][T17289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2979'. [ 468.930272][ T5824] syz_tun (unregistering): left allmulticast mode [ 468.999627][T17292] netlink: 'syz.2.2980': attribute type 10 has an invalid length. [ 469.091884][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2981'. [ 469.101766][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 469.112101][T17294] netlink: 'syz.2.2981': attribute type 19 has an invalid length. [ 469.120337][T17294] netlink: 'syz.2.2981': attribute type 20 has an invalid length. [ 469.144155][T17294] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2981'. [ 469.217150][T17296] x_tables: duplicate underflow at hook 1 [ 470.123566][T17258] ip6_vti0 speed is unknown, defaulting to 1000 [ 470.301061][ T5829] Bluetooth: hci1: command tx timeout [ 471.479029][T17300] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.649414][T17312] Bluetooth: MGMT ver 1.23 [ 471.658993][T17312] netlink: 'syz.4.2988': attribute type 1 has an invalid length. [ 471.666784][T17312] netlink: 'syz.4.2988': attribute type 2 has an invalid length. [ 471.684980][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2988'. [ 471.827011][T13753] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.846484][T13753] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.941062][T13753] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.958298][T13753] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.026410][T13753] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.036660][T13753] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.053394][T17286] ip6_vti0 speed is unknown, defaulting to 1000 [ 472.094063][T13753] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.119884][T13753] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.144280][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2991'. [ 472.153720][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 472.388021][ T5829] Bluetooth: hci1: command tx timeout [ 472.425181][T13753] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 473.112017][T13753] bond1 (unregistering): Released all slaves [ 473.218910][T13753] bond2 (unregistering): Released all slaves [ 473.232650][T13753] bond3 (unregistering): Released all slaves [ 473.344025][T13753] bond4 (unregistering): Released all slaves [ 473.359113][T13753] bond5 (unregistering): Released all slaves [ 473.471196][T13753] bond6 (unregistering): Released all slaves [ 473.583377][T13753] bond7 (unregistering): Released all slaves [ 473.598651][T17289] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.664853][T17333] openvswitch: netlink: Flow key attribute not present in set flow. [ 473.848867][T13747] smc: removing ib device syz2 [ 474.462243][ T5829] Bluetooth: hci1: command tx timeout [ 476.113712][T17286] chnl_net:caif_netlink_parms(): no params data found [ 476.369049][T17354] blkio.reset_stats is deprecated [ 476.521277][T17286] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.532197][T17286] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.540391][T17286] bridge_slave_0: entered allmulticast mode [ 476.548569][ T5829] Bluetooth: hci1: command tx timeout [ 476.557604][T17286] bridge_slave_0: entered promiscuous mode [ 476.568643][T17357] xt_hashlimit: size too large, truncated to 1048576 [ 476.575611][T17357] xt_hashlimit: max too large, truncated to 1048576 [ 476.584125][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2998'. [ 476.594465][T17286] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.601925][T17286] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.609680][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2998'. [ 476.620361][T17286] bridge_slave_1: entered allmulticast mode [ 476.628062][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2998'. [ 476.682311][T17286] bridge_slave_1: entered promiscuous mode [ 476.848738][T13750] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.857035][T13750] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.083527][T17286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.149907][T17286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.163307][T13750] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.190802][T13750] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.430815][T13753] : left promiscuous mode [ 477.553079][T17286] team0: Port device team_slave_0 added [ 477.570069][T13753] : left promiscuous mode [ 477.592587][T17286] team0: Port device team_slave_1 added [ 477.691057][T13753] tipc: Disabling bearer [ 477.707930][T13753] tipc: Left network mode [ 477.726826][T17286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.741231][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.776975][T17286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.818418][T17286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.825546][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.852464][T17286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.073484][T17286] hsr_slave_0: entered promiscuous mode [ 478.080677][T17286] hsr_slave_1: entered promiscuous mode [ 478.087443][T17286] debugfs: 'hsr0' already exists in 'hsr' [ 478.093369][T17286] Cannot create hsr debugfs directory [ 478.175933][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'. [ 478.200390][T17368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.224540][T17368] team0: left promiscuous mode [ 478.231102][T17368] team_slave_0: left promiscuous mode [ 478.242731][T17368] team_slave_1: left promiscuous mode [ 478.248806][T17368] team0: left allmulticast mode [ 478.253901][T17368] team_slave_0: left allmulticast mode [ 478.260513][T17368] team_slave_1: left allmulticast mode [ 478.268285][T17368] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.276909][T17376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3003'. [ 478.286980][T17368] dummy0: left promiscuous mode [ 478.295678][T17368] 0ªX¹¦À: left allmulticast mode [ 478.302938][T17368] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 479.220992][T17417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 479.358837][T17421] netlink: 'syz.4.3015': attribute type 1 has an invalid length. [ 479.390450][T17419] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3014'. [ 479.422001][T17425] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 479.836562][T17286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.877637][T17286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.939239][T17286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.005006][T17286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.354600][T17286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.495002][T17286] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.761016][T13753] pim6reg (unregistering): left allmulticast mode [ 481.480099][T17480] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3027'. [ 481.500957][T17480] netlink: 'syz.3.3027': attribute type 10 has an invalid length. [ 481.613133][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 481.687159][T17489] netlink: 'syz.4.3029': attribute type 1 has an invalid length. [ 482.025468][T17480] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 482.094200][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.101444][ T9039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.130660][T17496] netlink: 'syz.3.3030': attribute type 10 has an invalid length. [ 482.152143][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.159385][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.250596][T17286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.392425][T17499] bond10: option all_slaves_active: invalid value (13) [ 482.413908][T17499] bond10 (unregistering): Released all slaves [ 482.592740][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 482.674251][T17503] geneve4: entered promiscuous mode [ 482.769987][T17504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.969543][T17504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.043426][T13753] IPVS: stop unused estimator thread 0... [ 483.219819][T17504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.264826][T17286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.400616][T17504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.600229][T17286] veth0_vlan: entered promiscuous mode [ 483.805436][ T9039] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.820802][T17286] veth1_vlan: entered promiscuous mode [ 483.995258][T13747] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.043392][T13747] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.115188][T13753] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.179924][T17286] veth0_macvtap: entered promiscuous mode [ 484.203734][T17286] veth1_macvtap: entered promiscuous mode [ 484.295873][T17286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.388749][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3040'. [ 484.449917][T17286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.560076][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.619035][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.671494][ T1016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.733814][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.780214][T17557] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3042'. [ 484.968861][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3045'. [ 485.060135][T13745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.078032][T13745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.205688][T17570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3048'. [ 485.253713][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.275835][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.310907][T17575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.361842][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3049'. [ 486.262352][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.274057][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.283211][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.300191][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.309301][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.596307][T17611] bpq0: left promiscuous mode [ 486.610911][T17611] bpq0: left allmulticast mode [ 486.693788][T17619] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3061'. [ 486.704402][T17619] netlink: 'syz.0.3061': attribute type 9 has an invalid length. [ 486.713477][T17619] netlink: 'syz.0.3061': attribute type 10 has an invalid length. [ 487.285574][T17636] xt_l2tp: wrong L2TP version: 1 [ 487.683058][T17646] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 487.700916][T17646] syzkaller1: linktype set to 768 [ 487.782643][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 487.828207][ T40] syzkaller1: tun_net_xmit 90 [ 488.057518][T17662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3072'. [ 488.075507][T17663] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3073'. [ 488.233235][T17597] chnl_net:caif_netlink_parms(): no params data found [ 488.351941][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3076'. [ 488.378799][ T5835] Bluetooth: hci3: command tx timeout [ 488.455310][T17681] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 488.539607][T17684] netlink: 'syz.0.3077': attribute type 8 has an invalid length. [ 488.552291][T17597] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.572989][T17597] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.581877][T17597] bridge_slave_0: entered allmulticast mode [ 488.596811][T17597] bridge_slave_0: entered promiscuous mode [ 488.606825][T17597] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.614618][T17597] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.622237][T17597] bridge_slave_1: entered allmulticast mode [ 488.630390][T17597] bridge_slave_1: entered promiscuous mode [ 488.899478][T17597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.962316][T17597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.201029][T17701] netlink: 'syz.4.3082': attribute type 10 has an invalid length. [ 489.283172][T17708] FAULT_INJECTION: forcing a failure. [ 489.283172][T17708] name failslab, interval 1, probability 0, space 0, times 0 [ 489.323554][T17708] CPU: 0 UID: 0 PID: 17708 Comm: syz.2.3083 Not tainted syzkaller #0 PREEMPT(full) [ 489.323587][T17708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.323601][T17708] Call Trace: [ 489.323609][T17708] [ 489.323618][T17708] dump_stack_lvl+0xe8/0x150 [ 489.323651][T17708] should_fail_ex+0x414/0x560 [ 489.323690][T17708] should_failslab+0xa8/0x100 [ 489.323718][T17708] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 489.323752][T17708] ? __alloc_skb+0x198/0x3a0 [ 489.323774][T17708] ? __alloc_skb+0x1dc/0x3a0 [ 489.323794][T17708] ? __local_bh_enable_ip+0xd0/0x130 [ 489.323815][T17708] ? __alloc_skb+0x198/0x3a0 [ 489.323838][T17708] __alloc_skb+0x1dc/0x3a0 [ 489.323864][T17708] netlink_ack+0x146/0xa50 [ 489.323898][T17708] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 489.323928][T17708] nfnetlink_rcv+0x2309/0x2590 [ 489.323989][T17708] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 489.324031][T17708] ? ref_tracker_free+0x63a/0x7d0 [ 489.324082][T17708] ? __netlink_deliver_tap+0x807/0x850 [ 489.324110][T17708] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.324155][T17708] netlink_unicast+0x82f/0x9e0 [ 489.324206][T17708] ? __pfx_netlink_unicast+0x10/0x10 [ 489.324238][T17708] ? __alloc_skb+0x198/0x3a0 [ 489.324261][T17708] ? netlink_sendmsg+0x642/0xb30 [ 489.324287][T17708] ? skb_put+0x11b/0x210 [ 489.324315][T17708] netlink_sendmsg+0x805/0xb30 [ 489.324354][T17708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.324387][T17708] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.324418][T17708] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.324438][T17708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.324469][T17708] __sock_sendmsg+0x21c/0x270 [ 489.324504][T17708] ____sys_sendmsg+0x505/0x820 [ 489.324538][T17708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.324575][T17708] ? import_iovec+0x74/0xa0 [ 489.324606][T17708] ___sys_sendmsg+0x21f/0x2a0 [ 489.324646][T17708] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.324710][T17708] ? __fget_files+0x2a/0x420 [ 489.324735][T17708] ? __fget_files+0x3a0/0x420 [ 489.324791][T17708] __x64_sys_sendmsg+0x19b/0x260 [ 489.324822][T17708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.324860][T17708] ? __pfx_ksys_write+0x10/0x10 [ 489.324894][T17708] do_syscall_64+0xec/0xf80 [ 489.324917][T17708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.324938][T17708] ? trace_irq_disable+0x37/0x100 [ 489.324966][T17708] ? clear_bhb_loop+0x60/0xb0 [ 489.324993][T17708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.325014][T17708] RIP: 0033:0x7f3ca6b8f749 [ 489.325034][T17708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.325052][T17708] RSP: 002b:00007f3ca7a53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.325076][T17708] RAX: ffffffffffffffda RBX: 00007f3ca6de5fa0 RCX: 00007f3ca6b8f749 [ 489.325093][T17708] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 489.325107][T17708] RBP: 00007f3ca7a53090 R08: 0000000000000000 R09: 0000000000000000 [ 489.325120][T17708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.325134][T17708] R13: 00007f3ca6de6038 R14: 00007f3ca6de5fa0 R15: 00007ffe9e2f2d88 [ 489.325169][T17708] [ 489.650034][T17701] team0: Port device geneve0 added [ 489.783108][T17597] team0: Port device team_slave_0 added [ 489.799827][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.812294][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.840610][T17597] team0: Port device team_slave_1 added [ 489.885329][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.950311][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.999147][T17597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.006259][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.036882][T17597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.050604][T17597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.057604][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.085052][T17597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.256712][T17597] hsr_slave_0: entered promiscuous mode [ 490.270305][T17597] hsr_slave_1: entered promiscuous mode [ 490.311601][T17597] debugfs: 'hsr0' already exists in 'hsr' [ 490.327904][T17597] Cannot create hsr debugfs directory [ 490.384726][T17729] Bluetooth: MGMT ver 1.23 [ 490.422781][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.430480][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.443716][T17732] xt_connbytes: Forcing CT accounting to be enabled [ 490.445563][T17733] xt_connbytes: Forcing CT accounting to be enabled [ 490.458022][ T5835] Bluetooth: hci3: command tx timeout [ 490.590266][T17727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.609964][T17727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.820651][T17731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.839239][T13744] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.869009][T13744] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.897966][T13744] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.920077][T13744] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.547288][ T5829] Bluetooth: hci3: command tx timeout [ 494.631639][ T5829] Bluetooth: hci3: command 0x0419 tx timeout [ 496.746396][ T5835] Bluetooth: hci3: command 0x0419 tx timeout [ 525.375481][T17774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.915925][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.115728][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.935471][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 527.217388][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.804083][ T5829] Bluetooth: hci4: command tx timeout [ 532.895186][ T5829] Bluetooth: hci4: command tx timeout [ 533.295697][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.573822][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 533.636909][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 533.854394][ T6074] bridge_slave_1: left allmulticast mode [ 534.075528][ T6074] bridge_slave_1: left promiscuous mode [ 534.175678][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.335259][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.517459][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.986759][ T5835] Bluetooth: hci4: command tx timeout [ 536.895228][ T6074] bridge_slave_0: left allmulticast mode [ 537.034632][ T5835] Bluetooth: hci4: command tx timeout [ 537.035905][ T6074] bridge_slave_0: left promiscuous mode [ 537.397255][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.926137][ T5835] Bluetooth: hci6: command tx timeout [ 540.007684][ T5835] Bluetooth: hci6: command tx timeout [ 542.067100][ T5835] Bluetooth: hci6: command tx timeout [ 544.147408][ T5835] Bluetooth: hci6: command tx timeout [ 552.657449][ T6074] veth0_to_bond: left allmulticast mode [ 553.016604][ T6074] veth0_to_bond: left promiscuous mode [ 553.176829][ T6074] bridge7: port 1(veth0_to_bond) entered disabled state [ 556.036318][ T6074] tipc: Resetting bearer [ 559.895405][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.157277][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.425483][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.896747][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 561.306576][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 563.427464][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 563.584970][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 563.736202][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 564.146175][ T5835] Bluetooth: hci2: command tx timeout [ 564.274903][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 564.696843][T17774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 566.227194][T17774] Bluetooth: hci2: command tx timeout [ 567.515748][T17774] Bluetooth: hci7: command tx timeout [ 568.315355][T17774] Bluetooth: hci2: command tx timeout [ 569.585686][T17774] Bluetooth: hci7: command tx timeout [ 570.395321][T17774] Bluetooth: hci2: command tx timeout [ 571.686368][T17774] Bluetooth: hci7: command tx timeout [ 573.746777][T17774] Bluetooth: hci7: command tx timeout [ 581.562618][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 581.866609][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 582.175599][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 582.405818][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 582.925825][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 585.915089][T17774] Bluetooth: hci8: command tx timeout [ 587.116389][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 587.286391][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 587.635465][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 587.987120][ T5829] Bluetooth: hci8: command tx timeout [ 588.075298][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 588.546689][T17804] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 590.070919][T17813] Bluetooth: hci8: command tx timeout [ 590.177074][T17813] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 590.486161][T17813] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 590.707090][T17813] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 590.955436][T17813] Bluetooth: hci5: command 0x0406 tx timeout [ 590.976197][T17813] Bluetooth: hci1: command 0x0406 tx timeout [ 591.106539][T17813] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 591.326249][T17813] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 591.676425][T17813] Bluetooth: hci9: command tx timeout [ 592.166654][T17774] Bluetooth: hci8: command tx timeout [ 593.746073][T17804] Bluetooth: hci9: command tx timeout [ 594.944658][T17804] Bluetooth: hci10: command tx timeout [ 595.836420][T17804] Bluetooth: hci9: command tx timeout [ 597.042956][T17804] Bluetooth: hci10: command tx timeout [ 597.916927][T17804] Bluetooth: hci9: command tx timeout [ 599.105226][T17804] Bluetooth: hci10: command tx timeout [ 601.186964][T17804] Bluetooth: hci10: command tx timeout [ 611.355583][T17774] Bluetooth: hci3: command 0x0419 tx timeout [ 618.514882][T17774] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 618.857047][T17774] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 619.077592][T17774] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 619.792010][T17774] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 620.176478][T17774] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 623.036743][T17774] Bluetooth: hci11: command tx timeout [ 625.106828][T17774] Bluetooth: hci11: command tx timeout [ 627.186203][T17774] Bluetooth: hci11: command tx timeout [ 629.266379][T17774] Bluetooth: hci11: command tx timeout [ 630.405659][T17804] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 630.517257][T17804] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 630.817381][T17804] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 631.355748][T17804] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 631.576618][T17804] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 634.546586][T17804] Bluetooth: hci12: command tx timeout [ 636.655213][T17804] Bluetooth: hci12: command tx timeout [ 638.715912][T17804] Bluetooth: hci12: command tx timeout [ 640.805230][T17804] Bluetooth: hci12: command tx timeout [ 642.526842][T17774] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 642.706417][T17774] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 642.887120][T17774] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 643.606792][T17774] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 643.946112][T17774] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 647.365674][T17774] Bluetooth: hci13: command tx timeout [ 649.125354][T17804] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 649.466393][T17804] Bluetooth: hci13: command tx timeout [ 649.506688][T17804] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 649.855915][T17804] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 651.077329][T17804] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 651.356555][T17804] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 651.505929][T17804] Bluetooth: hci13: command tx timeout [ 652.085046][T17804] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 652.265283][T17804] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 652.315990][T17804] Bluetooth: hci4: command 0x0406 tx timeout [ 652.396806][T17804] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 653.217160][T17804] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 653.586031][T17804] Bluetooth: hci13: command tx timeout [ 653.916578][T17804] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 654.066652][T17804] Bluetooth: hci14: command tx timeout [ 656.153793][T17774] Bluetooth: hci14: command tx timeout [ 656.965598][T17774] Bluetooth: hci15: command tx timeout [ 658.231992][T17774] Bluetooth: hci14: command tx timeout [ 659.056203][T17774] Bluetooth: hci15: command tx timeout [ 660.326626][T17774] Bluetooth: hci14: command tx timeout [ 661.106943][ T5829] Bluetooth: hci15: command tx timeout [ 662.486811][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 663.186725][ T5829] Bluetooth: hci15: command tx timeout [ 668.374702][ T6074] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 680.916439][ T5829] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 681.215334][ T5829] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 681.364799][ T5829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 681.606314][ T5829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 681.977513][ T5829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 684.006992][ T6074] dvmrp6 (unregistering): left allmulticast mode [ 685.105895][ T5829] Bluetooth: hci16: command tx timeout [ 685.766958][ T6074] bond6 (unregistering): (slave geneve2): Releasing active interface [ 687.186543][T17804] Bluetooth: hci16: command tx timeout [ 688.087335][T17804] Bluetooth: hci2: command 0x0406 tx timeout [ 688.115160][ T5835] Bluetooth: hci7: command 0x0406 tx timeout [ 689.264866][ T5829] Bluetooth: hci16: command tx timeout [ 690.056000][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 690.144986][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 690.216734][ T5829] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 690.535877][ T5829] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 690.911988][ T5829] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 691.365021][T17774] Bluetooth: hci16: command tx timeout [ 693.665187][T17774] Bluetooth: hci17: command tx timeout [ 694.977132][ T31] INFO: task kworker/1:1:40 blocked for more than 143 seconds. [ 695.095573][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 695.207003][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.365677][ T31] task:kworker/1:1 state:D stack:23512 pid:40 tgid:40 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 695.576829][ T31] Workqueue: events switchdev_deferred_process_work [ 695.715896][ T31] Call Trace: [ 695.745080][T17774] Bluetooth: hci17: command tx timeout [ 695.797399][ T31] [ 695.826264][ T31] __schedule+0x149b/0x4fd0 [ 695.897357][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 695.966654][ T31] ? __pfx___schedule+0x10/0x10 [ 696.156338][ T31] ? schedule+0x91/0x360 [ 696.277230][ T31] schedule+0x165/0x360 [ 696.486515][ T31] schedule_preempt_disabled+0x13/0x30 [ 696.616477][ T31] __mutex_lock+0x7e6/0x1350 [ 696.867057][ T31] ? __mutex_lock+0x5bb/0x1350 [ 696.957173][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 697.297529][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 697.466227][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 697.605012][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 697.706672][ T31] switchdev_deferred_process_work+0xe/0x20 [ 697.825139][T17774] Bluetooth: hci17: command tx timeout [ 697.956281][ T31] process_scheduled_works+0xad1/0x1770 [ 698.046419][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 698.227198][ T31] ? do_raw_spin_lock+0x121/0x290 [ 698.474856][ T31] worker_thread+0x8a0/0xda0 [ 698.596485][ T31] kthread+0x711/0x8a0 [ 698.675811][ T31] ? __pfx_worker_thread+0x10/0x10 [ 698.827317][ T31] ? __pfx_kthread+0x10/0x10 [ 699.025323][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.107537][ T31] ? __pfx_kthread+0x10/0x10 [ 699.354730][ T31] ret_from_fork+0x510/0xa50 [ 699.514573][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 699.646108][ T31] ? __switch_to+0xc9e/0x1480 [ 699.896512][ T31] ? __pfx_kthread+0x10/0x10 [ 699.915152][T17774] Bluetooth: hci17: command tx timeout [ 699.987585][ T31] ret_from_fork_asm+0x1a/0x30 [ 700.086327][ T31] [ 700.176842][ T31] INFO: task syz-executor:5826 blocked for more than 148 seconds. [ 700.325790][ T31] Not tainted syzkaller #0 [ 700.587134][ T31] Blocked by coredump. [ 700.885380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.005239][ T31] task:syz-executor state:D stack:21240 pid:5826 tgid:5826 ppid:1 task_flags:0x40054c flags:0x00080003 [ 701.275280][ T31] Call Trace: [ 701.355648][ T31] [ 701.436002][ T31] __schedule+0x149b/0x4fd0 [ 701.506515][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 701.566712][ T31] ? __pfx___schedule+0x10/0x10 [ 701.625638][ T31] ? schedule+0x91/0x360 [ 701.716597][ T31] schedule+0x165/0x360 [ 701.856082][ T31] schedule_preempt_disabled+0x13/0x30 [ 701.966438][ T31] __mutex_lock+0x7e6/0x1350 [ 702.037305][ T31] ? __mutex_lock+0x5bb/0x1350 [ 702.136043][ T31] ? tun_chr_close+0x3e/0x1c0 [ 702.235352][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 702.335403][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 702.465192][ T31] tun_chr_close+0x3e/0x1c0 [ 702.546674][ T31] __fput+0x44c/0xa70 [ 702.604516][ T31] task_work_run+0x1d4/0x260 [ 702.705078][ T31] ? __pfx_task_work_run+0x10/0x10 [ 702.796112][ T31] ? kmem_cache_free+0x197/0x620 [ 703.235560][ T31] ? do_exit+0x68f/0x22f0 [ 703.456650][ T31] do_exit+0x694/0x22f0 [ 703.596453][ T31] ? cgroup1_freezing+0x20/0x350 [ 703.726530][ T31] ? __pfx_do_exit+0x10/0x10 [ 703.806828][ T31] do_group_exit+0x21c/0x2d0 [ 704.036442][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 704.175516][ T31] get_signal+0x1285/0x1340 [ 704.284678][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 704.424502][ T31] ? __pfx_get_timespec64+0x10/0x10 [ 704.504916][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 704.615257][ T31] ? __se_sys_clock_nanosleep+0x339/0x390 [ 704.644816][ T31] exit_to_user_mode_loop+0x87/0x4e0 [ 704.694819][ T31] ? rcu_is_watching+0x15/0xb0 [ 704.736228][ T31] do_syscall_64+0x2c1/0xf80 [ 704.794706][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.885796][ T31] ? trace_irq_disable+0x37/0x100 [ 704.986383][ T31] ? clear_bhb_loop+0x60/0xb0