last executing test programs: 8.412630998s ago: executing program 0 (id=162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8932, &(0x7f00000000c0)={'tunl0\x00', @ifru_hwaddr=@random="00d12d00"}) 7.249338545s ago: executing program 2 (id=166): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xfff1, 0xb}, {0xe, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.758802965s ago: executing program 0 (id=168): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x11a, 0x3d, 0x0, 0x0) 6.075675657s ago: executing program 1 (id=170): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000080)) 6.006149316s ago: executing program 0 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef) 6.005880433s ago: executing program 3 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x9, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x84000002, 0x7, 0x1, 0x80000000, 0x1ff, 0x8, 0x3, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004061}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB], 0x38}}, 0x0) 5.699803384s ago: executing program 4 (id=173): pipe2$9p(0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='.\x02\x00', 0x102) renameat2(0xffffffffffffff9c, 0x0, r3, &(0x7f0000000000)='./file0\x00', 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80104132, &(0x7f0000000440)) sendmmsg(r1, 0x0, 0x0, 0x1c) 5.243043408s ago: executing program 1 (id=174): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="30010000", @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf2515000000050029000000000008002c000000008008000300", @ANYRES32=r3, @ANYBLOB], 0x130}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) 4.730711223s ago: executing program 2 (id=175): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 4.132398684s ago: executing program 1 (id=176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003480)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x4fe, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xfc, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x5, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x9, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x4, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.912931614s ago: executing program 3 (id=177): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$pptp(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 3.90834069s ago: executing program 4 (id=178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/12], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000007b7030000000800008500000086000258bf092000000000003609010020000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.754892095s ago: executing program 0 (id=179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe2", 0x89}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f00000000c0)={'veth1_macvtap\x00', @ifru_data=0x0}) 3.565803164s ago: executing program 2 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000"], 0xfdef) 3.064436711s ago: executing program 3 (id=181): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x11a, 0x3d, 0x0, 0x0) 2.86195552s ago: executing program 4 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x50, 0x0, 0x5, 0x0, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc}, {0xc, 0x90, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008084}, 0x800) 2.685111928s ago: executing program 1 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800020000001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) 2.174842402s ago: executing program 3 (id=184): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000080)) 2.167997961s ago: executing program 2 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.115188602s ago: executing program 4 (id=186): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="30010000", @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf2515000000050029000000000008002c000000008008000300", @ANYRES32=r3, @ANYBLOB], 0x130}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) 2.064269242s ago: executing program 0 (id=187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x9, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x84000002, 0x7, 0x1, 0x80000000, 0x1ff, 0x8, 0x3, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004061}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) 1.834130877s ago: executing program 1 (id=188): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=@bloom_filter={0x1e, 0x3, 0x7, 0x60e, 0x65040, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000008c0)}, 0x201}], 0x1, 0x20, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1d, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30, 0x80}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) 1.551506202s ago: executing program 3 (id=189): bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.121505791s ago: executing program 2 (id=190): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 869.139952ms ago: executing program 4 (id=191): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 659.920157ms ago: executing program 0 (id=192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/12], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000007b7030000000800008500000086000258bf092000000000003609010020000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 461.936072ms ago: executing program 3 (id=193): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f00000001c0)) 375.216597ms ago: executing program 1 (id=194): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) syz_clone(0x11, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6677) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000001700)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "23a3ee", "b4912796cbf1ea477deff95c1f0bd1621ffdb81b44ec884654928ab2da0eee79566a19774b97777f10e48c5622abce5877063cccc4188cdb10a3a63f584f855578fdf787ccd34a8a1535fb20608539bac405d015cc66f4578911cce51999a67aae63e9cbf95ac468220067dae1395654b8e251a6478b54ba11ebd1fc461a22bbec9877c22e394aea5cdc2e0fd8de4e1636296043f95093b6642b6ae2991a7c6bae66e8de12aaf92ebf994bc726cb228fb986b3f88c61afcb3aa5229d4fc458f0723c3dfb4a78c0ffac96076f3e2d60a519ed9b3d13088beff5ca5dd5b54c7ff78848b34a407a7e4e7f10355e958aaa82cbc5554531f4cb9b38ecab7bf889c0b7"}}, 0x110) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb30, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa98, 0x178, 0x178, 0xa98, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1e8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100010001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1346, 0x7fff, 0x0, '\x00', {0x7ff}}}}, {{@uncond, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x7}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x3}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x3}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0xc8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8, 0x2}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0xffffffff, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb90) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3121, 0xeed, 0x1, 0x0, 0x0) 325.522047ms ago: executing program 2 (id=195): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x280) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x9, 0x5, &(0x7f00000000c0)={0x21, "58a24aa4a9d76f125988101e860a4caab36c7fd3a0ae61f834e6dec9618a060c33"}}) 0s ago: executing program 4 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffdf, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x181001, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 190.724073][ T5752] cgroup: Unknown subsys name 'net' [ 190.852354][ T5752] cgroup: Unknown subsys name 'cpuset' [ 190.868136][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.889397][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.808171][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.817968][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.827779][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.848311][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.860402][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.881794][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.899589][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.910571][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.925359][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.943623][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.945637][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.968373][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.977550][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.988613][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.004763][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.016029][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.020285][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.046298][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.052069][ T5072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.094103][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.103864][ T5072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.104432][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.126626][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.135336][ T5072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.148344][ T5072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.890969][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 204.950394][ T5781] Bluetooth: hci0: command tx timeout [ 205.102056][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 205.110527][ T5781] Bluetooth: hci2: command tx timeout [ 205.121772][ T5782] Bluetooth: hci3: command tx timeout [ 205.190900][ T5781] Bluetooth: hci1: command tx timeout [ 205.263053][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 205.270374][ T5781] Bluetooth: hci4: command tx timeout [ 205.301456][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 205.720122][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 206.362854][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.375724][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.385466][ T5770] bridge_slave_0: entered allmulticast mode [ 206.397903][ T5770] bridge_slave_0: entered promiscuous mode [ 206.413643][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.422833][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.432187][ T5776] bridge_slave_0: entered allmulticast mode [ 206.444020][ T5776] bridge_slave_0: entered promiscuous mode [ 206.506277][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.515448][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.525087][ T5770] bridge_slave_1: entered allmulticast mode [ 206.537109][ T5770] bridge_slave_1: entered promiscuous mode [ 206.670296][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.677904][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.689189][ T5776] bridge_slave_1: entered allmulticast mode [ 206.698541][ T5776] bridge_slave_1: entered promiscuous mode [ 206.859106][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.867357][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.875488][ T5775] bridge_slave_0: entered allmulticast mode [ 206.884308][ T5775] bridge_slave_0: entered promiscuous mode [ 206.933773][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.999405][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.007474][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.015338][ T5775] bridge_slave_1: entered allmulticast mode [ 207.024223][ T5775] bridge_slave_1: entered promiscuous mode [ 207.030511][ T5781] Bluetooth: hci0: command tx timeout [ 207.037061][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.046300][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.054056][ T5774] bridge_slave_0: entered allmulticast mode [ 207.063066][ T5774] bridge_slave_0: entered promiscuous mode [ 207.083042][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.103898][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.171565][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.179493][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.187935][ T5774] bridge_slave_1: entered allmulticast mode [ 207.194322][ T5781] Bluetooth: hci2: command tx timeout [ 207.194386][ T5782] Bluetooth: hci3: command tx timeout [ 207.198477][ T5774] bridge_slave_1: entered promiscuous mode [ 207.249537][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.259474][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.267151][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.275100][ T5779] bridge_slave_0: entered allmulticast mode [ 207.280221][ T5781] Bluetooth: hci1: command tx timeout [ 207.285113][ T5779] bridge_slave_0: entered promiscuous mode [ 207.360355][ T5781] Bluetooth: hci4: command tx timeout [ 207.411983][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.419591][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.428267][ T5779] bridge_slave_1: entered allmulticast mode [ 207.437132][ T5779] bridge_slave_1: entered promiscuous mode [ 207.457154][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.476463][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.523365][ T5770] team0: Port device team_slave_0 added [ 207.622859][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.639279][ T5770] team0: Port device team_slave_1 added [ 207.707808][ T5776] team0: Port device team_slave_0 added [ 207.782806][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.829500][ T5776] team0: Port device team_slave_1 added [ 207.872106][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.907181][ T5775] team0: Port device team_slave_0 added [ 207.944932][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.952226][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.978729][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.029578][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.047003][ T5775] team0: Port device team_slave_1 added [ 208.084105][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.091424][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.118953][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.134924][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.142193][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.169029][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.242254][ T5774] team0: Port device team_slave_0 added [ 208.272502][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.279683][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.306250][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.382526][ T5774] team0: Port device team_slave_1 added [ 208.422865][ T5779] team0: Port device team_slave_0 added [ 208.431832][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.438976][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.465546][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.550946][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.558091][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.584344][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.605823][ T5779] team0: Port device team_slave_1 added [ 208.614547][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.621847][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.648498][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.738248][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.745610][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.772185][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.898442][ T5770] hsr_slave_0: entered promiscuous mode [ 208.907398][ T5770] hsr_slave_1: entered promiscuous mode [ 209.004121][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.011390][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.039024][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.057246][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.065689][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.092897][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.110398][ T5781] Bluetooth: hci0: command tx timeout [ 209.129398][ T5776] hsr_slave_0: entered promiscuous mode [ 209.138517][ T5776] hsr_slave_1: entered promiscuous mode [ 209.147221][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 209.153251][ T5776] Cannot create hsr debugfs directory [ 209.270356][ T5781] Bluetooth: hci3: command tx timeout [ 209.297213][ T5781] Bluetooth: hci2: command tx timeout [ 209.301789][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.309495][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.339029][ T5774] hsr_slave_0: entered promiscuous mode [ 209.348030][ T5774] hsr_slave_1: entered promiscuous mode [ 209.354317][ T5781] Bluetooth: hci1: command tx timeout [ 209.359483][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 209.366760][ T5774] Cannot create hsr debugfs directory [ 209.437393][ T5775] hsr_slave_0: entered promiscuous mode [ 209.443426][ T5781] Bluetooth: hci4: command tx timeout [ 209.448997][ T5775] hsr_slave_1: entered promiscuous mode [ 209.457831][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 209.463924][ T5775] Cannot create hsr debugfs directory [ 209.876564][ T5779] hsr_slave_0: entered promiscuous mode [ 209.885990][ T5779] hsr_slave_1: entered promiscuous mode [ 209.894543][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 209.900518][ T5779] Cannot create hsr debugfs directory [ 211.120487][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.151963][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.177830][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.191012][ T5781] Bluetooth: hci0: command tx timeout [ 211.215455][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.351140][ T5776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.355508][ T5782] Bluetooth: hci3: command tx timeout [ 211.363879][ T5781] Bluetooth: hci2: command tx timeout [ 211.387878][ T5776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.414420][ T5776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.433301][ T5781] Bluetooth: hci1: command tx timeout [ 211.476676][ T5776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.510435][ T5781] Bluetooth: hci4: command tx timeout [ 211.693827][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.726473][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.747273][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.811849][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.114818][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.153494][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.189765][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.264668][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.615319][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.643563][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.703065][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.718255][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.746054][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.015588][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.044618][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.124729][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.132159][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.178851][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.186329][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.336315][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.447569][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.455190][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.597200][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.614118][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.621732][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.918141][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.056307][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.064106][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.097906][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.157913][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.165730][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.467906][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.488644][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.657828][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.665652][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.708166][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.716125][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.927908][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.137152][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.144855][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.258334][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.266019][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.347299][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.759515][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.936696][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.483964][ T5770] veth0_vlan: entered promiscuous mode [ 216.735037][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.759099][ T5770] veth1_vlan: entered promiscuous mode [ 217.196925][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.338458][ T5770] veth0_macvtap: entered promiscuous mode [ 217.495453][ T5770] veth1_macvtap: entered promiscuous mode [ 217.577298][ T5774] veth0_vlan: entered promiscuous mode [ 217.689835][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.727828][ T5774] veth1_vlan: entered promiscuous mode [ 217.768196][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.824655][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.941663][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.950941][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.959840][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.016064][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.202787][ T5775] veth0_vlan: entered promiscuous mode [ 218.378829][ T5775] veth1_vlan: entered promiscuous mode [ 218.498761][ T5774] veth0_macvtap: entered promiscuous mode [ 218.528673][ T5776] veth0_vlan: entered promiscuous mode [ 218.610146][ T5774] veth1_macvtap: entered promiscuous mode [ 218.669004][ T5779] veth0_vlan: entered promiscuous mode [ 218.777207][ T5776] veth1_vlan: entered promiscuous mode [ 218.849394][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.863590][ T5779] veth1_vlan: entered promiscuous mode [ 218.984394][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.052977][ T5775] veth0_macvtap: entered promiscuous mode [ 219.128416][ T5775] veth1_macvtap: entered promiscuous mode [ 219.151948][ T2952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.165941][ T2952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.254558][ T2952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.267778][ T2952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.462888][ T5776] veth0_macvtap: entered promiscuous mode [ 219.494985][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.578522][ T5776] veth1_macvtap: entered promiscuous mode [ 219.606018][ T5779] veth0_macvtap: entered promiscuous mode [ 219.688815][ T5779] veth1_macvtap: entered promiscuous mode [ 219.717248][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.814082][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.844164][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.890163][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.986985][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.105912][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.238311][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.302965][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.426426][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.447305][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.499798][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.528304][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.570453][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.657114][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.766696][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.782085][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.829076][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.547042][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.600225][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.914473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.963192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.505781][ T5770] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.748943][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.764261][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.325041][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.378492][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.793423][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.811395][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.228300][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.260533][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.749443][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.773681][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.828933][ T5967] Zero length message leads to an empty skb [ 229.005566][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.050216][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.236311][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.260262][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.557916][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.616174][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.115958][ T5985] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 231.116637][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'. [ 231.487315][ T5984] syzkaller0: entered promiscuous mode [ 231.520658][ T5984] syzkaller0: entered allmulticast mode [ 235.623009][ T6025] syzkaller0: entered promiscuous mode [ 235.638165][ T6025] syzkaller0: entered allmulticast mode [ 241.944948][ T6091] tipc: Started in network mode [ 241.991108][ T6091] tipc: Node identity fae612e79f3c, cluster identity 4711 [ 242.022772][ T6091] tipc: Enabled bearer , priority 0 [ 242.051046][ T6094] syzkaller0: entered promiscuous mode [ 242.125383][ T6094] syzkaller0: entered allmulticast mode [ 242.236100][ T6091] tipc: Resetting bearer [ 242.314190][ T6090] tipc: Resetting bearer [ 242.438328][ T6090] tipc: Disabling bearer [ 244.445981][ T6116] ======================================================= [ 244.445981][ T6116] WARNING: The mand mount option has been deprecated and [ 244.445981][ T6116] and is ignored by this kernel. Remove the mand [ 244.445981][ T6116] option from the mount to silence this warning. [ 244.445981][ T6116] ======================================================= [ 245.281266][ T6116] overlayfs: missing 'lowerdir' [ 250.350333][ T6170] overlayfs: missing 'lowerdir' [ 252.314373][ T6180] syzkaller0: entered promiscuous mode [ 252.356752][ T6180] syzkaller0: entered allmulticast mode [ 252.617476][ T6180] tipc: Started in network mode [ 252.690717][ T6180] tipc: Node identity 2af4fda91ab8, cluster identity 4711 [ 252.698949][ T6180] tipc: Enabled bearer , priority 0 [ 252.851056][ T6179] tipc: Resetting bearer [ 252.988775][ T6179] tipc: Disabling bearer [ 255.583641][ T6218] overlayfs: missing 'lowerdir' [ 258.691350][ T6237] syzkaller0: entered promiscuous mode [ 258.697570][ T6237] syzkaller0: entered allmulticast mode [ 261.964194][ T6280] overlayfs: missing 'lowerdir' [ 266.683853][ T6293] syzkaller0: entered promiscuous mode [ 266.689604][ T6293] syzkaller0: entered allmulticast mode [ 268.589790][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 269.338587][ T6336] overlayfs: missing 'lowerdir' [ 270.773484][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.791139][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.035880][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 272.821553][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.155'. [ 272.995388][ T6383] syzkaller0: entered promiscuous mode [ 273.059015][ T6383] syzkaller0: entered allmulticast mode [ 273.547737][ T6388] overlayfs: missing 'lowerdir' [ 274.377457][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 274.460880][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'. [ 274.502645][ T6394] syzkaller0: entered promiscuous mode [ 274.522007][ T6394] syzkaller0: entered allmulticast mode [ 274.647268][ T6393] syz_tun: entered promiscuous mode [ 274.695200][ T6393] gretap0: entered promiscuous mode [ 276.324446][ T6412] tipc: Started in network mode [ 276.335978][ T6414] Bluetooth: MGMT ver 1.23 [ 276.350614][ T6412] tipc: Node identity 46e5c0b1c313, cluster identity 4711 [ 276.411784][ T6412] tipc: Enabled bearer , priority 0 [ 276.457441][ T6417] syzkaller0: entered promiscuous mode [ 276.530914][ T6417] syzkaller0: entered allmulticast mode [ 276.628435][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 276.753668][ T6412] tipc: Resetting bearer [ 276.841645][ T6411] tipc: Resetting bearer [ 276.957821][ T6411] tipc: Disabling bearer [ 277.227692][ T6427] syzkaller0: entered promiscuous mode [ 277.260825][ T6427] syzkaller0: entered allmulticast mode [ 277.824876][ T6435] overlayfs: missing 'lowerdir' [ 278.437612][ T6439] netlink: 260 bytes leftover after parsing attributes in process `syz.1.174'. [ 279.271908][ T6443] syzkaller0: entered promiscuous mode [ 279.320771][ T6443] syzkaller0: entered allmulticast mode [ 280.490969][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 281.236639][ T6469] syzkaller0: entered promiscuous mode [ 281.261960][ T6471] netlink: 260 bytes leftover after parsing attributes in process `syz.4.186'. [ 281.276068][ T6469] syzkaller0: entered allmulticast mode [ 282.750180][ T6484] sctp: [Deprecated]: syz.3.193 (pid 6484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.750180][ T6484] Use struct sctp_sack_info instead [ 282.805804][ T6485] ===================================================== [ 282.813270][ T6485] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 282.820798][ T6485] eth_type_trans+0x6a2/0x9b0 [ 282.825719][ T6485] __dev_forward_skb2+0x4b1/0x940 [ 282.831102][ T6485] dev_forward_skb_nomtu+0x3b/0xe0 [ 282.836412][ T6485] __bpf_redirect+0x14d7/0x1760 [ 282.841645][ T6485] bpf_clone_redirect+0x4a6/0x6c0 [ 282.846889][ T6485] ___bpf_prog_run+0x13e8/0xea90 [ 282.851428][ T6487] i2c i2c-0: Invalid block write size 33 [ 282.852202][ T6485] __bpf_prog_run512+0xc5/0x100 [ 282.862955][ T6485] bpf_test_run+0x493/0xdf0 [ 282.867693][ T6485] bpf_prog_test_run_skb+0x22a5/0x3050 [ 282.873541][ T6485] bpf_prog_test_run+0x5bb/0x9f0 [ 282.878688][ T6485] __sys_bpf+0x925/0xee0 [ 282.883282][ T6485] __ia32_sys_bpf+0xa4/0xf0 [ 282.887972][ T6485] ia32_sys_call+0x33e7/0x4360 [ 282.893052][ T6485] __do_fast_syscall_32+0x17f/0x3f0 [ 282.898501][ T6485] do_fast_syscall_32+0x37/0x80 [ 282.903777][ T6485] do_SYSENTER_32+0x1f/0x30 [ 282.908539][ T6485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.915257][ T6485] [ 282.917684][ T6485] Uninit was created at: [ 282.922363][ T6485] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 282.928550][ T6485] pskb_expand_head+0x2ef/0x1e00 [ 282.933870][ T6485] skb_ensure_writable+0x44e/0x510 [ 282.939179][ T6485] bpf_clone_redirect+0x301/0x6c0 [ 282.944666][ T6485] ___bpf_prog_run+0x13e8/0xea90 [ 282.949811][ T6485] __bpf_prog_run512+0xc5/0x100 [ 282.954996][ T6485] bpf_test_run+0x493/0xdf0 [ 282.959731][ T6485] bpf_prog_test_run_skb+0x22a5/0x3050 [ 282.965576][ T6485] bpf_prog_test_run+0x5bb/0x9f0 [ 282.970896][ T6485] __sys_bpf+0x925/0xee0 [ 282.975326][ T6485] __ia32_sys_bpf+0xa4/0xf0 [ 282.980161][ T6485] ia32_sys_call+0x33e7/0x4360 [ 282.985104][ T6485] __do_fast_syscall_32+0x17f/0x3f0 [ 282.990722][ T6485] do_fast_syscall_32+0x37/0x80 [ 282.995823][ T6485] do_SYSENTER_32+0x1f/0x30 [ 283.000712][ T6485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.007279][ T6485] [ 283.009716][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.1.194 Not tainted syzkaller #0 PREEMPT(full) [ 283.019297][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.029671][ T6485] ===================================================== [ 283.036884][ T6485] Disabling lock debugging due to kernel taint [ 283.043330][ T6485] Kernel panic - not syncing: kmsan.panic set ... [ 283.049921][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.1.194 Tainted: G B syzkaller #0 PREEMPT(full) [ 283.060925][ T6485] Tainted: [B]=BAD_PAGE [ 283.065297][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.075522][ T6485] Call Trace: [ 283.078915][ T6485] [ 283.081954][ T6485] __dump_stack+0x26/0x30 [ 283.086506][ T6485] dump_stack_lvl+0x50/0x1c0 [ 283.091295][ T6485] ? dump_stack+0x12/0x25 [ 283.095837][ T6485] dump_stack+0x1e/0x25 [ 283.100231][ T6485] vpanic+0x7b4/0x1430 [ 283.104554][ T6485] panic+0x15d/0x160 [ 283.108713][ T6485] kmsan_report+0x31a/0x320 [ 283.113466][ T6485] ? __bpf_prog_run512+0xc5/0x100 [ 283.118685][ T6485] ? __msan_warning+0x1b/0x30 [ 283.123578][ T6485] ? eth_type_trans+0x6a2/0x9b0 [ 283.128658][ T6485] ? __dev_forward_skb2+0x4b1/0x940 [ 283.134062][ T6485] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 283.139549][ T6485] ? __bpf_redirect+0x14d7/0x1760 [ 283.144799][ T6485] ? bpf_clone_redirect+0x4a6/0x6c0 [ 283.150219][ T6485] ? ___bpf_prog_run+0x13e8/0xea90 [ 283.155534][ T6485] ? __bpf_prog_run512+0xc5/0x100 [ 283.160764][ T6485] ? bpf_test_run+0x493/0xdf0 [ 283.165651][ T6485] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 283.171496][ T6485] ? bpf_prog_test_run+0x5bb/0x9f0 [ 283.176807][ T6485] ? __sys_bpf+0x925/0xee0 [ 283.181398][ T6485] ? __ia32_sys_bpf+0xa4/0xf0 [ 283.186245][ T6485] ? ia32_sys_call+0x33e7/0x4360 [ 283.191352][ T6485] ? __do_fast_syscall_32+0x17f/0x3f0 [ 283.196959][ T6485] ? do_fast_syscall_32+0x37/0x80 [ 283.202229][ T6485] ? do_SYSENTER_32+0x1f/0x30 [ 283.207134][ T6485] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.213871][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.219163][ T6485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.225170][ T6485] ? should_fail_ex+0x45/0x8c0 [ 283.230159][ T6485] ? stack_depot_save_flags+0x35/0x790 [ 283.235843][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.241131][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.246433][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.251725][ T6485] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.258565][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.263861][ T6485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.269856][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.275158][ T6485] __msan_warning+0x1b/0x30 [ 283.279890][ T6485] eth_type_trans+0x6a2/0x9b0 [ 283.284825][ T6485] __dev_forward_skb2+0x4b1/0x940 [ 283.290050][ T6485] dev_forward_skb_nomtu+0x3b/0xe0 [ 283.295373][ T6485] __bpf_redirect+0x14d7/0x1760 [ 283.300459][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.305770][ T6485] bpf_clone_redirect+0x4a6/0x6c0 [ 283.311047][ T6485] ___bpf_prog_run+0x13e8/0xea90 [ 283.316264][ T6485] __bpf_prog_run512+0xc5/0x100 [ 283.321343][ T6485] ? kmsan_internal_poison_memory+0x78/0x90 [ 283.327470][ T6485] ? kmsan_internal_poison_memory+0x4a/0x90 [ 283.333587][ T6485] ? kmsan_slab_alloc+0xdc/0x160 [ 283.338755][ T6485] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 283.344669][ T6485] ? slab_build_skb+0x5c/0x5b0 [ 283.349628][ T6485] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 283.355404][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.360706][ T6485] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.367284][ T6485] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 283.373598][ T6485] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 283.379615][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.384901][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.390187][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.395485][ T6485] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 283.402050][ T6485] ? kmsan_get_metadata+0x146/0x160 [ 283.407437][ T6485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.413427][ T6485] ? __pfx___bpf_prog_run512+0x10/0x10 [ 283.419108][ T6485] ? __pfx___bpf_prog_run512+0x10/0x10 [ 283.424874][ T6485] bpf_test_run+0x493/0xdf0 [ 283.429599][ T6485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.435794][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.441129][ T6485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.447178][ T6485] ? bpf_test_run+0x2f4/0xdf0 [ 283.452111][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.457437][ T6485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.463483][ T6485] bpf_prog_test_run_skb+0x22a5/0x3050 [ 283.469182][ T6485] ? kmsan_get_metadata+0xf1/0x160 [ 283.474571][ T6485] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 283.480614][ T6485] bpf_prog_test_run+0x5bb/0x9f0 [ 283.485817][ T6485] __sys_bpf+0x925/0xee0 [ 283.490326][ T6485] __ia32_sys_bpf+0xa4/0xf0 [ 283.495063][ T6485] ia32_sys_call+0x33e7/0x4360 [ 283.500032][ T6485] __do_fast_syscall_32+0x17f/0x3f0 [ 283.505511][ T6485] do_fast_syscall_32+0x37/0x80 [ 283.510610][ T6485] do_SYSENTER_32+0x1f/0x30 [ 283.515350][ T6485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.521913][ T6485] RIP: 0023:0xf7fc7f6c [ 283.526113][ T6485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 283.545915][ T6485] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 283.554517][ T6485] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 283.562641][ T6485] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.570812][ T6485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.578927][ T6485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.587187][ T6485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.595423][ T6485] [ 283.598721][ T6485] Kernel Offset: disabled [ 283.603721][ T6485] Rebooting in 86400 seconds..