last executing test programs: 8m37.057721858s ago: executing program 2 (id=45): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000002000000000004802000000850000002e000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m36.891745419s ago: executing program 2 (id=48): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010101, 0xa, 0x34, 0x14}]}, 0x38}}, 0x40400c0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x34}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2c}}]}, 0x34}}, 0x14010) 8m36.611712708s ago: executing program 2 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0xefffffffffffffff, 0x1}, 0x0) 8m36.391695645s ago: executing program 2 (id=56): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r2, 0x3, 0x10}, &(0x7f0000000080)=0xc) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 8m36.224814773s ago: executing program 2 (id=57): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010005000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 8m35.978478645s ago: executing program 2 (id=61): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f00000002c0)={0xa, 0x4e22, 0x46d74c6e, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002900000004000000320000000000000014000000070000002900000034000000000000000000000014"], 0x48}, 0x46830) 8m35.541442591s ago: executing program 32 (id=61): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f00000002c0)={0xa, 0x4e22, 0x46d74c6e, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002900000004000000320000000000000014000000070000002900000034000000000000000000000014"], 0x48}, 0x46830) 3m18.380716812s ago: executing program 4 (id=2978): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x25}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x48}}, 0x40800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000800000"], 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x9}, 0x8) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 3m17.223652714s ago: executing program 4 (id=2987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f8655800000000aaaac5aaaaaa88a8a00081"], 0x72) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x4, 0x0, 0x0, 0x0, "804024"}}) 3m16.770501139s ago: executing program 4 (id=2991): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280080001", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='\x00', 0x1) socket$packet(0x11, 0x2, 0x300) close(0x4) 3m16.235473963s ago: executing program 4 (id=2992): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x4, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0xc, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffffa, 0x6, 0xfffffffd, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xf0, 0x1, 0x8001, 0xd, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0xb, 0x401, 0xffffffff, 0x5e72, 0x101, 0x50, 0x8, 0xa, 0x1, 0x5, 0x5, 0x9, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x4800000, 0x0, 0x9, 0xfffffff4, 0x3b96, 0xfffff800, 0x0, 0x3, 0xf, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x3, 0x7fffffff, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x6, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0xec17, 0x7, 0x5, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa85, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xfffeffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x800004, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x9, 0x3ff, 0x9, 0x5, 0x5, 0x0, 0x7, 0x8, 0xffff, 0x3, 0x4, 0x7, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x8001, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0x3, 0x5, 0xc8, 0x5579, 0x9, 0x8, 0xff, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0x48, 0x5, 0xfff, 0x9, 0x5, 0x80000001, 0x8000, 0x8, 0x9, 0x1, 0x80000000, 0x4, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0xd, 0x7, 0x9, 0x6, 0x2, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x6c, 0x100, 0x9, 0x8, 0x9, 0x8, 0x3, 0x1, 0x200, 0xfffffffe, 0x328d, 0xfffffe01, 0x9, 0x8, 0x3, 0xffff8000, 0x4f, 0x0, 0xd, 0x3, 0x8000, 0x2, 0x17, 0x88, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff29, 0x5, 0x222, 0xe0, 0x6, 0xc26, 0x3, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x2, 0x1eb, 0x10001, 0x8, 0x17, 0x6ce, 0x6, 0x79, 0x2, 0x5, 0xfffffff9, 0x1, 0x4e30, 0x2, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x9, 0x5, 0x44d, 0xe0, 0x9, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0x0, 0xffffffde, 0x6a4, 0x5, 0x9, 0x6, 0x1f, 0xb89, 0x6, 0xff, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x3, 0x8, 0x0, 0x4, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0xb, 0x1, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0x97b0, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x6, 0xbb16, 0x4f7, 0x9, 0xbce, 0x44, 0xffffff7f, 0xa3, 0x1, 0x400004, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0xc, 0x2, 0x4, 0x2e4, 0xc5, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x100, 0x7, 0x3ff, 0x10000, 0x4, 0x1, 0x101, 0x800, 0x101, 0x9, 0x6, 0x9, 0x6, 0x101, 0x8, 0x4, 0x6, 0x800, 0x101, 0xf07, 0x0, 0x2, 0x81, 0x6, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0x200, 0x6, 0x9, 0x8003, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4000008, 0x0, 0x4, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000340)=0xfffffffffffffee6) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000772000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009518000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) 3m13.890075224s ago: executing program 3 (id=3003): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='\x00', 0x1) socket$packet(0x11, 0x2, 0x300) close(0x4) 3m13.63855317s ago: executing program 3 (id=3004): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000023c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x8, 0xffffffffffffffff, 0x8, 0x7}, 0x7f, 0x8}, [{0x0, 0x0, 0x60a, 0xff, 0x1, 0x101}, {0x9, 0x5, 0x7fffffff, 0x6de, 0xfffffff9, 0xe}, {0x8, 0xfffff000, 0x3, 0x3, 0x18, 0x6}, {0x3, 0x2, 0x2, 0x4, 0x0, 0x7fff}, {0x3, 0x4, 0x7b, 0x2279, 0x0, 0x6}, {0x7, 0xc2fa, 0x0, 0x3, 0xf}, {0x3, 0x2, 0x8, 0xee4, 0x8, 0x9b}, {0xfb0, 0x5, 0x47f, 0x0, 0x3ae, 0x42}, {0x8000, 0x5, 0x9, 0x9, 0x97, 0xaea00000}, {0x9, 0x3, 0x0, 0xfffffffe, 0x0, 0x6}, {0x1, 0x2, 0x101, 0x1, 0x8a, 0x9}, {0xfffff801, 0x9, 0x4, 0x1, 0x10, 0x8}, {0x100, 0x100, 0x0, 0x4, 0x4, 0xa648}, {0x0, 0x1, 0x0, 0x81, 0x6, 0x6}, {0x3d29, 0x9, 0xfffffffb, 0x1, 0x400, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x6, 0x85}, {0x0, 0xffffffff, 0x4b, 0x10, 0x8001, 0x1}, {0xce, 0x4, 0x1, 0x5, 0x4, 0x2}, {0x200000, 0x7, 0x2, 0x7ff, 0x7, 0x6}, {0x5, 0x9, 0xf, 0x3, 0x659ce88f, 0x4}, {0x1, 0xff, 0x3, 0xfffffff9, 0xffff, 0x8000}, {0x5, 0x7028f050, 0xd91, 0x7, 0x3, 0x761}, {0xffff, 0x8000, 0xd090023, 0x9, 0x7, 0x2}, {0x4, 0x7, 0x7, 0x7fffffff, 0x6, 0x2c}, {0x80000000, 0x8001, 0x2f, 0x5, 0x4}, {0x7eb8, 0xc8a, 0x4, 0x15, 0x4, 0x1}, {0x4, 0x3, 0x3, 0x6, 0x8, 0x6}, {0x7b7, 0x2, 0x5, 0x3ff, 0x0, 0x8}, {0x27, 0x9, 0xfffffffd, 0x3, 0x1000, 0x8}, {0x5, 0x3, 0x8, 0x2, 0x7, 0x3}, {0x0, 0x8, 0x2, 0x7fffffff, 0x6fdb552d, 0x9}, {0x1, 0x7, 0x1, 0x2, 0x1, 0x5}, {0x3, 0x1, 0xf, 0x8, 0x0, 0x40}, {0x7fff, 0x2, 0x8, 0x401, 0x5, 0xe2f}, {0x6, 0x8, 0x3, 0x56, 0x9, 0x8d86}, {0x7, 0x4, 0x4, 0xff, 0x7ff, 0x2}, {0x9, 0xffff, 0x7, 0x6, 0x121, 0x200}, {0x1, 0x48db, 0x6, 0x1, 0x0, 0x200}, {0x9, 0x5, 0x8000, 0xfffffffd, 0x0, 0x3ff}, {0x7, 0x9, 0x3b40, 0x8, 0x9, 0x8}, {0x1, 0x6, 0xfffffff3, 0x14, 0x8, 0x11}, {0x7, 0x8, 0x5, 0x9, 0x1, 0x9e4}, {0x8, 0xfffffff9, 0x4, 0x2, 0x2, 0x6}, {0x5, 0xe, 0x4, 0x0, 0x8, 0x7}, {0xb6de, 0xac16, 0xfffffffe, 0x7, 0x2, 0x6}, {0x68000000, 0x5, 0x1, 0x5, 0x4d0, 0x9}, {0x8f0, 0x3, 0x8, 0x7, 0x4, 0x9}, {0x200, 0x2, 0x10001, 0x6, 0x2, 0x5}, {0x4, 0x5, 0x9, 0x5, 0x8, 0x5}, {0x2, 0x4, 0x3, 0x80000000, 0xffff0000, 0xfffffffd}, {0x6, 0x0, 0xa000, 0x3, 0x3b2a, 0xff}, {0x2, 0x4, 0x5, 0x0, 0x1, 0x401}, {0x736, 0x8, 0x10, 0x7, 0xffff, 0x6}, {0x4, 0x1, 0x4, 0xfffffffb, 0x7fff, 0x3}, {0x5, 0x7fff, 0xfff, 0xc44, 0x3, 0x1}, {0xfb0e, 0x1, 0xee1f, 0x9, 0x80000001}, {0x6, 0x7ff, 0xf15a, 0x0, 0x2, 0x7}, {0x2, 0x725f, 0x85f, 0x1, 0x6, 0xfffffffd}, {0x0, 0x0, 0x57, 0x1, 0x7, 0x8}, {0x6, 0x6, 0xffffff0a, 0x5, 0x1}, {0x2, 0xcfab, 0x80000000, 0xb404, 0x7, 0x7fffffff}, {0x200, 0x7ccb64dd, 0x8001, 0x8, 0x7, 0x80000000}, {0xf2, 0x200, 0x7c, 0x8, 0x8001, 0xffff}, {0x3, 0x0, 0x8, 0x6, 0xfffffffe, 0xfffffffd}, {0x4, 0x3, 0x7, 0x9b7, 0x7, 0x4}, {0x3, 0xfffffffa, 0x4, 0x3}, {0x0, 0x7fffffff, 0x9, 0x6, 0x8000, 0xd6d}, {0x2, 0x2, 0x7fff, 0x80000001, 0x401, 0x5}, {0x4, 0x24, 0x75, 0x2, 0x5, 0x8}, {0x7, 0x2, 0x1, 0xf, 0x123770ba, 0x61}, {0x2, 0x8001, 0x4, 0x1000, 0xff, 0x4}, {0x1, 0x7, 0xfffffff8, 0x8, 0x4, 0x7}, {0x7ff, 0x0, 0x6df000, 0x420, 0xfffffffe, 0x95}, {0x0, 0x10000, 0x5, 0xa5, 0x400, 0x8}, {0xffff59b5, 0x8, 0x4, 0x7fffffff, 0x6, 0x10000}, {0xfe5c, 0xb6f0, 0xf2, 0x400, 0x1, 0x7}, {0x6, 0x1000, 0x1ff, 0x8, 0xfffffffc, 0x47}, {0x40, 0x4, 0x1, 0x7, 0xffffffff, 0xfffffffe}, {0x200, 0x6, 0xc9, 0xffffffff, 0x1, 0x2}, {0x3, 0x0, 0x8, 0x1, 0x35, 0x6}, {0x10, 0x0, 0x5, 0x7, 0x7, 0xde56}, {0x2f1, 0x5, 0x40, 0x3, 0x8, 0x7}, {0x3, 0x4c3d, 0x5, 0x7, 0xa1, 0x2}, {0x7, 0x1, 0xe, 0x9, 0xe7, 0x10001}, {0x400, 0x3ff, 0x0, 0x7, 0xe, 0x549c5f84}, {0x2, 0xfffffff8, 0xe925, 0x8, 0x80000001}, {0x59e, 0xbbc, 0x7f, 0xf9, 0x7, 0x2}, {0xbc, 0xc0, 0xfffffeff, 0x2, 0xff, 0x8}, {0x81, 0x6, 0x4902, 0x9, 0x7}, {0xffffff7f, 0xce3, 0xb6ab, 0x0, 0x1, 0x5}, {0x9, 0xffff8001, 0xfffffffd, 0x5, 0x10001, 0x8}, {0x6, 0x397, 0x8000, 0x9, 0x0, 0x80}, {0x6, 0x3, 0x7, 0x1ff, 0x9000, 0x1000}, {0x7fff, 0x5, 0xa, 0xfffffffb, 0x1ff, 0x6}, {0x8000, 0x0, 0xb, 0xffffffff, 0x1, 0xc3}, {0x1, 0x8, 0xc, 0xffffffff, 0x2, 0xe0}, {0x3, 0x4, 0x2, 0x3, 0x3, 0x2e}, {0x7ff, 0x0, 0x0, 0x64e, 0x9, 0x4}, {0x1ff, 0x3, 0x8, 0x7, 0x8, 0xfffffffd}, {0x6, 0xffffffff, 0x8a, 0xfffffff9, 0x0, 0x4}, {0x5, 0x1, 0x8000, 0x80, 0xc, 0x2}, {0xec8, 0x6, 0x8, 0x5, 0x3, 0x8}, {0x5, 0x1, 0x4, 0x401, 0x1e4, 0xc0000}, {0x101, 0x8, 0x7, 0xb83e, 0x8, 0xf}, {0x7, 0x9, 0x100, 0x7af, 0x5, 0x7}, {0x3, 0x2, 0xbba, 0x3, 0x7, 0x4}, {0x1000, 0x9, 0x5, 0xff, 0x587, 0x4}, {0x7e, 0x3, 0x8d00, 0x2, 0x0, 0x8}, {0x87a, 0x7ff, 0x5, 0x5, 0x2, 0x80}, {0x8000, 0xb, 0x8, 0xfffffffa, 0xffffffff, 0x2}, {0x275, 0x8, 0xae9f, 0x101, 0x8, 0x4}, {0x7, 0xfffffffc, 0xa99a, 0x6, 0x5, 0x6}, {0x9, 0xd, 0x4, 0x5, 0xffffffff, 0x1}, {0x5, 0x6, 0x8, 0x80000000, 0xfffffffb, 0x1}, {0x4, 0x1, 0x7, 0x9, 0x0, 0x10000}, {0x912b, 0x8000, 0x90, 0xffff, 0x7, 0x8}, {0x0, 0x6, 0x4, 0x48b, 0x3, 0x35}, {0x7, 0x7, 0x3ff, 0xb5, 0xfffffffb}, {0x3, 0x400000, 0x8, 0x8, 0x4, 0x401}, {0x7, 0x80, 0x1, 0x14, 0x401, 0x3df}, {0x6, 0x6, 0x0, 0x6, 0x7fff, 0x140}, {0x5, 0x3ff, 0xffffffff, 0x200, 0x6, 0x4}, {0x0, 0x7fff, 0x1000, 0xc, 0x3, 0x8001}, {0x7fffffff, 0x30, 0x9, 0x5}, {0x7, 0xd18ceec3, 0x9, 0x5, 0x8, 0xffff9ecd}, {0x3, 0x1, 0x9, 0x1, 0xfffffffb, 0x9}, {0x8, 0x41, 0x3, 0x28, 0x0, 0x2}, {0x2, 0xbd9, 0x5, 0x1, 0x10000000, 0x7fffffff}], [{0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {}, {0x1}, {0x5, 0xeb73c2f24f368864}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0xd00ea7d7ec9cd8c0}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x5}, {0x3}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) getpeername$l2tp(r6, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xb}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m13.252723068s ago: executing program 3 (id=3007): socket$phonet(0x23, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="30020000100013070000000000000000fc0200000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x230}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "3a7615e47c4bc46e", "dfbebcd6ea7e8d4dd598ff53bc3e33eb0e987135cea3f699c68c2f21728b5446", "b4e4aef4", "1301f0f9cf894eb6"}, 0x38) read(r0, &(0x7f0000000640)=""/30, 0x1e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) close(0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x0}, 0x94) 3m12.303023338s ago: executing program 3 (id=3013): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='\x00', 0x1) socket$packet(0x11, 0x2, 0x300) close(0x4) 3m11.934864796s ago: executing program 4 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad1600004000330010000000080211000000080211"], 0x68}}, 0x0) 3m11.812444157s ago: executing program 3 (id=3017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc8, &(0x7f0000000040)=""/200}, 0x94) (async) sendmmsg$inet6(r2, &(0x7f0000000700), 0x0, 0x0) (async) shutdown(r2, 0x1) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async) readv(r7, &(0x7f0000000700), 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) recvmmsg(r8, &(0x7f0000000480), 0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300)) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) 3m11.472513597s ago: executing program 3 (id=3021): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000500)=0xdcfb, 0x4) recvmmsg(r0, &(0x7f00000064c0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000000480)=""/89, 0x59}], 0x9, &(0x7f00000008c0)=""/69, 0x45}, 0x5}, {{&(0x7f0000000940)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/61, 0x3d}, {&(0x7f0000001a00)=""/5, 0x5}, {&(0x7f0000001a40)=""/41, 0x29}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x5, &(0x7f0000002b00)=""/101, 0x65}, 0x7}, {{&(0x7f0000002b80)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c00)=""/135, 0x87}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004d00)=@hci, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000004d80)=""/17, 0x11}, {&(0x7f0000004dc0)=""/200, 0xc8}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x3, &(0x7f0000005f00)=""/63, 0x3f}, 0x839e}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005f40)=""/180, 0xb4}, {&(0x7f0000006000)=""/25, 0x19}], 0x2, &(0x7f0000006080)=""/2, 0x2}, 0x5}, {{&(0x7f00000060c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006140)=""/47, 0x2f}, {&(0x7f0000006180)=""/4, 0x4}, {&(0x7f00000061c0)}, {&(0x7f0000006200)=""/165, 0xa5}, {&(0x7f00000062c0)=""/231, 0xe7}], 0x5, &(0x7f0000006440)=""/88, 0x58}, 0x7a}], 0x6, 0x40002000, &(0x7f0000006640)) bind$inet6(r0, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4000080) 3m10.915632632s ago: executing program 33 (id=3021): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000500)=0xdcfb, 0x4) recvmmsg(r0, &(0x7f00000064c0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000540)=""/232, 0xe8}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000000480)=""/89, 0x59}], 0x9, &(0x7f00000008c0)=""/69, 0x45}, 0x5}, {{&(0x7f0000000940)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/61, 0x3d}, {&(0x7f0000001a00)=""/5, 0x5}, {&(0x7f0000001a40)=""/41, 0x29}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x5, &(0x7f0000002b00)=""/101, 0x65}, 0x7}, {{&(0x7f0000002b80)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c00)=""/135, 0x87}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003d00)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004d00)=@hci, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000004d80)=""/17, 0x11}, {&(0x7f0000004dc0)=""/200, 0xc8}, {&(0x7f0000004ec0)=""/4096, 0x1000}], 0x3, &(0x7f0000005f00)=""/63, 0x3f}, 0x839e}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005f40)=""/180, 0xb4}, {&(0x7f0000006000)=""/25, 0x19}], 0x2, &(0x7f0000006080)=""/2, 0x2}, 0x5}, {{&(0x7f00000060c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000063c0)=[{&(0x7f0000006140)=""/47, 0x2f}, {&(0x7f0000006180)=""/4, 0x4}, {&(0x7f00000061c0)}, {&(0x7f0000006200)=""/165, 0xa5}, {&(0x7f00000062c0)=""/231, 0xe7}], 0x5, &(0x7f0000006440)=""/88, 0x58}, 0x7a}], 0x6, 0x40002000, &(0x7f0000006640)) bind$inet6(r0, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4000080) 3m10.901347641s ago: executing program 4 (id=3024): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000, 0x4}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x2, 0x8, 0x3, 0x0, 0x0, [{{r1}, 0x9}, {{r2}}, {{r3}, 0xf}]}) r4 = accept(0xffffffffffffffff, &(0x7f0000000480)=@phonet, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6, 0x0, 0xfffe}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x3e, 0x5f, 0x5f, 0x30]}}, &(0x7f0000001f00)=""/176, 0x52, 0xb0, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000020c0)) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000008c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x2a4, [0x200000000b80, 0x0, 0x0, 0x200000000bb0, 0x200000000cb6], 0x0, &(0x7f0000000040), &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x40, 0x600, 'ipvlan0\x00', 'veth1_macvtap\x00', 'xfrm0\x00', 'erspan0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xd6, [], [@snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0xc, 0x51, 0x88be, 'netpci0\x00', 'syzkaller0\x00', 'veth0_macvtap\x00', 'bond_slave_0\x00', @random="36cbb7912b36", [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa6, 0xd6, 0x10e, [@mac={{'mac\x00', 0x0, 0x10}, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @snat={'snat\x00', 0x10, {{@link_local, 0x10}}}}]}]}, 0x31c) accept(r7, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007311430000f0ffff846d0000004a00000095000000000000009500a50500000000b08005823906a6c00ca6a36c70ac038919ce619f8ca6be89e87fd2a4e5b2295545047c2d8296177f2c3b7b42aef43102bfedf7794dcf873b5c8800000000ffffffff7ac3bb2dad9b3183a75cd59135672f329affffffffb249fd4b2d76819f41ab558ea6ed2a1adf9b33463fc3e17fb15466c28732f7030275a541b3ff55a74c24b1a6dd5e1dd7f6b8ce18204555f3e83dd847f91c31a1f4a1c0e677ae43c78f94c08996b0cb14b57fe17842ca6b141894f40400c613bb67387afc52d98919574ef8e5deb854989ac5f600"/256], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3m10.705428013s ago: executing program 34 (id=3024): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000, 0x4}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x2, 0x8, 0x3, 0x0, 0x0, [{{r1}, 0x9}, {{r2}}, {{r3}, 0xf}]}) r4 = accept(0xffffffffffffffff, &(0x7f0000000480)=@phonet, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6, 0x0, 0xfffe}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x3e, 0x5f, 0x5f, 0x30]}}, &(0x7f0000001f00)=""/176, 0x52, 0xb0, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000020c0)) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000008c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x3}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x2, 0x2a4, [0x200000000b80, 0x0, 0x0, 0x200000000bb0, 0x200000000cb6], 0x0, &(0x7f0000000040), &(0x7f0000000b80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x40, 0x600, 'ipvlan0\x00', 'veth1_macvtap\x00', 'xfrm0\x00', 'erspan0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xd6, [], [@snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0xc, 0x51, 0x88be, 'netpci0\x00', 'syzkaller0\x00', 'veth0_macvtap\x00', 'bond_slave_0\x00', @random="36cbb7912b36", [0x0, 0xff, 0xff, 0x0, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa6, 0xd6, 0x10e, [@mac={{'mac\x00', 0x0, 0x10}, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @snat={'snat\x00', 0x10, {{@link_local, 0x10}}}}]}]}, 0x31c) accept(r7, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007311430000f0ffff846d0000004a00000095000000000000009500a50500000000b08005823906a6c00ca6a36c70ac038919ce619f8ca6be89e87fd2a4e5b2295545047c2d8296177f2c3b7b42aef43102bfedf7794dcf873b5c8800000000ffffffff7ac3bb2dad9b3183a75cd59135672f329affffffffb249fd4b2d76819f41ab558ea6ed2a1adf9b33463fc3e17fb15466c28732f7030275a541b3ff55a74c24b1a6dd5e1dd7f6b8ce18204555f3e83dd847f91c31a1f4a1c0e677ae43c78f94c08996b0cb14b57fe17842ca6b141894f40400c613bb67387afc52d98919574ef8e5deb854989ac5f600"/256], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 38.192647643s ago: executing program 1 (id=4047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983200fc000018c6ba35000000000000000700ff020000000000000000000000110001"], 0xfdef) 38.139197726s ago: executing program 5 (id=4049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000308010300000000000000000000000005000300060000ff14000480070005"], 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 37.98469407s ago: executing program 1 (id=4050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="604f3ba2fdb12384e5", 0x9}], 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmmsg$unix(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 37.984436922s ago: executing program 5 (id=4051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001400e9990500000000000000fc000000000000000000000000000000fc00"/43], 0xb8}}, 0x4000) 37.961173239s ago: executing program 7 (id=4052): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) poll(&(0x7f0000000000)=[{r1, 0x9081}], 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4002001}, 0x2400400c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x902000, 0x1000, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x800) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 37.856826164s ago: executing program 1 (id=4053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000200000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r5) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40045}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 37.838796719s ago: executing program 5 (id=4054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)={0x25c, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r3}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6a19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 37.614599113s ago: executing program 5 (id=4055): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 37.539320261s ago: executing program 7 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000300)={0x40, 0x0, 0x0, 0x0, 0x65}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 37.38963074s ago: executing program 7 (id=4058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x1, 0x5, 0xfffffffd, 0x7fffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x10, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x61}, 0x4010004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 37.370810309s ago: executing program 5 (id=4059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002ac0)=""/4067, 0xfe3}, {&(0x7f0000000600)=""/86, 0x56}], 0x4}, 0x9}], 0x1, 0x40000000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 37.00633238s ago: executing program 0 (id=4061): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf5e2777718c1957c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @value=r2}, 0x94) 36.946052208s ago: executing program 1 (id=4062): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x40, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r3}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) close(r5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r7, 0x6}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.851854373s ago: executing program 0 (id=4063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f00000000c0)="a931", &(0x7f0000000100)=@tcp6=r1, 0x1}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x4000) sendto$inet(r7, 0x0, 0x0, 0xa800, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x60010103}, 0x10) recvfrom(r7, 0x0, 0x0, 0x12041, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @private1, 0xffffff99}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 35.259342535s ago: executing program 1 (id=4064): getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x810, 0xffffffffffffffff, 0x5de68000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x110, r0, 0x35385000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x40010, r0, 0xdeabb000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x400, 0x20, 0x3, 0x1}, &(0x7f0000000140)=0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x811) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc20000a0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8804) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r7, 0xc7191000) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r3, 0xff, 0x424}, &(0x7f0000000480)=0xc) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f00000004c0)=0xd, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, &(0x7f0000000500)="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", 0xfa, 0x5, &(0x7f0000000600)={0x11, 0x3, r1, 0x1, 0xce, 0x6, @local}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r10, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x2}, ["", ""]}, 0x14}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r11, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000880)="5e1379969cedc4dce2953ca7bc5034a5bc1ce17e8c79b9d3c6", 0x19) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r11, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x1) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f00000009c0)={0x18, 0x0, {0x3, @remote, 'wg0\x00'}}, 0x1e) 35.237405985s ago: executing program 5 (id=4065): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000020000000000000000000000800010005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) r6 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) socket$can_raw(0x1d, 0x3, 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@null, @null, 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180862206c1b0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r7, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2e994000) unshare(0x62040200) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r10}, &(0x7f0000000640), &(0x7f0000000680)=r9}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "1cada39d8690addcb6140ef0a44c891e2d40e66b93b2b009201faa8ec90551b7", "3187e62928c7c00b5a52d7c01805bdeab782f786926372aae781bc595c127637", "cfb986fae0e47196b31895f0302c37c54b016cbc89e90b58b1cefd387128b81b", "8c4d641ac35e562e37b307d5d78b6a2a424a7665f5a48b650109a6c7a2ef3685", "bf694a58936b5ed42e7ffa6bb9355cb78162d91fdfbc64ede4da0bda732f084f", "dd9bc8b0908e05e3ec595076", 0x0, 0x1, 0xc9f, 0x6, 0x80000000}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000001c0)="b9e403c6631e394901a05dc7cf1c8cef782da475", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 35.174852674s ago: executing program 0 (id=4066): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x2, 0x6, 0x201, 0x0, 0x0, {0x8}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xb7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) 35.021109676s ago: executing program 0 (id=4067): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000003700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x4000010000, 0x12) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x2, 0x6, 0xfffffffffffffff9}) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r4, r3, 0x20, 0x0, @void}, 0x6f) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, 0x0, 0x4000001) (async) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf252400000018000180140002006970365f767469300000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r10, 0x8923, &(0x7f0000000280)="d84450a4bf57990ef9b33a") (async) socket$nl_route(0x10, 0x3, 0x0) 34.956868012s ago: executing program 7 (id=4068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d1f0000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x3c}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x3c}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x80000000}}, {{@in6=@mcast2, 0x404d7, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}, 0xe8) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0xcc, 0x0, 0x300, 0x70bdad, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x7f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0xf}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0xcc, 0x0, 0x300, 0x70bdad, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x7f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0xf}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004392553348411025606eaf078dc07cf24e55ef7ee2b325426916523cbc21c09dce616c5989462bf460abc4fb3c9e08c7226bec9b4"], 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004392553348411025606eaf078dc07cf24e55ef7ee2b325426916523cbc21c09dce616c5989462bf460abc4fb3c9e08c7226bec9b4"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r6, @ANYRES16=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x1843}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r9}, 0x18) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x840000000002, 0x3, 0x100) (async) r11 = socket(0x840000000002, 0x3, 0x100) connect$inet(r11, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r11, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) 34.956210248s ago: executing program 6 (id=4069): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 34.918878891s ago: executing program 1 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001240)={'veth1_virt_wifi\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x5, 0x91}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 34.78581959s ago: executing program 6 (id=4071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0xfffffdb6}}, 0x200008c1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 34.430147903s ago: executing program 6 (id=4072): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0x2e0, 0x120, 0x120, 0x3d0, 0x120, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0xff], [], 'pimreg0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@unspec=@cpu={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, [0x0, 0xffffffff, 0x0, 0xff], [0x0, 0x0, 0xffffff00, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast1, 0x36, 0xe, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x20) (async) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRESOCT=r2], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000002c0)=0xfffff510, 0x4) ppoll(&(0x7f0000000000)=[{r3}, {r2, 0x520a}], 0x2, 0x0, 0x0, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000003002000000088"], 0x62) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000800030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x68000005}) 34.35647554s ago: executing program 0 (id=4073): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x3, 0xd85fcf1, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xb, [@broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0xffc8, 0x8000, 0x2, 0x800, {{0x30, 0x4, 0x0, 0x4, 0xc0, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x8, 0x86, 0x0, 0x1, [0x7fffffff]}, @rr={0x7, 0x2b, 0x5e, [@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0xa6, 0x1, 0x5, [{@empty, 0xfff}, {@private=0xa010100, 0x4d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x56, 0x1, [{0x0, 0x4, "7bf9"}, {0x0, 0xf, "064f76b92c2b3afdc0701e72b8"}, {0x6, 0x12, "9667f990554b0610e5fb57e42af33455"}, {0x6, 0x2}, {0x0, 0xa, "8961840d22c69b75"}, {0x7, 0xd, "93b7c52b65a2cab191aa31"}, {0x5, 0x12, "aa9764e1c177618fe09acbc6e967f865"}]}]}}}}}) bind$alg(0xffffffffffffffff, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) 34.249257416s ago: executing program 6 (id=4074): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000090002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 34.105308053s ago: executing program 6 (id=4075): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x18, 0x18, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x20000000) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYRESOCT=r2], 0x118}], 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 34.048300112s ago: executing program 0 (id=4076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) epoll_create1(0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 33.948180224s ago: executing program 7 (id=4077): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @mcast1, 0x7}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'tunl0\x00', 0x3}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0xfffffffffffffe8d, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="e6", 0x1, 0x1, 0x0, 0x0) 33.490923347s ago: executing program 6 (id=4078): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2d0, 0x1e0, 0x1e8, 0x1e0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) (async) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 21.371299481s ago: executing program 7 (id=4079): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x2}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r3, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r5, &(0x7f0000002cc0)=ANY=[], 0x1001) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1b, &(0x7f0000000540)=@framed={{}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc3}, @ldst={0x1, 0x3, 0x4, 0xa, 0x4, 0x4, 0xfffffffffffffffc}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbcb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x4, 0x3, 0x1, 0x8, 0x1}, @ldst={0x3, 0x0, 0x6, 0xb, 0x3, 0x100, 0x10}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.30407176s ago: executing program 35 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001240)={'veth1_virt_wifi\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0x5, 0x91}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.108838319s ago: executing program 36 (id=4065): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000020000000000000000000000800010005000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) socket(0x2, 0x80805, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) r6 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) socket$can_raw(0x1d, 0x3, 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@null, @null, 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180862206c1b0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r7, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2e994000) unshare(0x62040200) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r10}, &(0x7f0000000640), &(0x7f0000000680)=r9}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "1cada39d8690addcb6140ef0a44c891e2d40e66b93b2b009201faa8ec90551b7", "3187e62928c7c00b5a52d7c01805bdeab782f786926372aae781bc595c127637", "cfb986fae0e47196b31895f0302c37c54b016cbc89e90b58b1cefd387128b81b", "8c4d641ac35e562e37b307d5d78b6a2a424a7665f5a48b650109a6c7a2ef3685", "bf694a58936b5ed42e7ffa6bb9355cb78162d91fdfbc64ede4da0bda732f084f", "dd9bc8b0908e05e3ec595076", 0x0, 0x1, 0xc9f, 0x6, 0x80000000}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000001c0)="b9e403c6631e394901a05dc7cf1c8cef782da475", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.980067572s ago: executing program 37 (id=4076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c16", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x400c040) (async) epoll_create1(0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.140830887s ago: executing program 38 (id=4078): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3b8, 0x2d0, 0x1e0, 0x1e8, 0x1e0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) (async) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x600000, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 39 (id=4079): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x2}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r3, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r5, &(0x7f0000002cc0)=ANY=[], 0x1001) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1b, &(0x7f0000000540)=@framed={{}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc3}, @ldst={0x1, 0x3, 0x4, 0xa, 0x4, 0x4, 0xfffffffffffffffc}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbcb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x4, 0x3, 0x1, 0x8, 0x1}, @ldst={0x3, 0x0, 0x6, 0xb, 0x3, 0x100, 0x10}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): ulting to 1000 [ 396.572331][T16479] wg1 speed is unknown, defaulting to 1000 [ 396.580932][T16491] wg1 speed is unknown, defaulting to 1000 [ 397.041142][T16519] ip6gre2: entered promiscuous mode [ 397.046638][T16519] ip6gre2: entered allmulticast mode [ 397.061701][ T2126] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.072059][ T2126] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.081976][ T5891] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.387725][T16528] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 397.409797][T16494] wg1 speed is unknown, defaulting to 1000 [ 397.431176][T16528] netlink: 'syz.0.2793': attribute type 1 has an invalid length. [ 397.614590][T16528] bond9: entered promiscuous mode [ 397.655127][T16528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.741983][T16494] wg1 speed is unknown, defaulting to 1000 [ 397.742976][ T9519] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.825501][ T5891] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 398.108205][T16550] netlink: 'syz.5.2798': attribute type 7 has an invalid length. [ 398.268560][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 398.359047][T16573] netlink: 'syz.5.2802': attribute type 1 has an invalid length. [ 398.388085][T16573] netlink: 'syz.5.2802': attribute type 3 has an invalid length. [ 398.421967][T16573] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2802'. [ 398.503940][T16574] syzkaller1: entered promiscuous mode [ 398.523369][T16574] syzkaller1: entered allmulticast mode [ 398.536526][T16563] syzkaller1: left promiscuous mode [ 398.546587][T16563] syzkaller1: left allmulticast mode [ 398.580935][T16580] syzkaller1: entered promiscuous mode [ 398.587361][T16580] syzkaller1: entered allmulticast mode [ 398.619074][T16579] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.663904][T16579] syzkaller0: entered promiscuous mode [ 398.669523][T16579] syzkaller0: entered allmulticast mode [ 399.027442][T16594] FAULT_INJECTION: forcing a failure. [ 399.027442][T16594] name failslab, interval 1, probability 0, space 0, times 0 [ 399.044387][T16594] CPU: 0 UID: 0 PID: 16594 Comm: syz.5.2810 Not tainted syzkaller #0 PREEMPT(full) [ 399.044416][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.044429][T16594] Call Trace: [ 399.044437][T16594] [ 399.044445][T16594] dump_stack_lvl+0xe8/0x150 [ 399.044477][T16594] should_fail_ex+0x414/0x560 [ 399.044518][T16594] should_failslab+0xa8/0x100 [ 399.044546][T16594] __kmalloc_cache_noprof+0x84/0x700 [ 399.044565][T16594] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 399.044592][T16594] ? sctp_v6_cmp_addr+0x15/0xd0 [ 399.044619][T16594] ? sctp_add_bind_addr+0x8c/0x370 [ 399.044652][T16594] sctp_add_bind_addr+0x8c/0x370 [ 399.044682][T16594] sctp_copy_local_addr_list+0x30b/0x4e0 [ 399.044716][T16594] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 399.044746][T16594] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 399.044778][T16594] ? sctp_v6_is_any+0x64/0x80 [ 399.044808][T16594] ? sctp_copy_one_addr+0x93/0x360 [ 399.044838][T16594] sctp_bind_addr_copy+0xb3/0x3c0 [ 399.044866][T16594] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 399.044895][T16594] sctp_connect_new_asoc+0x2e0/0x690 [ 399.044919][T16594] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 399.044955][T16594] ? __local_bh_enable_ip+0xd0/0x130 [ 399.044976][T16594] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 399.044999][T16594] ? security_sctp_bind_connect+0x7e/0x2e0 [ 399.045024][T16594] sctp_sendmsg+0x155c/0x2840 [ 399.045056][T16594] ? __pfx_sctp_sendmsg+0x10/0x10 [ 399.045073][T16594] ? aa_sk_perm+0x15f/0x920 [ 399.045099][T16594] ? aa_sk_perm+0x7ee/0x920 [ 399.045128][T16594] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.045154][T16594] ? sock_rps_record_flow+0x19/0x410 [ 399.045186][T16594] ? inet_sendmsg+0x2f4/0x370 [ 399.045219][T16594] __sock_sendmsg+0x19c/0x270 [ 399.045253][T16594] __sys_sendto+0x3bd/0x520 [ 399.045278][T16594] ? __pfx___sys_sendto+0x10/0x10 [ 399.045296][T16594] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 399.045331][T16594] ? __fget_files+0x3a0/0x420 [ 399.045370][T16594] ? ksys_write+0x22a/0x250 [ 399.045390][T16594] ? __pfx_ksys_write+0x10/0x10 [ 399.045418][T16594] __x64_sys_sendto+0xde/0x100 [ 399.045445][T16594] do_syscall_64+0xec/0xf80 [ 399.045467][T16594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.045486][T16594] ? trace_irq_disable+0x37/0x100 [ 399.045513][T16594] ? clear_bhb_loop+0x60/0xb0 [ 399.045536][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.045555][T16594] RIP: 0033:0x7f3d2e98f749 [ 399.045574][T16594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.045593][T16594] RSP: 002b:00007f3d2f7f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 399.045613][T16594] RAX: ffffffffffffffda RBX: 00007f3d2ebe5fa0 RCX: 00007f3d2e98f749 [ 399.045628][T16594] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 399.045642][T16594] RBP: 00007f3d2f7f2090 R08: 0000200000000080 R09: 000000000000001c [ 399.045656][T16594] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 399.045670][T16594] R13: 00007f3d2ebe6038 R14: 00007f3d2ebe5fa0 R15: 00007ffe300a4bb8 [ 399.045706][T16594] [ 400.782207][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 400.908939][T16605] wg1 speed is unknown, defaulting to 1000 [ 400.955890][T16605] wg1 speed is unknown, defaulting to 1000 [ 401.198975][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 401.265407][T16620] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 401.322699][T16620] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 401.393064][T16620] bond5 (unregistering): Released all slaves [ 401.663417][T16631] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2822'. [ 402.236574][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2829'. [ 402.304015][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2829'. [ 402.771208][T16675] tipc: Enabling of bearer rejected, failed to enable media [ 403.287692][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.297188][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.313287][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.321497][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.331445][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 403.416302][T16692] wg1 speed is unknown, defaulting to 1000 [ 403.428748][T16692] wg1 speed is unknown, defaulting to 1000 [ 403.445396][T16701] netlink: 'syz.5.2841': attribute type 1 has an invalid length. [ 403.499124][T16699] netlink: 'syz.5.2841': attribute type 1 has an invalid length. [ 403.861131][T16715] netlink: 'syz.5.2844': attribute type 4 has an invalid length. [ 403.867153][ T5834] team0: Port device syz_tun removed [ 403.880088][T16717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2846'. [ 404.113789][T16718] wg1 speed is unknown, defaulting to 1000 [ 404.126938][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.187182][T16718] wg1 speed is unknown, defaulting to 1000 [ 404.248950][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.403264][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.480075][T16734] tipc: Enabled bearer , priority 0 [ 404.534524][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.576547][T16731] syzkaller0: entered promiscuous mode [ 404.599591][T16731] syzkaller0: entered allmulticast mode [ 404.673537][T16729] tipc: Resetting bearer [ 404.734303][T16729] tipc: Disabling bearer [ 404.841406][T16746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 405.042227][T16692] chnl_net:caif_netlink_parms(): no params data found [ 405.227140][ T9531] wg1 speed is unknown, defaulting to 1000 [ 405.242229][ T9531] syz0: Port: 1 Link DOWN [ 405.422047][ T5837] Bluetooth: hci5: command tx timeout [ 406.005024][ T13] team0: Port device geneve0 removed [ 406.306482][ T13] bond0 (unregistering): Released all slaves [ 406.409692][ T13] bond1 (unregistering): Released all slaves [ 406.513089][ T13] bond2 (unregistering): Released all slaves [ 406.614262][ T13] bond3 (unregistering): Released all slaves [ 406.714485][ T13] bond4 (unregistering): Released all slaves [ 406.999088][T16692] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.017573][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.034318][T16692] bridge_slave_0: entered allmulticast mode [ 407.051461][T16692] bridge_slave_0: entered promiscuous mode [ 407.078330][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.094286][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.110183][T16692] bridge_slave_1: entered allmulticast mode [ 407.120439][T16692] bridge_slave_1: entered promiscuous mode [ 407.207531][T16692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.258885][T16692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.430696][T16692] team0: Port device team_slave_0 added [ 407.475792][T16692] team0: Port device team_slave_1 added [ 407.486179][T16800] netlink: 'syz.3.2868': attribute type 4 has an invalid length. [ 407.503494][ T5837] Bluetooth: hci5: command tx timeout [ 407.695432][T16692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.722599][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.782208][T16692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.975863][T16692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.002133][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.082702][T16692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.307598][T16692] hsr_slave_0: entered promiscuous mode [ 408.354034][T16692] hsr_slave_1: entered promiscuous mode [ 408.360590][T16692] debugfs: 'hsr0' already exists in 'hsr' [ 408.382429][T16692] Cannot create hsr debugfs directory [ 408.533605][ T13] : left promiscuous mode [ 408.701880][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 408.744576][ T13] tipc: Left network mode [ 409.585826][ T5837] Bluetooth: hci5: command tx timeout [ 409.974002][T16853] veth0_to_bridge: entered promiscuous mode [ 410.346680][T16692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.406896][T16692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.447957][ T13] hsr_slave_0: left promiscuous mode [ 410.484674][ T13] hsr_slave_1: left promiscuous mode [ 410.566440][ T13] veth1_macvtap: left promiscuous mode [ 410.585439][ T13] veth0_macvtap: left promiscuous mode [ 410.616021][ T13] veth1_vlan: left promiscuous mode [ 410.677731][T16875] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2880'. [ 410.734941][T16877] FAULT_INJECTION: forcing a failure. [ 410.734941][T16877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.771717][T16877] CPU: 1 UID: 0 PID: 16877 Comm: syz.4.2882 Not tainted syzkaller #0 PREEMPT(full) [ 410.771759][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.771772][T16877] Call Trace: [ 410.771780][T16877] [ 410.771790][T16877] dump_stack_lvl+0xe8/0x150 [ 410.771823][T16877] should_fail_ex+0x414/0x560 [ 410.771863][T16877] _copy_from_user+0x2d/0xb0 [ 410.771891][T16877] __sys_bpf+0x1e3/0x860 [ 410.771925][T16877] ? __pfx___sys_bpf+0x10/0x10 [ 410.771973][T16877] ? ksys_write+0x22a/0x250 [ 410.771999][T16877] ? __pfx_ksys_write+0x10/0x10 [ 410.772029][T16877] __x64_sys_bpf+0x7c/0x90 [ 410.772057][T16877] do_syscall_64+0xec/0xf80 [ 410.772080][T16877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.772101][T16877] ? trace_irq_disable+0x37/0x100 [ 410.772130][T16877] ? clear_bhb_loop+0x60/0xb0 [ 410.772156][T16877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.772176][T16877] RIP: 0033:0x7f4ac2b8f749 [ 410.772196][T16877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.772215][T16877] RSP: 002b:00007f4ac3a15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.772238][T16877] RAX: ffffffffffffffda RBX: 00007f4ac2de5fa0 RCX: 00007f4ac2b8f749 [ 410.772255][T16877] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 410.772269][T16877] RBP: 00007f4ac3a15090 R08: 0000000000000000 R09: 0000000000000000 [ 410.772283][T16877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.772296][T16877] R13: 00007f4ac2de6038 R14: 00007f4ac2de5fa0 R15: 00007ffdcec3c328 [ 410.772332][T16877] [ 411.661952][ T5837] Bluetooth: hci5: command tx timeout [ 412.669962][T16692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.688947][T16692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.725227][T16852] veth0_to_bridge: left promiscuous mode [ 412.836629][T16902] wg1 speed is unknown, defaulting to 1000 [ 413.038926][T16692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.108433][T16692] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.151151][ T3930] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.159235][ T3930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.202353][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'. [ 413.328105][ T3930] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.335608][ T3930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.614087][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 413.648203][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 413.849501][ T13] IPVS: stop unused estimator thread 0... [ 414.097174][T16939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.487747][T16904] wg1 speed is unknown, defaulting to 1000 [ 415.244167][T16692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.445048][T16692] veth0_vlan: entered promiscuous mode [ 415.484322][T16692] veth1_vlan: entered promiscuous mode [ 415.589109][T16692] veth0_macvtap: entered promiscuous mode [ 415.626822][T16692] veth1_macvtap: entered promiscuous mode [ 415.787161][T16692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.845923][T16692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.894177][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.922795][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.956460][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.020224][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.079405][T16984] netlink: 'syz.4.2900': attribute type 4 has an invalid length. [ 416.606419][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 416.666650][T16997] netlink: 'syz.3.2901': attribute type 15 has an invalid length. [ 416.744424][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.795266][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.993561][ T3930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.039338][ T3930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.617883][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 417.649005][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 418.422121][ T30] audit: type=1804 audit(1767677693.908:10): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2907" name="/newroot/586/memory.events" dev="tmpfs" ino=3001 res=1 errno=0 [ 418.497881][ T30] audit: type=1800 audit(1767677693.908:11): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2907" name="memory.events" dev="tmpfs" ino=3001 res=0 errno=0 [ 419.027581][T17068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2918'. [ 419.854775][T17093] netlink: 'syz.0.2926': attribute type 15 has an invalid length. [ 420.528414][T17142] netlink: 'syz.5.2937': attribute type 2 has an invalid length. [ 420.644630][T17142] wg1 speed is unknown, defaulting to 1000 [ 421.113903][T17156] bridge_slave_0: default FDB implementation only supports local addresses [ 421.717059][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.728213][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.750232][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.774812][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.792308][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.043445][T17180] wg1 speed is unknown, defaulting to 1000 [ 422.375352][T17194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2952'. [ 422.445249][T17194] IPVS: length: 132 != 8 [ 422.460214][T17194] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2952'. [ 422.509382][T17194] pimreg: entered allmulticast mode [ 422.553762][T17194] pimreg: left allmulticast mode [ 422.653746][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2952'. [ 423.063084][T17209] batadv0: entered promiscuous mode [ 423.069526][T17209] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 423.217828][T17180] chnl_net:caif_netlink_parms(): no params data found [ 423.422033][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 423.450023][T17226] FAULT_INJECTION: forcing a failure. [ 423.450023][T17226] name failslab, interval 1, probability 0, space 0, times 0 [ 423.484840][T17226] CPU: 1 UID: 0 PID: 17226 Comm: syz.3.2961 Not tainted syzkaller #0 PREEMPT(full) [ 423.484877][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.484892][T17226] Call Trace: [ 423.484900][T17226] [ 423.484918][T17226] dump_stack_lvl+0xe8/0x150 [ 423.484951][T17226] should_fail_ex+0x414/0x560 [ 423.484992][T17226] should_failslab+0xa8/0x100 [ 423.485022][T17226] __kmalloc_cache_node_noprof+0x88/0x700 [ 423.485047][T17226] ? page_pool_create_percpu+0x76/0xb80 [ 423.485088][T17226] page_pool_create_percpu+0x76/0xb80 [ 423.485122][T17226] ? bpf_test_run_xdp_live+0x1ba/0x1b20 [ 423.485157][T17226] bpf_test_run_xdp_live+0x1cf/0x1b20 [ 423.485195][T17226] ? stack_trace_save+0x9c/0xe0 [ 423.485228][T17226] ? __pfx_stack_trace_save+0x10/0x10 [ 423.485269][T17226] ? __lock_acquire+0x6b6/0x2cf0 [ 423.485296][T17226] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 423.485323][T17226] ? __kasan_kmalloc+0x93/0xb0 [ 423.485345][T17226] ? __kmalloc_noprof+0x41d/0x800 [ 423.485363][T17226] ? bpf_test_init+0x9f/0x150 [ 423.485385][T17226] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 423.485411][T17226] ? bpf_prog_test_run+0x2c7/0x340 [ 423.485481][T17226] ? __might_fault+0xb0/0x130 [ 423.485516][T17226] ? __might_fault+0xb0/0x130 [ 423.485555][T17226] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 423.485595][T17226] ? _copy_from_user+0x94/0xb0 [ 423.485623][T17226] ? bpf_test_init+0x113/0x150 [ 423.485647][T17226] ? xdp_convert_md_to_buff+0x5b/0x330 [ 423.485678][T17226] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 423.485725][T17226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.485759][T17226] ? __fget_files+0x2a/0x420 [ 423.485794][T17226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.485823][T17226] bpf_prog_test_run+0x2c7/0x340 [ 423.485860][T17226] __sys_bpf+0x562/0x860 [ 423.485894][T17226] ? __pfx___sys_bpf+0x10/0x10 [ 423.485949][T17226] ? ksys_write+0x22a/0x250 [ 423.485974][T17226] ? __pfx_ksys_write+0x10/0x10 [ 423.486004][T17226] __x64_sys_bpf+0x7c/0x90 [ 423.486033][T17226] do_syscall_64+0xec/0xf80 [ 423.486056][T17226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.486077][T17226] ? trace_irq_disable+0x37/0x100 [ 423.486106][T17226] ? clear_bhb_loop+0x60/0xb0 [ 423.486133][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.486154][T17226] RIP: 0033:0x7fb253d8f749 [ 423.486174][T17226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.486194][T17226] RSP: 002b:00007fb254c96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.486218][T17226] RAX: ffffffffffffffda RBX: 00007fb253fe5fa0 RCX: 00007fb253d8f749 [ 423.486234][T17226] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 423.486248][T17226] RBP: 00007fb254c96090 R08: 0000000000000000 R09: 0000000000000000 [ 423.486263][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.486276][T17226] R13: 00007fb253fe6038 R14: 00007fb253fe5fa0 R15: 00007ffd500a3268 [ 423.486313][T17226] [ 423.853534][ T5150] Bluetooth: hci2: command tx timeout [ 423.974652][T17180] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.984198][T17180] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.992220][T17180] bridge_slave_0: entered allmulticast mode [ 424.000905][T17180] bridge_slave_0: entered promiscuous mode [ 424.011268][T17180] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.019101][T17180] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.035223][T17180] bridge_slave_1: entered allmulticast mode [ 424.044476][T17180] bridge_slave_1: entered promiscuous mode [ 424.170388][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2963'. [ 424.228263][T17180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.254795][T17180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.379227][T17180] team0: Port device team_slave_0 added [ 424.406279][T17180] team0: Port device team_slave_1 added [ 424.532436][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 424.543641][T17180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.559112][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 424.566161][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.631817][T17180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.685319][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2965'. [ 424.773179][T17180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.790788][T17180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.823185][T17180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.845673][T17244] macsec1: entered promiscuous mode [ 424.851996][T17244] macsec1: entered allmulticast mode [ 424.858948][T17244] syzkaller0: port 1(macsec1) entered blocking state [ 424.866945][T17244] syzkaller0: port 1(macsec1) entered disabled state [ 424.917902][ T6020] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.960368][ T6020] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.969992][ T6020] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.998267][ T6020] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.212344][T17264] FAULT_INJECTION: forcing a failure. [ 425.212344][T17264] name failslab, interval 1, probability 0, space 0, times 0 [ 425.237784][T17264] CPU: 0 UID: 0 PID: 17264 Comm: syz.4.2973 Not tainted syzkaller #0 PREEMPT(full) [ 425.237814][T17264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.237827][T17264] Call Trace: [ 425.237836][T17264] [ 425.237845][T17264] dump_stack_lvl+0xe8/0x150 [ 425.237879][T17264] should_fail_ex+0x414/0x560 [ 425.237920][T17264] should_failslab+0xa8/0x100 [ 425.237950][T17264] __kvmalloc_node_noprof+0x175/0x920 [ 425.237977][T17264] ? page_pool_create_percpu+0x2dd/0xb80 [ 425.238009][T17264] ? page_pool_create_percpu+0xaf/0xb80 [ 425.238048][T17264] page_pool_create_percpu+0x2dd/0xb80 [ 425.238091][T17264] bpf_test_run_xdp_live+0x1cf/0x1b20 [ 425.238128][T17264] ? stack_trace_save+0x9c/0xe0 [ 425.238159][T17264] ? __pfx_stack_trace_save+0x10/0x10 [ 425.238199][T17264] ? __lock_acquire+0x6b6/0x2cf0 [ 425.238226][T17264] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 425.238250][T17264] ? __kasan_kmalloc+0x93/0xb0 [ 425.238268][T17262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13 [ 425.238273][T17264] ? __kmalloc_noprof+0x41d/0x800 [ 425.238291][T17264] ? bpf_test_init+0x9f/0x150 [ 425.238313][T17264] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 425.238439][T17264] ? bpf_prog_test_run+0x2c7/0x340 [ 425.238636][T17264] ? __might_fault+0xb0/0x130 [ 425.238923][T17264] ? __might_fault+0xb0/0x130 [ 425.239018][T17264] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 425.239126][T17264] ? _copy_from_user+0x94/0xb0 [ 425.239199][T17264] ? bpf_test_init+0x113/0x150 [ 425.239263][T17264] ? xdp_convert_md_to_buff+0x5b/0x330 [ 425.239346][T17264] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 425.239491][T17264] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.239586][T17264] ? __fget_files+0x2a/0x420 [ 425.239713][T17264] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.239790][T17264] bpf_prog_test_run+0x2c7/0x340 [ 425.239893][T17264] __sys_bpf+0x562/0x860 [ 425.240007][T17264] ? __pfx___sys_bpf+0x10/0x10 [ 425.240131][T17264] ? ksys_write+0x22a/0x250 [ 425.240196][T17264] ? __pfx_ksys_write+0x10/0x10 [ 425.240278][T17264] __x64_sys_bpf+0x7c/0x90 [ 425.240353][T17264] do_syscall_64+0xec/0xf80 [ 425.240408][T17264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.240457][T17264] ? clear_bhb_loop+0x60/0xb0 [ 425.240531][T17264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.240579][T17264] RIP: 0033:0x7f4ac2b8f749 [ 425.240628][T17264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.240690][T17264] RSP: 002b:00007f4ac3a15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.240754][T17264] RAX: ffffffffffffffda RBX: 00007f4ac2de5fa0 RCX: 00007f4ac2b8f749 [ 425.240797][T17264] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 425.240831][T17264] RBP: 00007f4ac3a15090 R08: 0000000000000000 R09: 0000000000000000 [ 425.240872][T17264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.240904][T17264] R13: 00007f4ac2de6038 R14: 00007f4ac2de5fa0 R15: 00007ffdcec3c328 [ 425.241000][T17264] [ 425.252291][T17264] page_pool_create_percpu() gave up with errno -12 [ 425.270431][T17180] hsr_slave_0: entered promiscuous mode [ 425.649305][T17180] hsr_slave_1: entered promiscuous mode [ 425.660442][T17180] debugfs: 'hsr0' already exists in 'hsr' [ 425.669715][T17180] Cannot create hsr debugfs directory [ 425.901853][ T5150] Bluetooth: hci2: command tx timeout [ 425.924780][T17279] IPv6: sit1: Disabled Multicast RS [ 425.931403][T17279] sit1: entered promiscuous mode [ 425.938922][T17279] sit1: entered allmulticast mode [ 426.023239][T17282] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2979'. [ 426.201820][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 426.257765][T17180] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.359877][T17180] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.453401][T17180] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.513207][T17294] wg1 speed is unknown, defaulting to 1000 [ 426.529699][T17180] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.545761][T17298] FAULT_INJECTION: forcing a failure. [ 426.545761][T17298] name failslab, interval 1, probability 0, space 0, times 0 [ 426.567879][T17298] CPU: 0 UID: 0 PID: 17298 Comm: syz.5.2984 Not tainted syzkaller #0 PREEMPT(full) [ 426.567910][T17298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.567925][T17298] Call Trace: [ 426.567933][T17298] [ 426.567942][T17298] dump_stack_lvl+0xe8/0x150 [ 426.567980][T17298] should_fail_ex+0x414/0x560 [ 426.568020][T17298] should_failslab+0xa8/0x100 [ 426.568050][T17298] __kmalloc_cache_noprof+0x84/0x700 [ 426.568071][T17298] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 426.568097][T17298] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 426.568132][T17298] __xdp_reg_mem_model+0x1d8/0x5a0 [ 426.568167][T17298] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 426.568199][T17298] ? page_pool_create_percpu+0x7f9/0xb80 [ 426.568238][T17298] xdp_reg_mem_model+0x22/0x40 [ 426.568265][T17298] bpf_test_run_xdp_live+0x21a/0x1b20 [ 426.568302][T17298] ? stack_trace_save+0x9c/0xe0 [ 426.568335][T17298] ? __pfx_stack_trace_save+0x10/0x10 [ 426.568375][T17298] ? __lock_acquire+0x6b6/0x2cf0 [ 426.568402][T17298] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 426.568428][T17298] ? __kasan_kmalloc+0x93/0xb0 [ 426.568450][T17298] ? __kmalloc_noprof+0x41d/0x800 [ 426.568469][T17298] ? bpf_test_init+0x9f/0x150 [ 426.568492][T17298] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 426.568517][T17298] ? bpf_prog_test_run+0x2c7/0x340 [ 426.568733][T17298] ? __might_fault+0xb0/0x130 [ 426.568772][T17298] ? __might_fault+0xb0/0x130 [ 426.568812][T17298] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 426.568854][T17298] ? _copy_from_user+0x94/0xb0 [ 426.568882][T17298] ? bpf_test_init+0x113/0x150 [ 426.568906][T17298] ? xdp_convert_md_to_buff+0x5b/0x330 [ 426.568936][T17298] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 426.568983][T17298] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 426.569016][T17298] ? __fget_files+0x2a/0x420 [ 426.569051][T17298] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 426.569081][T17298] bpf_prog_test_run+0x2c7/0x340 [ 426.569118][T17298] __sys_bpf+0x562/0x860 [ 426.569151][T17298] ? __pfx___sys_bpf+0x10/0x10 [ 426.569199][T17298] ? ksys_write+0x22a/0x250 [ 426.569224][T17298] ? __pfx_ksys_write+0x10/0x10 [ 426.569254][T17298] __x64_sys_bpf+0x7c/0x90 [ 426.569282][T17298] do_syscall_64+0xec/0xf80 [ 426.569305][T17298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.569326][T17298] ? trace_irq_disable+0x37/0x100 [ 426.569355][T17298] ? clear_bhb_loop+0x60/0xb0 [ 426.569381][T17298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.569402][T17298] RIP: 0033:0x7f3d2e98f749 [ 426.569420][T17298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.569439][T17298] RSP: 002b:00007f3d2f7f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.569463][T17298] RAX: ffffffffffffffda RBX: 00007f3d2ebe5fa0 RCX: 00007f3d2e98f749 [ 426.569480][T17298] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 426.569494][T17298] RBP: 00007f3d2f7f2090 R08: 0000000000000000 R09: 0000000000000000 [ 426.569507][T17298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.569520][T17298] R13: 00007f3d2ebe6038 R14: 00007f3d2ebe5fa0 R15: 00007ffe300a4bb8 [ 426.569556][T17298] [ 427.388168][T17313] sctp: [Deprecated]: syz.5.2988 (pid 17313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.388168][T17313] Use struct sctp_sack_info instead [ 427.510006][T17180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.548034][T17180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.640022][T17180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.683405][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 427.718049][T17180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.991804][ T5150] Bluetooth: hci2: command tx timeout [ 428.172942][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3001'. [ 428.271267][T17180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.385234][T17180] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.452739][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.461161][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.651109][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.658532][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.651294][T17180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.810377][T17180] veth0_vlan: entered promiscuous mode [ 429.863989][T17349] wg1 speed is unknown, defaulting to 1000 [ 429.889128][T17180] veth1_vlan: entered promiscuous mode [ 429.976759][T17180] veth0_macvtap: entered promiscuous mode [ 430.010870][T17180] veth1_macvtap: entered promiscuous mode [ 430.062628][ T5150] Bluetooth: hci2: command tx timeout [ 430.116167][T17180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.191833][T17180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.244792][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.270347][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.300412][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.330939][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.428516][T17367] syzkaller0: entered promiscuous mode [ 430.434522][T17367] syzkaller0: entered allmulticast mode [ 430.442708][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 430.480714][T17367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 430.491240][T17370] syzkaller1: entered promiscuous mode [ 430.508358][T17370] syzkaller1: entered allmulticast mode [ 430.724220][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.748969][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.881403][ T3930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.928855][ T3930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.354728][T17390] bridge0: port 1(macvtap1) entered blocking state [ 431.382428][T17390] bridge0: port 1(macvtap1) entered disabled state [ 431.409563][T17390] macvtap1: entered allmulticast mode [ 431.417519][T17390] bridge0: entered allmulticast mode [ 431.434125][T17390] macvtap1: left allmulticast mode [ 431.440505][T17390] bridge0: left allmulticast mode [ 431.467184][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 432.024542][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.046386][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.058444][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.084785][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.093948][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.180763][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 432.250369][T17402] wg1 speed is unknown, defaulting to 1000 [ 432.376358][ T30] audit: type=1800 audit(1767677707.868:12): pid=17409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3014" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0 [ 432.441782][ T30] audit: type=1804 audit(1767677707.868:13): pid=17409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3014" name="memory.events" dev="tmpfs" ino=38 res=1 errno=0 [ 432.820115][ T5833] : (slave syz_tun): Releasing backup interface [ 433.726276][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.742299][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.755380][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.765809][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.781276][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.898560][T17402] chnl_net:caif_netlink_parms(): no params data found [ 434.065554][ T6020] tipc: Resetting bearer [ 434.163611][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.171439][ T5150] Bluetooth: hci0: command tx timeout [ 434.180342][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.192252][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.202920][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.216002][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.611491][ T6020] dvmrp8 (unregistering): left allmulticast mode [ 434.652343][ T6020] bond3 (unregistering): (slave geneve2): Releasing active interface [ 434.741352][T17459] netlink: 'syz.1.3030': attribute type 3 has an invalid length. [ 434.823740][ T6020] tipc: Disabling bearer [ 434.987004][ T6020] bond0 (unregistering): Released all slaves [ 435.002383][ T6020] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 435.012574][ T6020] bond1 (unregistering): Released all slaves [ 435.131147][ T6020] bond2 (unregistering): Released all slaves [ 435.252922][ T6020] bond3 (unregistering): Released all slaves [ 435.270093][ T6020] bond4 (unregistering): Released all slaves [ 435.286039][ T6020] bond5 (unregistering): (slave veth7): Releasing active interface [ 435.296154][ T6020] bond5 (unregistering): Released all slaves [ 435.420551][ T6020] bond6 (unregistering): Released all slaves [ 435.545092][ T6020] bond7 (unregistering): Released all slaves [ 435.721664][T17432] wg1 speed is unknown, defaulting to 1000 [ 435.744415][ T6020] : left promiscuous mode [ 435.774253][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.782056][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.790252][T17402] bridge_slave_0: entered allmulticast mode [ 435.798788][T17402] bridge_slave_0: entered promiscuous mode [ 435.809017][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.830358][T17402] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.837276][ T5837] Bluetooth: hci1: command tx timeout [ 435.840408][T17402] bridge_slave_1: entered allmulticast mode [ 435.863985][T17402] bridge_slave_1: entered promiscuous mode [ 435.944811][ T6020] tipc: Disabling bearer [ 435.959377][ T6020] tipc: Left network mode [ 436.047927][T17402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.093997][T17445] wg1 speed is unknown, defaulting to 1000 [ 436.107047][T17402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.222321][ T5837] Bluetooth: hci0: command tx timeout [ 436.303050][ T5837] Bluetooth: hci3: command tx timeout [ 436.390603][T17402] team0: Port device team_slave_0 added [ 436.415172][T17402] team0: Port device team_slave_1 added [ 436.595154][T17402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.614261][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.686114][T17402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.790030][T17402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.804258][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.853854][T17402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.376040][T17509] Bluetooth: MGMT ver 1.23 [ 437.444719][T17517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3039'. [ 437.512791][T17402] hsr_slave_0: entered promiscuous mode [ 437.519403][T17402] hsr_slave_1: entered promiscuous mode [ 437.536742][T17402] debugfs: 'hsr0' already exists in 'hsr' [ 437.548867][T17402] Cannot create hsr debugfs directory [ 437.556947][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 437.568561][T17521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3041'. [ 437.682547][ T6020] hsr_slave_0: left promiscuous mode [ 437.696056][ T6020] hsr_slave_1: left promiscuous mode [ 437.912010][ T5837] Bluetooth: hci1: command tx timeout [ 438.302720][ T5837] Bluetooth: hci0: command tx timeout [ 438.395949][ T5837] Bluetooth: hci3: command tx timeout [ 438.993452][T17520] syzkaller1: entered promiscuous mode [ 438.999190][T17520] syzkaller1: entered allmulticast mode [ 439.410042][T17432] chnl_net:caif_netlink_parms(): no params data found [ 439.817211][T17561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.891087][ T6020] IPVS: stop unused estimator thread 0... [ 439.926962][T17402] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.962380][T17402] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.983517][ T5837] Bluetooth: hci1: command tx timeout [ 440.134437][T17402] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.156007][T17402] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.382018][ T5837] Bluetooth: hci0: command tx timeout [ 440.394205][T17402] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.408867][T17402] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.430675][T17432] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.438385][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.446630][T17432] bridge_slave_0: entered allmulticast mode [ 440.455105][T17432] bridge_slave_0: entered promiscuous mode [ 440.461859][ T5837] Bluetooth: hci3: command tx timeout [ 440.471238][T17432] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.484150][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.491472][T17432] bridge_slave_1: entered allmulticast mode [ 440.500125][T17432] bridge_slave_1: entered promiscuous mode [ 440.519827][T17402] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.543452][T17402] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.620925][T17445] chnl_net:caif_netlink_parms(): no params data found [ 440.717565][T17432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.828039][T17432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.011545][T17432] team0: Port device team_slave_0 added [ 441.143299][T17432] team0: Port device team_slave_1 added [ 441.279827][T17445] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.301910][T17445] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.309900][T17445] bridge_slave_0: entered allmulticast mode [ 441.323890][T17445] bridge_slave_0: entered promiscuous mode [ 441.375148][T17432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.391842][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.453081][T17432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.465368][T17445] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.479510][T17445] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.488124][T17445] bridge_slave_1: entered allmulticast mode [ 441.500067][T17445] bridge_slave_1: entered promiscuous mode [ 441.531403][T17432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.539145][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.624382][T17432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.766117][T17402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.805801][T17445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.832196][T17402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.891240][T17445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.921944][T17402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.952658][T17402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 442.063694][ T5837] Bluetooth: hci1: command tx timeout [ 442.143382][T17432] hsr_slave_0: entered promiscuous mode [ 442.150285][T17432] hsr_slave_1: entered promiscuous mode [ 442.159647][T17432] debugfs: 'hsr0' already exists in 'hsr' [ 442.165887][T17432] Cannot create hsr debugfs directory [ 442.174567][T17445] team0: Port device team_slave_0 added [ 442.183996][T17445] team0: Port device team_slave_1 added [ 442.429347][T17445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.436894][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.464941][T17445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.542273][ T5837] Bluetooth: hci3: command tx timeout [ 442.571309][T17445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.584055][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.611330][T17445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.827181][T17445] hsr_slave_0: entered promiscuous mode [ 442.834443][T17445] hsr_slave_1: entered promiscuous mode [ 442.840900][T17445] debugfs: 'hsr0' already exists in 'hsr' [ 442.847601][T17445] Cannot create hsr debugfs directory [ 443.049487][T17631] netlink: 'syz.1.3054': attribute type 1 has an invalid length. [ 443.137081][T17636] netlink: 'syz.1.3054': attribute type 10 has an invalid length. [ 443.165766][T17631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.333394][T17402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.528632][T17432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 443.563692][T17402] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.580803][T17432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 443.637651][T17432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 443.661129][T17432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.720264][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.727690][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.858455][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.871747][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.944359][T17445] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 443.997445][T17445] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.079577][T17445] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 444.134862][T17445] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 444.506864][T17432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.614318][T17432] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.687222][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.695541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.783969][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.792067][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.917725][T17445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.062457][T17445] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.122421][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.131897][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.170368][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.178172][ T6020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.196652][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.216573][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'. [ 445.239296][T17700] netlink: 'syz.0.3064': attribute type 30 has an invalid length. [ 445.240317][T17402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.297792][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'. [ 445.345729][T17700] netlink: 'syz.0.3064': attribute type 30 has an invalid length. [ 445.361775][ T67] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.375468][ T67] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.388114][ T67] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.442837][ T67] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.032252][T17432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.135207][T17445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.220661][T17402] veth0_vlan: entered promiscuous mode [ 446.272187][T17402] veth1_vlan: entered promiscuous mode [ 446.415717][T17402] veth0_macvtap: entered promiscuous mode [ 446.470341][T17402] veth1_macvtap: entered promiscuous mode [ 446.585333][T17402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.611194][T17402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.650485][ T6020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.666280][ T6020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.703047][ T6020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.739565][T17546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.921252][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.961517][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.070727][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.090433][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.276932][T17432] veth0_vlan: entered promiscuous mode [ 447.319250][T17445] veth0_vlan: entered promiscuous mode [ 447.337684][T17432] veth1_vlan: entered promiscuous mode [ 447.374639][T17445] veth1_vlan: entered promiscuous mode [ 447.516051][T17432] veth0_macvtap: entered promiscuous mode [ 447.558163][T17432] veth1_macvtap: entered promiscuous mode [ 447.579781][T17445] veth0_macvtap: entered promiscuous mode [ 447.617055][T17445] veth1_macvtap: entered promiscuous mode [ 447.659196][T17432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.697224][T17432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.722007][T17445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.774586][ T6020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.804238][T17445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.830197][ T6020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.856447][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.882613][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.911415][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.926295][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.944781][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.018688][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.200464][ T2000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.234862][ T2000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.318897][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.345823][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.366095][T17758] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 448.400152][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.436260][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.507811][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.527684][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.870578][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3073'. [ 448.910236][T17773] ip_vti0: entered promiscuous mode [ 448.929627][T17773] ip_vti0: entered allmulticast mode [ 448.973561][T17770] geneve2: entered promiscuous mode [ 448.979714][T17770] geneve2: entered allmulticast mode [ 449.033681][T17779] batadv1: entered promiscuous mode [ 449.338604][ T9] IPVS: starting estimator thread 0... [ 449.345151][T17790] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 449.354772][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'. [ 449.365689][T17795] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 449.442109][T17797] IPVS: using max 29 ests per chain, 69600 per kthread [ 449.493206][T17800] netlink: 'syz.0.3079': attribute type 1 has an invalid length. [ 449.533802][T17800] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 449.638539][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3080'. [ 449.852828][T17809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3081'. [ 449.916135][T17809] netlink: 'syz.0.3081': attribute type 1 has an invalid length. [ 450.206901][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 450.237835][T17826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3084'. [ 450.306743][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 450.360139][T17826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3084'. [ 451.401412][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'. [ 451.557942][T17873] syz_tun: entered promiscuous mode [ 451.581839][T17873] macvtap1: entered promiscuous mode [ 451.613010][T17873] macvtap1: entered allmulticast mode [ 451.618487][T17873] syz_tun: entered allmulticast mode [ 451.657489][T17878] syz_tun: left allmulticast mode [ 451.676925][T17878] syz_tun: left promiscuous mode [ 452.394925][T17910] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 452.565526][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 452.596508][T17922] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3103'. [ 452.656809][T17922] pim6reg: entered allmulticast mode [ 452.686988][T17922] pim6reg: left allmulticast mode [ 452.741470][T17927] netlink: 'syz.5.3103': attribute type 6 has an invalid length. [ 452.767665][T17927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3103'. [ 452.813327][T17932] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3103'. [ 452.888674][T17927] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.896619][T17927] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.322998][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3107'. [ 453.503942][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.052983][T17972] netlink: 'syz.6.3113': attribute type 1 has an invalid length. [ 454.372391][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3117'. [ 454.420475][T17988] netlink: 'syz.6.3117': attribute type 2 has an invalid length. [ 454.630608][T17938] netlink: 'syz.1.3106': attribute type 39 has an invalid length. [ 454.742470][T17938] veth0_macvtap: left promiscuous mode [ 456.101710][T18040] tipc: Started in network mode [ 456.109451][T18040] tipc: Node identity 6e3ad731ffea, cluster identity 4711 [ 456.142106][T18040] tipc: Enabled bearer , priority 0 [ 456.258479][T14350] IPVS: starting estimator thread 0... [ 456.318536][T18047] syzkaller0: entered promiscuous mode [ 456.326616][T18050] __nla_validate_parse: 2 callbacks suppressed [ 456.326637][T18050] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3132'. [ 456.377027][T18047] syzkaller0: entered allmulticast mode [ 456.392909][T18051] IPVS: using max 29 ests per chain, 69600 per kthread [ 456.421471][T18047] tipc: Resetting bearer [ 456.766917][ T67] tipc: Resetting bearer [ 457.097809][T18039] tipc: Resetting bearer [ 459.724753][T18039] tipc: Disabling bearer [ 459.740191][ T9529] tipc: Node number set to 2446382897 [ 459.760545][T18095] tipc: Started in network mode [ 459.766434][T18095] tipc: Node identity 926cd26b18bf, cluster identity 4711 [ 459.776570][T18095] tipc: Enabled bearer , priority 0 [ 459.788405][T18098] tipc: Disabling bearer [ 460.010585][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3141'. [ 460.113859][T18119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3142'. [ 461.677325][T18154] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3148'. [ 462.072987][T18162] netlink: 'syz.7.3149': attribute type 3 has an invalid length. [ 462.092687][T18162] xt_hashlimit: size too large, truncated to 1048576 [ 462.493616][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3151'. [ 464.633444][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 465.164667][T18231] bond0: entered promiscuous mode [ 465.170994][T18231] bond_slave_0: entered promiscuous mode [ 465.197062][T18231] bond_slave_1: entered promiscuous mode [ 465.922898][T18259] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 466.120536][T18259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.529148][T18278] netlink: 'syz.7.3175': attribute type 5 has an invalid length. [ 468.512719][T18331] netlink: 'syz.1.3190': attribute type 13 has an invalid length. [ 469.318690][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 469.487902][T18346] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3195'. [ 469.563362][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3196'. [ 469.720793][T18352] netlink: 'syz.1.3197': attribute type 21 has an invalid length. [ 469.779472][ T9519] IPVS: starting estimator thread 0... [ 469.791798][T18352] netlink: 'syz.1.3197': attribute type 6 has an invalid length. [ 469.854517][T18352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3197'. [ 469.893341][T18358] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3200'. [ 469.906199][T18355] IPVS: using max 24 ests per chain, 57600 per kthread [ 469.969221][T18360] netlink: 'syz.6.3201': attribute type 4 has an invalid length. [ 470.009202][T18360] netlink: 'syz.6.3201': attribute type 1 has an invalid length. [ 470.152485][T18340] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 471.520030][T18396] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3204'. [ 471.781974][T18405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3212'. [ 471.814836][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3212'. [ 472.606025][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3223'. [ 472.663582][T18441] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3223'. [ 473.077645][T18450] tipc: Started in network mode [ 473.088417][T18450] tipc: Node identity 125bc6b62a0a, cluster identity 4711 [ 473.097650][T18450] tipc: Enabled bearer , priority 0 [ 473.180795][T18448] tipc: Disabling bearer [ 474.466965][T18501] __nla_validate_parse: 7 callbacks suppressed [ 474.466987][T18501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3236'. [ 474.640538][T18478] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3232'. [ 474.883188][T18511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 474.923605][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 475.064908][T18517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3239'. [ 475.075015][T18517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3239'. [ 475.474536][T18533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3246'. [ 475.773929][T18542] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3248'. [ 475.887220][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3249'. [ 476.277110][T18554] netlink: 'syz.6.3250': attribute type 2 has an invalid length. [ 476.325216][T18557] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3252'. [ 476.371221][T18554] : entered promiscuous mode [ 477.731465][T18599] netlink: 'syz.1.3260': attribute type 2 has an invalid length. [ 477.807069][T18599] netlink: 'syz.1.3260': attribute type 2 has an invalid length. [ 478.482608][T18619] syzkaller0: entered promiscuous mode [ 478.494423][T18619] syzkaller0: entered allmulticast mode [ 478.618956][T18619] tipc: Started in network mode [ 478.633967][T18619] tipc: Node identity feda3b9a4b73, cluster identity 4711 [ 478.653336][T18619] tipc: Enabled bearer , priority 0 [ 478.787137][T18618] tipc: Resetting bearer [ 478.850373][T18618] tipc: Disabling bearer [ 479.297687][T18651] syz_tun: entered promiscuous mode [ 479.319276][T18651] macvtap1: entered promiscuous mode [ 479.341338][T18651] macvtap1: entered allmulticast mode [ 479.361430][T18651] syz_tun: entered allmulticast mode [ 479.400904][T18654] syz_tun: left allmulticast mode [ 479.406703][T18654] syz_tun: left promiscuous mode [ 479.995393][T18675] tipc: Enabled bearer , priority 0 [ 480.194487][T18678] syzkaller0: entered promiscuous mode [ 480.229957][T18678] syzkaller0: entered allmulticast mode [ 480.331385][T18675] tipc: Resetting bearer [ 480.378311][T18686] tipc: Enabled bearer , priority 0 [ 480.463941][T18677] syzkaller0: entered promiscuous mode [ 480.469855][T18677] syzkaller0: entered allmulticast mode [ 480.482860][T18677] tipc: Resetting bearer [ 480.607959][T18670] tipc: Resetting bearer [ 480.666487][T18670] tipc: Disabling bearer [ 480.804856][T18676] tipc: Resetting bearer [ 481.176722][T18718] __nla_validate_parse: 5 callbacks suppressed [ 481.176743][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3283'. [ 481.304506][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 483.890249][T18676] tipc: Disabling bearer [ 483.919152][ T890] tipc: Node number set to 944883382 [ 483.925442][T18723] netlink: 'syz.5.3280': attribute type 4 has an invalid length. [ 484.544328][T18758] syzkaller1: entered promiscuous mode [ 484.562125][T18758] syzkaller1: entered allmulticast mode [ 485.773058][T18766] netlink: 'syz.6.3296': attribute type 6 has an invalid length. [ 487.268023][T18821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.449707][T18815] syzkaller0: entered promiscuous mode [ 487.489686][T18815] syzkaller0: entered allmulticast mode [ 487.638930][T18787] syzkaller0: entered promiscuous mode [ 487.651839][T18787] syzkaller0: entered allmulticast mode [ 487.763910][T18787] tipc: Enabled bearer , priority 0 [ 487.906048][T18786] tipc: Resetting bearer [ 488.123260][T18786] tipc: Disabling bearer [ 489.257062][T18871] bridge0: entered promiscuous mode [ 489.272671][T18871] macsec1: entered promiscuous mode [ 489.896945][T18879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14 [ 490.870085][T18901] ip6gre2: entered promiscuous mode [ 490.876471][T18901] ip6gre2: entered allmulticast mode [ 491.241849][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3328'. [ 491.319608][T18911] syz_tun: entered promiscuous mode [ 491.327134][T18911] macvtap1: entered promiscuous mode [ 491.354612][T18911] macvtap1: entered allmulticast mode [ 491.376597][T18911] syz_tun: entered allmulticast mode [ 491.685740][T18923] bond3 (unregistering): Released all slaves [ 491.766561][T18930] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3331'. [ 492.290031][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3340'. [ 492.334703][T18951] syz_tun: entered promiscuous mode [ 492.340582][T18951] macvtap2: entered promiscuous mode [ 492.355750][T18951] macvtap2: entered allmulticast mode [ 492.373245][T18951] syz_tun: entered allmulticast mode [ 492.532651][T18961] netlink: 'syz.6.3341': attribute type 28 has an invalid length. [ 492.587957][T18961] netlink: 'syz.6.3341': attribute type 3 has an invalid length. [ 492.627346][T18961] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3341'. [ 492.760563][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3341'. [ 493.212479][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3348'. [ 493.263892][T18986] vlan2: entered promiscuous mode [ 493.270987][T18986] bond0: entered promiscuous mode [ 493.281229][T18986] bond_slave_0: entered promiscuous mode [ 493.296264][T18986] bond_slave_1: entered promiscuous mode [ 493.335389][T18992] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 493.461777][T18991] syz.7.3349 uses old SIOCAX25GETINFO [ 493.475859][T18992] netlink: 'syz.1.3347': attribute type 41 has an invalid length. [ 493.733681][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3352'. [ 493.845275][T19003] vlan2: entered promiscuous mode [ 493.850584][T19003] bond1: entered promiscuous mode [ 493.868435][T19003] bond1: (slave vlan2): Opening slave failed [ 494.543449][T19006] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.762377][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3354'. [ 494.808038][T19006] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.826998][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3354'. [ 494.863489][T19014] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3354'. [ 494.974910][T19006] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.179972][T19006] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.588617][T18211] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.623295][T18211] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.709520][T19016] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.752463][T19016] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.421448][T19040] netlink: 21 bytes leftover after parsing attributes in process `syz.6.3361'. [ 496.984577][T19044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.054406][T19044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.153443][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3365'. [ 497.215446][T19044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.226392][T19044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.267398][T19056] ip_vti0: left promiscuous mode [ 497.311252][T19056] macvtap1: left promiscuous mode [ 497.326936][T19056] macvtap2: left promiscuous mode [ 497.380614][T19057] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3365'. [ 497.435985][T19052] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3365'. [ 497.494523][T19044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.512660][T19044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.718582][T19044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.764255][T19044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.165064][T18954] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.177495][T18954] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.239038][T18954] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.282636][T18954] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.440068][ T1304] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.456089][ T1304] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.498191][ T1304] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.512573][ T1304] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.565077][T19082] tipc: Enabled bearer , priority 0 [ 498.593583][T19082] syzkaller0: entered promiscuous mode [ 498.599199][T19082] syzkaller0: entered allmulticast mode [ 498.689128][T19082] tipc: Resetting bearer [ 498.723726][T19081] tipc: Resetting bearer [ 498.830393][T19081] tipc: Disabling bearer [ 498.903697][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3376'. [ 499.451315][T19104] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15 [ 499.590542][ T5837] Bluetooth: hci3: link tx timeout [ 499.599048][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 499.982648][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3387'. [ 500.003337][T19126] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3387'. [ 500.050295][T19128] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3388'. [ 500.416118][T19135] netlink: 'syz.5.3390': attribute type 1 has an invalid length. [ 500.568051][T19135] bond1: entered promiscuous mode [ 500.579813][T19135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.685194][T19138] bond1: (slave veth3): making interface the new active one [ 500.697111][T19138] veth3: entered promiscuous mode [ 500.709439][T19138] bond1: (slave veth3): Enslaving as an active interface with an up link [ 501.342820][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3401'. [ 501.670658][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 501.719227][T19173] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3403'. [ 501.938457][T19184] netlink: 'syz.1.3406': attribute type 1 has an invalid length. [ 502.077176][T19185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.091631][T19185] bond3: (slave bond4): making interface the new active one [ 502.103138][T19185] bond3: (slave bond4): Enslaving as an active interface with an up link [ 502.132114][T19185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3406'. [ 502.203528][T19184] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 502.264204][T19185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.571832][T19199] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 502.655065][T19199] syzkaller0: entered promiscuous mode [ 502.684245][T19199] syzkaller0: entered allmulticast mode [ 503.756442][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 504.895866][T19244] netlink: 'syz.6.3421': attribute type 10 has an invalid length. [ 505.155247][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 505.164898][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 505.196171][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3423'. [ 505.553838][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3431'. [ 506.058421][T19305] syzkaller1: entered promiscuous mode [ 506.078160][T19305] syzkaller1: entered allmulticast mode [ 506.397868][T19317] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 506.630536][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.739174][T19330] batadv0: entered allmulticast mode [ 506.746957][T19330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.775643][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3440'. [ 507.117263][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3446'. [ 507.144612][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3446'. [ 507.203875][T19342] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 507.218621][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3446'. [ 507.221050][T19342] bond1 (unregistering): Released all slaves [ 509.048659][T19394] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 509.130134][T19400] ip6t_rpfilter: unknown options [ 509.573923][T19416] netlink: 'syz.0.3470': attribute type 13 has an invalid length. [ 509.596794][T19418] vetè0_virt_wif: renamed from lo (while UP) [ 509.775020][T19416] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.782824][T19416] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.944198][T19416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.977942][T19416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.399600][T18211] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.430434][T18211] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.461344][T18211] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.503295][T18211] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.534127][T18211] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.559067][T18211] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.578682][T18211] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.606648][T18211] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.061512][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 511.471078][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3482'. [ 512.073858][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'. [ 512.098116][T19477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.499293][T19487] xt_TCPMSS: Only works on TCP SYN packets [ 512.621175][T19487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.799059][T19497] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.806933][T19497] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.142892][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3498'. [ 514.078224][T19542] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 514.115861][T19538] bond2: Removing last ns target with arp_interval on [ 514.209145][T19536] bond3: Removing last ns target with arp_interval on [ 514.464071][T19559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3514'. [ 514.675185][T19569] vlan2: entered promiscuous mode [ 514.690575][T19569] bridge0: entered promiscuous mode [ 515.153875][T19587] netlink: 'syz.7.3521': attribute type 10 has an invalid length. [ 515.181872][T19587] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3521'. [ 515.195184][T19587] bond0: entered promiscuous mode [ 515.200272][T19587] bond_slave_0: entered promiscuous mode [ 515.251822][T19587] bond_slave_1: entered promiscuous mode [ 515.258484][T19587] bridge0: port 3(bond0) entered blocking state [ 515.289443][T19587] bridge0: port 3(bond0) entered disabled state [ 515.311919][T19587] bond0: entered allmulticast mode [ 515.317108][T19587] bond_slave_0: entered allmulticast mode [ 515.363804][T19587] bond_slave_1: entered allmulticast mode [ 515.394974][T19587] bridge0: port 3(bond0) entered blocking state [ 515.401403][T19587] bridge0: port 3(bond0) entered forwarding state [ 515.998474][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 516.477371][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3531'. [ 516.556086][T19630] syz_tun: entered promiscuous mode [ 516.564935][T19630] macvtap0: entered promiscuous mode [ 516.573723][T19630] macvtap0: entered allmulticast mode [ 516.590316][T19630] syz_tun: entered allmulticast mode [ 516.648959][T19632] syz_tun: left allmulticast mode [ 516.660777][T19632] syz_tun: left promiscuous mode [ 516.871769][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 517.278039][T19640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3535'. [ 517.322070][T19640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3535'. [ 518.046618][T19665] netlink: 'syz.7.3542': attribute type 1 has an invalid length. [ 518.071844][T19665] netlink: 'syz.7.3542': attribute type 2 has an invalid length. [ 519.334791][T19713] netlink: 'syz.1.3557': attribute type 31 has an invalid length. [ 519.519908][T19721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3558'. [ 519.743058][T19683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.126313][T19742] tipc: Enabled bearer , priority 0 [ 520.168264][T19742] syzkaller0: entered promiscuous mode [ 520.182002][T19742] syzkaller0: entered allmulticast mode [ 520.257054][T19742] tipc: Resetting bearer [ 520.285263][T19741] tipc: Resetting bearer [ 520.354951][T19741] tipc: Disabling bearer [ 520.563044][T19756] Cannot find del_set index 4 as target [ 521.066285][T19769] netlink: 'syz.5.3573': attribute type 1 has an invalid length. [ 521.078289][T19744] infiniband syû: set active [ 521.079489][T19769] netlink: 'syz.5.3573': attribute type 6 has an invalid length. [ 521.097995][T19744] infiniband syû: added bond_slave_0 [ 521.111111][T19769] netlink: 'syz.5.3573': attribute type 3 has an invalid length. [ 521.196816][T19744] RDS/IB: syû: added [ 521.231151][T19744] smc: adding ib device syû with port count 1 [ 521.260923][T19744] smc: ib device syû port 1 has no pnetid [ 522.110691][T19789] bond2: option ad_user_port_key: invalid value (65535) [ 522.119299][T19789] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 522.146310][T19789] bond2 (unregistering): Released all slaves [ 522.319755][T19797] x_tables: duplicate underflow at hook 3 [ 524.011282][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3596'. [ 524.056980][T19839] macvtap3: entered promiscuous mode [ 524.073428][T19841] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3597'. [ 524.083823][T19839] macvtap3: entered allmulticast mode [ 524.245079][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3598'. [ 524.686229][T19854] x_tables: duplicate underflow at hook 2 [ 525.080018][T19865] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.030008][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3608'. [ 526.146733][T19881] netlink: 'syz.7.3610': attribute type 32 has an invalid length. [ 526.159579][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3610'. [ 526.202701][T19878] veth1_to_hsr: entered promiscuous mode [ 526.208902][T19878] macvtap1: entered promiscuous mode [ 526.214995][T19878] macvtap1: entered allmulticast mode [ 526.220418][T19878] veth1_to_hsr: entered allmulticast mode [ 526.344363][T19881] bond4: Setting coupled_control to off (0) [ 526.416467][T19886] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 526.835687][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3615'. [ 528.319696][T19941] netlink: 'syz.0.3620': attribute type 1 has an invalid length. [ 528.456476][T19941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.497182][T19947] bond2: (slave ip6gretap1): making interface the new active one [ 528.528277][T19947] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 528.622342][T19948] veth3: entered promiscuous mode [ 528.670392][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3623'. [ 528.681291][T19948] bond2: (slave veth3): Enslaving as an active interface with a down link [ 528.714027][T19947] erspan0: entered allmulticast mode [ 528.736810][T19947] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 529.148953][T19968] vlan2: entered promiscuous mode [ 529.155748][T19968] bridge0: entered promiscuous mode [ 529.418460][T19974] FAULT_INJECTION: forcing a failure. [ 529.418460][T19974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.438415][T19974] CPU: 1 UID: 0 PID: 19974 Comm: syz.1.3629 Not tainted syzkaller #0 PREEMPT(full) [ 529.438445][T19974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.438458][T19974] Call Trace: [ 529.438466][T19974] [ 529.438475][T19974] dump_stack_lvl+0xe8/0x150 [ 529.438506][T19974] should_fail_ex+0x414/0x560 [ 529.438541][T19974] _copy_from_user+0x2d/0xb0 [ 529.438569][T19974] get_user_ifreq+0x6c/0x180 [ 529.438601][T19974] sock_ioctl+0x6dd/0x790 [ 529.438634][T19974] ? __pfx_sock_ioctl+0x10/0x10 [ 529.438666][T19974] ? __fget_files+0x3a0/0x420 [ 529.438693][T19974] ? __fget_files+0x2a/0x420 [ 529.438725][T19974] ? bpf_lsm_file_ioctl+0x9/0x20 [ 529.438749][T19974] ? __pfx_sock_ioctl+0x10/0x10 [ 529.438779][T19974] __se_sys_ioctl+0xfc/0x170 [ 529.438802][T19974] do_syscall_64+0xec/0xf80 [ 529.438825][T19974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.438846][T19974] ? trace_irq_disable+0x37/0x100 [ 529.438875][T19974] ? clear_bhb_loop+0x60/0xb0 [ 529.438901][T19974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.438923][T19974] RIP: 0033:0x7fe705b8f749 [ 529.438942][T19974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.438962][T19974] RSP: 002b:00007fe706987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.438985][T19974] RAX: ffffffffffffffda RBX: 00007fe705de5fa0 RCX: 00007fe705b8f749 [ 529.439001][T19974] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 529.439015][T19974] RBP: 00007fe706987090 R08: 0000000000000000 R09: 0000000000000000 [ 529.439029][T19974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.439041][T19974] R13: 00007fe705de6038 R14: 00007fe705de5fa0 R15: 00007fff1df53cb8 [ 529.439077][T19974] [ 529.951373][T19980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3631'. [ 530.032609][T19980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 530.202968][T19987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3632'. [ 531.562444][T20002] syzkaller0: entered promiscuous mode [ 531.568906][T20002] syzkaller0: entered allmulticast mode [ 534.375908][T20034] tipc: Failed to remove unknown binding: 66,0,0/2446382897:1332038837/1332038838 [ 534.483316][T20039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17 [ 535.825157][T20068] netlink: 464 bytes leftover after parsing attributes in process `syz.7.3649'. [ 535.946885][T20072] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 536.195341][ T9] IPVS: starting estimator thread 0... [ 536.291663][T20083] IPVS: using max 29 ests per chain, 69600 per kthread [ 536.982542][T20100] netlink: 'syz.1.3658': attribute type 1 has an invalid length. [ 536.993816][T20100] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3658'. [ 537.191940][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3659'. [ 537.713344][T20116] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 537.933800][T20126] netlink: 'syz.5.3665': attribute type 1 has an invalid length. [ 538.135300][T20126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.236423][T20132] bond2: (slave veth5): Enslaving as an active interface with a down link [ 538.280507][T20133] vlan0: entered allmulticast mode [ 538.286135][T20133] veth1: entered allmulticast mode [ 538.293607][T20133] veth1: entered promiscuous mode [ 538.299692][T20133] veth1: left promiscuous mode [ 538.314275][T20133] bond2: (slave vlan0): making interface the new active one [ 538.343610][T20133] veth1: entered promiscuous mode [ 538.364962][T20133] vlan0: entered promiscuous mode [ 538.370770][T20133] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 538.792639][T20157] netlink: 'syz.5.3674': attribute type 298 has an invalid length. [ 539.084216][T20177] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3678'. [ 539.354777][T20182] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3679'. [ 539.398656][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 539.436043][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 539.487175][ T5891] IPVS: starting estimator thread 0... [ 539.617681][T20192] IPVS: using max 27 ests per chain, 64800 per kthread [ 540.125881][T20207] m1Ie5n: entered promiscuous mode [ 540.297565][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3685'. [ 540.372854][T20219] netlink: 308 bytes leftover after parsing attributes in process `syz.5.3687'. [ 540.392851][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3687'. [ 540.557009][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3688'. [ 540.597713][T20225] openvswitch: netlink: Flow actions attr not present in new flow. [ 540.985052][T20234] vlan2: entered promiscuous mode [ 543.332805][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3706'. [ 543.342055][T20296] openvswitch: netlink: Invalid VLAN frame [ 543.915410][T20304] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 543.974484][T20304] bond5 (unregistering): Released all slaves [ 545.004071][T20337] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3717'. [ 545.238611][T20342] Cannot find set identified by id 0 to match [ 545.412392][T20347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3721'. [ 545.463323][T20347] netlink: 'syz.1.3721': attribute type 1 has an invalid length. [ 545.603770][T20351] bond6: entered promiscuous mode [ 545.608937][T20351] bond6: entered allmulticast mode [ 545.666026][T20351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.791237][T20352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 545.820067][T20352] bond7: entered promiscuous mode [ 545.830512][T20352] bond7: entered allmulticast mode [ 545.841202][T20352] bond6: (slave bond7): Enslaving as a backup interface with a down link [ 546.283611][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 546.295412][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3725'. [ 546.587678][T20377] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3730'. [ 546.997482][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'. [ 547.010414][T20389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.348461][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3733'. [ 548.201019][T20422] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3741'. [ 548.440422][T20429] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3744'. [ 548.607807][T20439] netlink: 'syz.5.3745': attribute type 10 has an invalid length. [ 548.625375][T20439] bridge0: port 3(macsec0) entered blocking state [ 548.649689][T20439] bridge0: port 3(macsec0) entered disabled state [ 548.698645][T20439] macsec0: entered allmulticast mode [ 548.725061][T20439] veth1_macvtap: entered allmulticast mode [ 548.779347][T20439] macsec0: entered promiscuous mode [ 549.041982][T20450] netlink: 'syz.7.3747': attribute type 29 has an invalid length. [ 549.065853][T20450] netlink: 'syz.7.3747': attribute type 29 has an invalid length. [ 549.068251][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3748'. [ 549.159336][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3747'. [ 549.208933][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3747'. [ 549.375452][T20457] tipc: Enabled bearer , priority 0 [ 549.634482][T20457] syzkaller0: entered promiscuous mode [ 549.658256][T20457] syzkaller0: entered allmulticast mode [ 549.691793][T17753] vlan0: left promiscuous mode [ 549.734195][T20466] tipc: Resetting bearer [ 549.752117][T20455] tipc: Resetting bearer [ 549.799266][T20455] tipc: Disabling bearer [ 549.995835][T20471] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 550.622458][T20490] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3760'. [ 551.233201][T20503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3765'. [ 551.385889][T20505] netlink: 'syz.1.3766': attribute type 10 has an invalid length. [ 551.404301][T20505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3766'. [ 551.442684][T20506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 551.476154][T20505] dummy0: entered promiscuous mode [ 551.484163][T20505] bridge0: port 3(dummy0) entered blocking state [ 551.490768][T20505] bridge0: port 3(dummy0) entered disabled state [ 551.507844][T20505] dummy0: entered allmulticast mode [ 551.855073][T20527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3771'. [ 552.398239][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3776'. [ 552.894035][T20555] tipc: Enabling of bearer rejected, failed to enable media [ 553.634482][T20585] vlan1: entered promiscuous mode [ 553.641875][T20585] bridge0: entered promiscuous mode [ 554.135841][T20596] __nla_validate_parse: 2 callbacks suppressed [ 554.135864][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3791'. [ 554.481381][T20606] bond3: Unable to set up delay as MII monitoring is disabled [ 554.507597][T20606] bond3 (unregistering): Released all slaves [ 555.206550][T20618] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3794'. [ 555.252649][T20619] netlink: 'syz.7.3794': attribute type 1 has an invalid length. [ 555.262015][T20619] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3794'. [ 555.452276][T20619] netlink: 'syz.7.3794': attribute type 1 has an invalid length. [ 555.464278][T20619] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3794'. [ 555.683169][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3798'. [ 555.754843][T20639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3798'. [ 555.966803][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3803'. [ 556.757246][T20659] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3807'. [ 557.493300][T20676] FAULT_INJECTION: forcing a failure. [ 557.493300][T20676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.584264][T20676] CPU: 0 UID: 0 PID: 20676 Comm: syz.1.3813 Not tainted syzkaller #0 PREEMPT(full) [ 557.584295][T20676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.584309][T20676] Call Trace: [ 557.584317][T20676] [ 557.584326][T20676] dump_stack_lvl+0xe8/0x150 [ 557.584361][T20676] should_fail_ex+0x414/0x560 [ 557.584402][T20676] _copy_from_user+0x2d/0xb0 [ 557.584431][T20676] do_ip_vs_set_ctl+0x2d3/0xa60 [ 557.584459][T20676] ? rcu_is_watching+0x15/0xb0 [ 557.584487][T20676] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 557.584508][T20676] ? trace_contention_end+0x39/0x100 [ 557.584554][T20676] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 557.584586][T20676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.584608][T20676] ? aa_sk_perm+0x7ee/0x920 [ 557.584640][T20676] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.584674][T20676] nf_setsockopt+0x26f/0x290 [ 557.584696][T20676] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 557.584733][T20676] do_sock_setsockopt+0x17c/0x1b0 [ 557.584763][T20676] __x64_sys_setsockopt+0x13f/0x1b0 [ 557.584794][T20676] do_syscall_64+0xec/0xf80 [ 557.584816][T20676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.584837][T20676] ? trace_irq_disable+0x37/0x100 [ 557.584866][T20676] ? clear_bhb_loop+0x60/0xb0 [ 557.584892][T20676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.584914][T20676] RIP: 0033:0x7fe705b8f749 [ 557.584932][T20676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.584951][T20676] RSP: 002b:00007fe706987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.584975][T20676] RAX: ffffffffffffffda RBX: 00007fe705de5fa0 RCX: 00007fe705b8f749 [ 557.584991][T20676] RDX: 000000000000048f RSI: 0000000000000000 RDI: 0000000000000003 [ 557.585004][T20676] RBP: 00007fe706987090 R08: 000000000000002c R09: 0000000000000000 [ 557.585018][T20676] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 557.585032][T20676] R13: 00007fe705de6038 R14: 00007fe705de5fa0 R15: 00007fff1df53cb8 [ 557.585067][T20676] [ 557.985269][T20682] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3816'. [ 558.126384][T20684] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 558.525800][T20699] netlink: 'syz.1.3820': attribute type 21 has an invalid length. [ 558.578493][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3820'. [ 559.904996][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 560.493131][T20709] __nla_validate_parse: 2 callbacks suppressed [ 560.493152][T20709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'. [ 560.659373][T20732] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3827'. [ 560.791338][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3829'. [ 560.830754][T20734] macvtap2: entered promiscuous mode [ 560.844336][T20734] macvtap2: entered allmulticast mode [ 560.853769][T20736] tipc: Started in network mode [ 560.870160][T20736] tipc: Node identity 4, cluster identity 4711 [ 560.878948][T20736] tipc: Node number set to 4 [ 561.015245][T20746] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 561.334917][T20761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.362666][T20761] bridge0: port 3(bond3) entered blocking state [ 561.390282][T20761] bridge0: port 3(bond3) entered disabled state [ 561.406643][T20761] bond3: entered allmulticast mode [ 561.432773][T20761] bond3: entered promiscuous mode [ 561.710690][T20783] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3842'. [ 561.732853][T17753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.740830][T17753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.124994][T20790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3847'. [ 562.409217][T20807] syzkaller1: entered promiscuous mode [ 562.414893][T20807] syzkaller1: entered allmulticast mode [ 562.662637][T20818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.708266][T20820] sctp: [Deprecated]: syz.7.3855 (pid 20820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.708266][T20820] Use struct sctp_sack_info instead [ 562.808840][T20824] FAULT_INJECTION: forcing a failure. [ 562.808840][T20824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.822318][T20824] CPU: 1 UID: 0 PID: 20824 Comm: syz.0.3857 Not tainted syzkaller #0 PREEMPT(full) [ 562.822344][T20824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.822358][T20824] Call Trace: [ 562.822365][T20824] [ 562.822374][T20824] dump_stack_lvl+0xe8/0x150 [ 562.822404][T20824] should_fail_ex+0x414/0x560 [ 562.822439][T20824] _copy_from_user+0x2d/0xb0 [ 562.822463][T20824] __sys_bpf+0x1e3/0x860 [ 562.822492][T20824] ? __pfx___sys_bpf+0x10/0x10 [ 562.822542][T20824] ? ksys_write+0x22a/0x250 [ 562.822564][T20824] ? __pfx_ksys_write+0x10/0x10 [ 562.822590][T20824] __x64_sys_bpf+0x7c/0x90 [ 562.822614][T20824] do_syscall_64+0xec/0xf80 [ 562.822634][T20824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.822652][T20824] ? trace_irq_disable+0x37/0x100 [ 562.822677][T20824] ? clear_bhb_loop+0x60/0xb0 [ 562.822698][T20824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.822716][T20824] RIP: 0033:0x7f9baef8f749 [ 562.822733][T20824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.822752][T20824] RSP: 002b:00007f9bafee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.822773][T20824] RAX: ffffffffffffffda RBX: 00007f9baf1e5fa0 RCX: 00007f9baef8f749 [ 562.822788][T20824] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000f [ 562.822801][T20824] RBP: 00007f9bafee5090 R08: 0000000000000000 R09: 0000000000000000 [ 562.822814][T20824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.822826][T20824] R13: 00007f9baf1e6038 R14: 00007f9baf1e5fa0 R15: 00007ffdacbaad78 [ 562.822860][T20824] [ 563.317640][T20838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3862'. [ 563.696287][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3866'. [ 563.756490][T20854] vlan3: entered promiscuous mode [ 563.770404][T20849] dummy0: left allmulticast mode [ 563.775849][T20849] bridge0: port 3(dummy0) entered disabled state [ 563.790420][T20849] bridge_slave_1: left allmulticast mode [ 563.815954][ T30] audit: type=1800 audit(1767677839.308:14): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3869" name="6" dev="tmpfs" ino=774 res=0 errno=0 [ 563.824261][T20849] bridge_slave_1: left promiscuous mode [ 563.866760][T20849] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.904244][T20849] bridge_slave_0: left allmulticast mode [ 563.909956][T20849] bridge_slave_0: left promiscuous mode [ 563.923369][T20849] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.975243][T20863] FAULT_INJECTION: forcing a failure. [ 563.975243][T20863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.989820][T20863] CPU: 0 UID: 0 PID: 20863 Comm: syz.6.3871 Not tainted syzkaller #0 PREEMPT(full) [ 563.989850][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.989864][T20863] Call Trace: [ 563.989872][T20863] [ 563.989881][T20863] dump_stack_lvl+0xe8/0x150 [ 563.989915][T20863] should_fail_ex+0x414/0x560 [ 563.989956][T20863] _copy_to_user+0x31/0xb0 [ 563.989985][T20863] simple_read_from_buffer+0xe1/0x170 [ 563.990016][T20863] proc_fail_nth_read+0x1b3/0x220 [ 563.990044][T20863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.990071][T20863] ? rw_verify_area+0x2a6/0x4d0 [ 563.990092][T20863] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.990117][T20863] vfs_read+0x200/0xa30 [ 563.990137][T20863] ? fdget_pos+0x247/0x320 [ 563.990169][T20863] ? __pfx___mutex_lock+0x10/0x10 [ 563.990194][T20863] ? __pfx_vfs_read+0x10/0x10 [ 563.990217][T20863] ? __fget_files+0x2a/0x420 [ 563.990249][T20863] ? __fget_files+0x3a0/0x420 [ 563.990276][T20863] ? __fget_files+0x2a/0x420 [ 563.990314][T20863] ksys_read+0x145/0x250 [ 563.990339][T20863] ? __pfx_ksys_read+0x10/0x10 [ 563.990373][T20863] do_syscall_64+0xec/0xf80 [ 563.990396][T20863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.990418][T20863] ? trace_irq_disable+0x37/0x100 [ 563.990447][T20863] ? clear_bhb_loop+0x60/0xb0 [ 563.990473][T20863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.990494][T20863] RIP: 0033:0x7fb7ed58e15c [ 563.990513][T20863] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 563.990532][T20863] RSP: 002b:00007fb7ee471030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.990556][T20863] RAX: ffffffffffffffda RBX: 00007fb7ed7e6090 RCX: 00007fb7ed58e15c [ 563.990572][T20863] RDX: 000000000000000f RSI: 00007fb7ee4710a0 RDI: 0000000000000005 [ 563.990586][T20863] RBP: 00007fb7ee471090 R08: 0000000000000000 R09: 0000000000000000 [ 563.990600][T20863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.990613][T20863] R13: 00007fb7ed7e6128 R14: 00007fb7ed7e6090 R15: 00007ffdaa593e18 [ 563.990658][T20863] [ 565.022076][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 565.162631][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 565.223214][T20913] vlan3: entered promiscuous mode [ 565.388638][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3887'. [ 565.415300][ T1005] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.430428][ T1005] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.442166][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3887'. [ 565.453147][ T1005] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.465151][ T1005] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.968525][T20949] veth1: left promiscuous mode [ 565.983175][T20949] vlan0: left allmulticast mode [ 565.988725][T20949] veth1: left allmulticast mode [ 566.105822][T17546] bond2: (slave vlan0): link status definitely down, disabling slave [ 566.132029][T20952] netlink: 'syz.6.3895': attribute type 1 has an invalid length. [ 566.144939][T17546] bond2: now running without any active interface! [ 566.258009][T20952] bond1: entered promiscuous mode [ 566.285172][T20959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.292940][T20959] IPv6: NLM_F_CREATE should be set when creating new route [ 566.300233][T20959] IPv6: NLM_F_CREATE should be set when creating new route [ 566.330219][T20952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.339034][T20959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.368028][T20962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3898'. [ 566.388352][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3898'. [ 566.402941][T20959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.433790][T20962] netlink: 'syz.0.3898': attribute type 21 has an invalid length. [ 566.444149][T20959] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 566.482110][T20959] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 566.508314][T20959] bond1: (slave wireguard0): making interface the new active one [ 566.516827][T20959] wireguard0: entered promiscuous mode [ 566.529808][T20959] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 566.572568][T20957] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 566.596407][T20957] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 566.656164][T20961] vlan1: entered promiscuous mode [ 566.722062][T20962] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3898'. [ 567.159045][T20981] xt_hashlimit: max too large, truncated to 1048576 [ 567.198280][T20981] xt_hashlimit: max too large, truncated to 1048576 [ 568.070402][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.260322][T21018] netlink: 'syz.5.3911': attribute type 33 has an invalid length. [ 568.288353][T21018] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3911'. [ 568.307408][T21020] netlink: 'syz.7.3912': attribute type 10 has an invalid length. [ 568.355232][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 568.395067][T21021] netlink: 'syz.7.3912': attribute type 10 has an invalid length. [ 568.424070][T21020] team0: Failed to send options change via netlink (err -105) [ 568.432328][T21020] team0: Port device dummy0 added [ 568.535702][T21021] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 568.585643][T21021] team0: Failed to send options change via netlink (err -105) [ 568.605918][T21021] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 568.643910][T21021] team0: Port device dummy0 removed [ 568.679296][T21021] dummy0: entered promiscuous mode [ 568.698317][T21021] dummy0: entered allmulticast mode [ 568.720984][T21021] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 568.879460][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'. [ 568.916197][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3917'. [ 569.626547][T21069] netlink: 'syz.5.3928': attribute type 2 has an invalid length. [ 569.641452][T21069] : entered promiscuous mode [ 569.664937][T21069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3928'. [ 569.720090][T21074] netlink: 'syz.5.3928': attribute type 1 has an invalid length. [ 569.732916][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3929'. [ 569.937451][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3930'. [ 570.817683][T21106] vlan1: entered promiscuous mode [ 571.100059][T21113] netlink: 'syz.6.3941': attribute type 12 has an invalid length. [ 571.643113][T21132] __nla_validate_parse: 6 callbacks suppressed [ 571.643136][T21132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3944'. [ 571.772088][T21137] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 571.823429][T21132] ip6tnl1: entered allmulticast mode [ 572.236750][T21151] netlink: 'syz.1.3952': attribute type 10 has an invalid length. [ 572.832615][T21176] sctp: [Deprecated]: syz.7.3959 (pid 21176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.832615][T21176] Use struct sctp_sack_info instead [ 572.934711][T21174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3957'. [ 573.027952][T21174] veth3: entered promiscuous mode [ 573.035794][T21185] netlink: 'syz.6.3961': attribute type 3 has an invalid length. [ 573.218749][T21193] nbd: must specify at least one socket [ 573.581209][T21212] openvswitch: netlink: Missing valid actions attribute. [ 573.600659][T21212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.862267][T21226] can: request_module (can-proto-0) failed. [ 573.916523][T21234] sctp: [Deprecated]: syz.0.3970 (pid 21234) Use of int in max_burst socket option. [ 573.916523][T21234] Use struct sctp_assoc_value instead [ 574.133802][T18876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.157899][T18876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.194045][T18876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.221343][T18876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.466682][T21253] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3979'. [ 574.485538][T21244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 574.658933][T21257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3981'. [ 574.746590][T21265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3984'. [ 574.823551][T21269] syzkaller0: entered promiscuous mode [ 574.835926][T21269] syzkaller0: entered allmulticast mode [ 574.939859][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3985'. [ 575.013863][T21277] netlink: 'syz.5.3987': attribute type 1 has an invalid length. [ 575.124837][T21277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.234128][T21277] ipvlan0: entered allmulticast mode [ 575.241732][T21277] bond3: entered allmulticast mode [ 575.310018][T21277] bond3: (slave gretap1): making interface the new active one [ 575.329900][T21277] gretap1: entered allmulticast mode [ 575.340034][T21277] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 575.535846][T21289] syzkaller0: entered promiscuous mode [ 575.548552][T21289] syzkaller0: entered allmulticast mode [ 575.617003][T21289] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3988'. [ 577.596065][T21308] netlink: 'syz.5.3993': attribute type 5 has an invalid length. [ 577.720260][T21308] batman_adv: batadv0: Adding interface: vxlan0 [ 577.727103][T21308] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.753189][T21308] batman_adv: batadv0: Interface activated: vxlan0 [ 578.094786][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3995'. [ 578.105123][T21318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3995'. [ 578.196237][T21318] xt_connbytes: Forcing CT accounting to be enabled [ 578.390821][T21327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4007'. [ 578.415255][T21327] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4007'. [ 579.385660][T21358] syzkaller0: entered promiscuous mode [ 579.391214][T21358] syzkaller0: entered allmulticast mode [ 579.496423][T21358] tipc: Enabled bearer , priority 0 [ 580.305794][T21349] tipc: Resetting bearer [ 580.377518][T21349] tipc: Disabling bearer [ 580.446964][T21382] netlink: 'syz.1.4014': attribute type 4 has an invalid length. [ 580.496836][T21385] netlink: 'syz.1.4014': attribute type 4 has an invalid length. [ 580.825976][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.836218][T21396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4018'. [ 580.864187][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.322111][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.428632][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.475498][ T4041] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.546062][ T4041] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.327012][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4026'. [ 582.907764][T21442] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4031'. [ 585.150427][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 585.168084][T21463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'. [ 585.184074][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 585.216489][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 585.226763][T21463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'. [ 585.237058][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 585.801366][T21479] bond4: entered promiscuous mode [ 585.806808][T21479] bond4: entered allmulticast mode [ 585.823152][T21479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.060128][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4045'. [ 586.158981][T21496] netlink: 'syz.5.4049': attribute type 5 has an invalid length. [ 586.204715][T21495] netlink: 'syz.7.4048': attribute type 1 has an invalid length. [ 586.335095][T21502] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4051'. [ 586.373084][T21492] syzkaller0: entered promiscuous mode [ 586.383432][T21492] syzkaller0: entered allmulticast mode [ 587.003089][T21519] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4057'. [ 587.083709][T21523] syzkaller0: entered promiscuous mode [ 587.095840][T21523] syzkaller0: entered allmulticast mode [ 587.119865][T21524] tipc: Enabled bearer , priority 0 [ 587.134878][T21522] syzkaller0: entered promiscuous mode [ 587.149376][T21522] syzkaller0: entered allmulticast mode [ 587.354163][T21533] openvswitch: netlink: Flow actions attr not present in new flow. [ 587.436910][T21537] sctp: [Deprecated]: syz.1.4062 (pid 21537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.436910][T21537] Use struct sctp_sack_info instead [ 587.588379][T21539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 588.959438][T21528] tipc: Resetting bearer [ 588.978096][T21539] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 589.026354][T21520] tipc: Resetting bearer [ 589.089956][T21520] tipc: Disabling bearer [ 589.383733][T21565] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 589.394072][T21563] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 589.447956][T21563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.991945][T21582] vlan4: entered promiscuous mode [ 590.244844][T21589] __nla_validate_parse: 1 callbacks suppressed [ 590.244862][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4075'. [ 629.540460][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.020282][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 630.729192][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.519739][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.901221][T17858] tipc: Resetting bearer [ 632.531252][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.101099][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 634.628331][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 636.940509][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 637.060042][ T5837] Bluetooth: hci4: command tx timeout [ 637.649859][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 638.540573][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 639.169401][ T5837] Bluetooth: hci4: command tx timeout [ 639.469777][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 640.029126][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 641.278686][ T5150] Bluetooth: hci4: command tx timeout [ 643.381130][ T5837] Bluetooth: hci6: command tx timeout [ 643.401376][ T5837] Bluetooth: hci4: command tx timeout [ 644.090260][T21620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 644.329731][T21620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 644.529364][T21620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 644.840567][T21620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 645.199814][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 645.399613][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 645.510285][ T5835] Bluetooth: hci6: command tx timeout [ 645.629993][T21620] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 646.079799][T21620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 646.349659][T21620] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 646.789018][T21620] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 647.618855][T21623] Bluetooth: hci6: command tx timeout [ 649.670956][T21623] Bluetooth: hci6: command tx timeout [ 650.051289][T21623] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 650.379938][T21623] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 650.480605][T21623] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 651.059898][T21623] Bluetooth: hci8: command tx timeout [ 651.118922][T21623] Bluetooth: hci7: command tx timeout [ 651.368628][ T5150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 651.720526][ T5150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 653.120267][ T5835] Bluetooth: hci8: command tx timeout [ 653.208970][ T5150] Bluetooth: hci7: command tx timeout [ 654.891207][ T5150] Bluetooth: hci9: command tx timeout [ 655.191083][ T5150] Bluetooth: hci8: command tx timeout [ 655.269564][ T5150] Bluetooth: hci7: command tx timeout [ 656.988304][ T5150] Bluetooth: hci9: command tx timeout [ 657.291001][ T5150] Bluetooth: hci8: command tx timeout [ 657.350784][ T5150] Bluetooth: hci7: command tx timeout [ 659.058762][ T5150] Bluetooth: hci9: command tx timeout [ 661.119670][ T5150] Bluetooth: hci9: command tx timeout [ 691.021171][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.420385][T21623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.710421][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.925855][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 702.940235][T21623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.270785][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 703.700765][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.939273][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.328738][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 704.688480][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.009701][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 707.940323][ T5837] Bluetooth: hci1: command tx timeout [ 709.991311][ T5837] Bluetooth: hci1: command tx timeout [ 712.118354][ T5837] Bluetooth: hci1: command tx timeout [ 712.330911][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.569599][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.728370][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.380085][ T5837] Bluetooth: hci3: command tx timeout [ 713.596438][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.100671][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.179297][ T5837] Bluetooth: hci1: command tx timeout [ 715.450563][ T5150] Bluetooth: hci3: command tx timeout [ 716.940842][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 717.050873][ T5835] Bluetooth: hci5: command tx timeout [ 717.229554][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 717.509718][ T5835] Bluetooth: hci3: command tx timeout [ 717.709838][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 718.239191][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 718.589035][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 719.130301][ T5150] Bluetooth: hci5: command tx timeout [ 719.610329][ T5150] Bluetooth: hci3: command tx timeout [ 720.461108][T21623] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 720.740829][T21623] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 720.989159][T21623] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 721.190477][T21623] Bluetooth: hci5: command tx timeout [ 721.904573][T21623] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 722.150505][T21623] Bluetooth: hci10: command tx timeout [ 722.548405][T21623] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 723.268256][ T5150] Bluetooth: hci5: command tx timeout [ 724.251120][T21623] Bluetooth: hci10: command tx timeout [ 725.509763][T21623] Bluetooth: hci11: command tx timeout [ 726.320103][ T5150] Bluetooth: hci10: command tx timeout [ 727.598978][ T5150] Bluetooth: hci11: command tx timeout [ 728.420200][ T5150] Bluetooth: hci10: command tx timeout [ 729.720561][ T5150] Bluetooth: hci11: command tx timeout [ 731.750191][ T5150] Bluetooth: hci11: command tx timeout [ 752.488688][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.699587][T21623] Bluetooth: hci4: command 0x0406 tx timeout [ 761.430947][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 761.659011][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 761.750198][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 762.378930][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 762.800777][T17858] tipc: Disabling bearer [ 762.859903][ T5837] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 763.189620][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 763.290041][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 763.320636][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 764.699815][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 764.811132][ T5837] Bluetooth: hci6: command 0x0406 tx timeout [ 765.071022][T21623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 766.649693][T21623] Bluetooth: hci12: command tx timeout [ 767.339542][ T5150] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 767.859761][ T5150] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 768.011305][ T5150] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 768.650169][ T5150] Bluetooth: hci13: command tx timeout [ 768.709316][ T5150] Bluetooth: hci12: command tx timeout [ 769.001329][ T5150] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 769.300668][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 770.709805][ T5150] Bluetooth: hci13: command tx timeout [ 770.848469][T21623] Bluetooth: hci12: command tx timeout [ 771.586657][T21623] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 771.751020][T21623] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 772.001358][T21623] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 772.388443][T21623] Bluetooth: hci14: command tx timeout [ 772.529581][ T5835] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 772.799414][ T5835] Bluetooth: hci13: command tx timeout [ 772.970603][ T5837] Bluetooth: hci12: command tx timeout [ 773.269563][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 774.418381][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 774.481071][ T5837] Bluetooth: hci14: command tx timeout [ 774.689536][ T5837] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 774.870000][ T5837] Bluetooth: hci13: command tx timeout [ 774.980691][ T5837] Bluetooth: hci7: command 0x0406 tx timeout [ 775.030051][ T5837] Bluetooth: hci8: command 0x0406 tx timeout [ 775.219205][T21620] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 776.640798][T21665] Bluetooth: hci14: command tx timeout [ 776.851172][T21665] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 777.279072][T21665] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 778.709210][ T5150] Bluetooth: hci14: command tx timeout [ 780.089662][T21623] Bluetooth: hci9: command 0x0406 tx timeout [ 780.230119][T21623] Bluetooth: hci15: command tx timeout [ 780.640510][T21623] Bluetooth: hci16: command tx timeout [ 781.460617][ T31] INFO: task syz.5.4065:21548 blocked for more than 144 seconds. [ 781.770821][ T31] Not tainted syzkaller #0 [ 781.950006][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 782.210274][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 782.319783][ T5835] Bluetooth: hci15: command tx timeout [ 782.409586][ T31] task:syz.5.4065 state:D stack:25184 pid:21548 tgid:21546 ppid:17402 task_flags:0x40054c flags:0x00080003 [ 782.711052][ T5835] Bluetooth: hci16: command tx timeout [ 782.790922][ T31] Call Trace: [ 783.020374][ T31] [ 783.470412][ T31] __schedule+0x149b/0x4fd0 [ 783.740082][ T31] ? kernel_text_address+0xa5/0xe0 [ 783.908403][ T31] ? __pfx___schedule+0x10/0x10 [ 784.038324][ T31] ? schedule+0x91/0x360 [ 784.280099][ T31] schedule+0x165/0x360 [ 784.391234][ T5835] Bluetooth: hci15: command tx timeout [ 784.650543][ T31] schedule_preempt_disabled+0x13/0x30 [ 784.851338][ T5835] Bluetooth: hci16: command tx timeout [ 785.168515][ T31] __mutex_lock+0x7e6/0x1350 [ 785.419011][ T31] ? task_work_run+0x1d4/0x260 [ 785.618519][ T31] ? do_exit+0x694/0x22f0 [ 785.810072][ T31] ? __mutex_lock+0x5bb/0x1350 [ 786.169858][ T31] ? raw_release+0x1bc/0xa10 [ 786.429951][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 786.488707][ T5835] Bluetooth: hci15: command tx timeout [ 786.560192][ T31] ? do_raw_spin_lock+0x121/0x290 [ 786.599550][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 786.918654][ T31] raw_release+0x1bc/0xa10 [ 786.969892][ T5835] Bluetooth: hci16: command tx timeout [ 787.058406][ T31] sock_close+0xc3/0x240 [ 787.159407][ T31] ? __pfx_sock_close+0x10/0x10 [ 787.329339][ T31] __fput+0x44c/0xa70 [ 787.457858][ T31] task_work_run+0x1d4/0x260 [ 787.619981][ T31] ? __pfx_task_work_run+0x10/0x10 [ 787.830180][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 788.189628][ T31] do_exit+0x694/0x22f0 [ 788.278235][ T31] ? cgroup1_freezing+0x20/0x350 [ 788.549829][ T31] ? __pfx_do_exit+0x10/0x10 [ 788.761234][ T31] do_group_exit+0x21c/0x2d0 [ 788.931296][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 789.389458][ T31] get_signal+0x1285/0x1340 [ 789.568987][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 789.749880][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 790.220043][ T31] ? vm_mmap_pgoff+0x387/0x4d0 [ 790.578078][ T31] exit_to_user_mode_loop+0x87/0x4e0 [ 790.919906][ T31] ? rcu_is_watching+0x15/0xb0 [ 791.149288][ T31] do_syscall_64+0x2b7/0xf80 [ 791.350428][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f