last executing test programs: 5.469741546s ago: executing program 4 (id=1330): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x9, 0x6, {{0xc, 0x4, 0x2, 0x13, 0x30, 0x66, 0x0, 0xfa, 0x3d, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x88, 0x9, "e5129db99ded89"}, @end, @cipso={0x86, 0x6, 0x2}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x2}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/172, 0xac, 0x0, &(0x7f00000008c0)=""/29, 0x1d}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1c, 0x6, 0x4e, 0x4, 0x280, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0xfffffff7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x8, 0x68, &(0x7f00000005c0)=""/104, 0x40f00, 0x10, '\x00', r1, @fallback=0x31, r2, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xc, 0x213ee672, 0x200}, 0x10, r3, r4, 0x0, &(0x7f0000000a40)=[r5, 0x1, 0x1, 0x1, r6, r7], 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) preadv(r13, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x8) r14 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000000), 0xffffff6a) sendfile(r14, r15, 0x0, 0xffffffff000) getpeername(r14, 0x0, 0x0) 4.637662886s ago: executing program 4 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x73, &(0x7f0000000000)=0xf) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) 3.242802887s ago: executing program 0 (id=1349): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.043974006s ago: executing program 3 (id=1354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x20000400) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt(r4, 0x11c, 0x1f, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1000}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) (async) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) (async) r16 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r16, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r16, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 3.024786365s ago: executing program 0 (id=1355): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000000c0)={'nicvf0\x00', 0x6}) unshare(0x4020800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0004000000028008001c00", @ANYRES32=r3], 0x3c}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x4f, &(0x7f0000000140)}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x20000000000002cb, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff000000140002007767320000"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4ced2a36f1000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r5], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 2.661310457s ago: executing program 3 (id=1359): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, 0x0, 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.639167771s ago: executing program 0 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tcp_retransmit_synack\x00'}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYRES8=r4, @ANYRES8, @ANYBLOB="2f29761e598c9d000000000000000024000e00e57f008000000000010400c889bacbea72fec91772544972754d14dfc204ecb2f5cf61f48fba18491e8b", @ANYRESHEX=r1, @ANYRES32, @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x20004805}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0xc3725000) r8 = socket(0x1e, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="190828bd7000fddbdf251800000010bdaec4a2f56fcc62010000000042ab"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmmsg$unix(r11, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="525eb52724d8e9afa919cf57a0c0ad528511e9a3f2931ebb1e5b98c34d33a53a1a354652e2ac56f3e506ad9c6479a98cbc3101cbeafde77b3335bcc7248a2a3ac2c33f0fba1e37d334497ba513fdb799f824962cec57be790f4ab10c2180d4ecb29bb247aa7ae26be5949d696940e698e817cdbb3fbbe888a567ad0b089b410581e70d747472d45c9bde999dbaa1b05d483eb37c1775fe"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x200408d8) 2.455509882s ago: executing program 3 (id=1362): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="44cfdc95227ac56466eb3ca98af9582db819df6aaf35ffc9694e5c045a5278db84571324b35f42dfc8387058dc497eb8b6a995151491ed2526994a66c11f644dc7", @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800b000100697036746e6c00004400028008000800290000000400130005000900040000000600100007000000080007000400000014000300ff010000000000000000000000000001060011004e210000"], 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4407) 2.329419343s ago: executing program 3 (id=1364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fbffffff00000000030000001801000020200c0000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x80, 0x7, 0x8000}, {{0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.146482743s ago: executing program 4 (id=1366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfd}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 2.055220857s ago: executing program 2 (id=1368): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1.865813023s ago: executing program 0 (id=1370): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x9, 0x6, {{0xc, 0x4, 0x2, 0x13, 0x30, 0x66, 0x0, 0xfa, 0x3d, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x88, 0x9, "e5129db99ded89"}, @end, @cipso={0x86, 0x6, 0x2}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x2}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/172, 0xac, 0x0, &(0x7f00000008c0)=""/29, 0x1d}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1c, 0x6, 0x4e, 0x4, 0x280, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0xfffffff7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x8, 0x68, &(0x7f00000005c0)=""/104, 0x40f00, 0x10, '\x00', r1, @fallback=0x31, r2, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xc, 0x213ee672, 0x200}, 0x10, r3, r4, 0x0, &(0x7f0000000a40)=[r5, 0x1, 0x1, 0x1, r6, r7], 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r13 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r13, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000000), 0xffffff6a) sendfile(r13, r14, 0x0, 0xffffffff000) getpeername(r13, 0x0, 0x0) 1.86149904s ago: executing program 2 (id=1371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x3f, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r7, @empty, @broadcast}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) syz_init_net_socket$ax25(0x3, 0x2, 0xca) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x5, 0x1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44840) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x0, 0x4, 0x88}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 1.528268282s ago: executing program 1 (id=1372): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000daf000/0x3000)=nil, 0x3000, 0x3000007, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket(0x27, 0x9, 0x9) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1412, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.295794134s ago: executing program 1 (id=1373): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x9, @void}, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x8, '\x00', r2, r1, 0x1, 0x9, 0x5}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x89, &(0x7f0000000780)=""/137, 0x41000, 0x1, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000840)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, 0xffffffffffffffff, r1, r1], &(0x7f00000008c0), 0x10, 0x6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x12, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3706}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @generic={0x21, 0xe, 0xa, 0xff, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x77, &(0x7f0000000540)=""/119, 0x41100, 0x28, '\x00', r2, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x1, 0x504}, 0x10, 0x2a3d1, r5, 0x1, 0x0, &(0x7f0000000a00)=[{0x4, 0x5, 0x10, 0xa}], 0x10, 0xa63}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @multicast2}, 0x2}}, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f0000000180)=0x9, 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x4) 1.232391211s ago: executing program 2 (id=1374): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x9, 0x1, 0x0, 0xa, 0x1, 0x8}, &(0x7f00000000c0)=0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x2a, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000f40), 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180073f1f9204b000000000000000000000000000071180d0ca96c064b51e1cd7200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.213056075s ago: executing program 1 (id=1375): r0 = socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x2000c081) poll(0x0, 0x0, 0x9) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xffffffffffffff56, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1.133928638s ago: executing program 4 (id=1376): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xc, 0xffff}, {0x1, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) socket$kcm(0x11, 0x3, 0x0) r3 = epoll_create(0x2040) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x100, &(0x7f0000000180), 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendto$llc(r4, &(0x7f00000002c0)="b2b5d158fcae714e611a6e4699bca320845d670d258fe073d3dfc67ab1", 0x1d, 0x4000, &(0x7f0000000340)={0x1a, 0x10e, 0x2, 0x7, 0x74, 0x10, @random="3ea1c3535c40"}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') unshare(0x6e050000) r5 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r6 = socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x3, 0x1, 0x0, 0xa0000000, 0xfffffffa, 0x10}, 0x1c) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 1.131095487s ago: executing program 0 (id=1377): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) 1.058054385s ago: executing program 3 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000325ffe8ae9e8ca1969583a6d68b680ab57a292ac2da2c93ca5740e98bd0891863c488e78bca9f51cd2faaed9143e001bd3a0f2593ba59fea671cfd2acee08bea88a831178a75a81d94c0d8a82bd8b57bb73b711cfb53c24481cafb7ddfc5e6f4da8630ae26844e7a0649936d070de3db866b32ea28def1edb759d06daa0f10d36628d328af2361f2c74711b4b7b75dd7f88e1027856b08744afcee029b8ca3d2a849850a6585623048b3c22a8dfd2a2085c11df00ba2ae0d2c430794291639a4ec8b298051b0936b519773f151f3"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000500)=0x17, 0x4) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.015439292s ago: executing program 4 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f00000003c0)=0x4, 0x4) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) 901.683682ms ago: executing program 2 (id=1380): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x32, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) 899.691218ms ago: executing program 1 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r5, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/19, 0x13}, 0x5}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) r6 = socket(0x2, 0x80000, 0x7) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x138, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x124, 0x1, [@m_ct={0x120, 0xb, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "c1f59b5379a00e5bcc7d846b456cadc8"}, @TCA_CT_PARMS={0x18, 0x1, {0x8, 0x7, 0x0, 0x401, 0xfffffffa}}, @TCA_CT_ZONE={0x6, 0x4, 0xfead}, @TCA_CT_LABELS={0x14, 0x7, "2f19e75f47428a564eae14f5cfd25931"}]}, {0xae, 0x6, "8f5b4de4ce93cc5c4fdd5ca7cf96b7aff471ef27f000625b3291fd0215433612cdf4755e1f4ded9de398cf885074bafbadeb58ba441b4d20692448d18e878eaa7f94266fdeb5a311c148fe1c3ce7460785db1d677056e4a840050ac60379d79d42b902f2dda2f1a97e62292539a692e5fbb589b0ba15218401e3937df552e66e88035d268a4cfb908e27ab379c6a331a0422cb8c2b6e6abdc59b23452b439d7385adc8b3e168ca5344f6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x138}}, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, {0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0xffffffffffffffff, {[0x5, 0xfd2, 0xf991, 0xb19e, 0x8000, 0x0, 0x7, 0xb1]}}, 0x5c) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x9}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000001480)={@ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff, 0x0, 0x3, 0x4, 0xb, 0x8}, 0x20) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000240)={r10}, &(0x7f0000000000)=0x8) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x120}}, 0x0) 846.819636ms ago: executing program 0 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24048025}, 0x8040) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x6, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x0, 0xfff, 0x3, 0xfffffffd, 0x6, 0x9, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x1000008, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0xf, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0x7f, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x46d, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0xfbf, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x0, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa256, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffd, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x8000000, 0x5, 0x7fff, 0x7, 0x3, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x9, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 745.459555ms ago: executing program 2 (id=1383): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x11, "0ee08d545ccd2d3e8d3e92f24e48234301"}, &(0x7f0000000040)=0x19) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000081}, 0x24000000) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000280)={0x7a, "acb9b14e98d80932f09fdbc1bcec2068421f9bf975e322f905b9324faecb37b5c4f4540c0b3711982dbbbe29259390649ad6aeb9025610d38b0cc75da743530c182bb2a2ce85432c070a7703c8404737beecc6f456f95d072e7c17d76a040a426df6bf91509639a30a575ee57c3ff49508023e8d17082dd02ac1ff0cdb19af61"}) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000340)=@full={0xb, @dev, @default, 0x0, [@remote, @null, @null, @rose, @bcast, @netrom]}, &(0x7f0000000380)=0x40, 0x800) ioctl$SIOCRSACCEPT(r6, 0x89e3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r9, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800) accept4$bt_l2cap(r10, 0x0, &(0x7f0000000600), 0x80800) syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000680)={r2, 0x3, 0x10}, &(0x7f00000006c0)=0xc) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000700)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 'nicvf0\x00'}}, 0x1e) recvfrom(r0, &(0x7f0000000740)=""/155, 0x9b, 0x100, &(0x7f0000000800)=@pptp={0x18, 0x2, {0x3, @private=0xa010102}}, 0x80) socketpair(0x2a, 0x80000, 0x6, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r12) ioctl$sock_inet6_SIOCDIFADDR(r12, 0x8936, &(0x7f0000000900)={@remote, 0x23}) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) shutdown(r12, 0x1) bind$xdp(r12, &(0x7f0000000a40)={0x2c, 0x13, r7, 0xd, r13}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r14, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x9f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$inet(r12, &(0x7f0000002f40)={&(0x7f0000000b80)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000000bc0)="90e420a8f911b41f5893aec05e743827d1dae28a60be0be540af0e292479d383ff5bcd383cc9b78168c6b0b8e4eaffcd8f0ffdcc382e8f52e9af661000a558ed7dcf81e257c2424fd3ef0de3187e23e5926c7862a5dd4c18d4f1e2801ce3cd82f1f806dbc94574e5c6cacc2cf75281f09c3b477dee97ae719cfb52bc77b09097dc33508bbf8730b78522", 0x8a}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="89032ea00bb632a052708e73e5cb469f3eddcdd0c246953f24445723fbacc0c8929a59fa00d97cce059b7d2e2ee6f8edb79a2225d62921e6ba17131daed44963bedde75daad6084384a4883e1abd0f979912dac553e3e471e7809043e7460955e1e6410ba720", 0x66}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000002d00)="7b22298c5b8263792ba2de3a0b06e5519d626b7a3d41363692be5e972d05050aa2615797f74d", 0x26}, {&(0x7f0000002d40)="638e5e9de0813065d4869aa2752d01dcb2ce3ff81140e289d3d348b7c5f2fdfd670fefdcbf79475095dc96145b1cc7039feb50b9d2d8995e1d51b4927ce972d8751f1ed3ada6682197963c25d4066da7661c3dada970574c39a8a25c27756becb1082cb386c713cb4b78373d9909cdb9b556602f635d961d080cb022fb4e19b0c7b26616bcf040ded5fcdd60820c6311c9813c68a4c62e29e366190b9b8c99a2e9d1ba222b640baacdc965226da9", 0xae}, {&(0x7f0000002e00)="be220a72a44b5d96b5ea86cc745c81bff2f8f341b53be5ee576da100177e96f216734a7d1163a051655764e7be98c16dc1", 0x31}], 0x7, &(0x7f0000002ec0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x48}, 0x4040880) 675.86837ms ago: executing program 3 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map=r2, r4, 0x5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="a192157fa5a63a90674b96a24be5ff4828bb1a057a5a24159fd4d0e1021d53b63f15ca58a0b610810865e85334c81bb147d1a2b803915b5f39ec1f131d8eff84d4040457c805a2fe1ffd073ccdbd008cdc3747a0fc05f3f2ed15a1b715d0165e91ccd4c5edb756792114d1797457004cd1e48f4c732c5f16f88f87df95b8226233a861967adc4e0d78bc005eebfd23ff75def87b3657da175587d4921cbe118ad2898341bc17", 0xa6}], 0x1}, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6, 0x2}, 0xffa6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x60, "a1ae0ced36c466cfacb008c88386af0b145260c21cd9c7fa42a1d05a882b9cf4ad5547cb4f84e253689b364e9820d2a3f7ee0fe21bdebf5283c07ef87648b9aa9e03d49bff87527d5860e106522ef0aae4cb670f2433664ddd33047b5dfd4635"}, &(0x7f00000002c0)=0x68) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x48, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) sendfile(r8, r7, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) 671.15435ms ago: executing program 1 (id=1385): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000090000e11c52e9391c4b9e009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x2, 0x4, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(r1) close(0x4) 149.946464ms ago: executing program 32 (id=1384): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@map=r2, r4, 0x5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="a192157fa5a63a90674b96a24be5ff4828bb1a057a5a24159fd4d0e1021d53b63f15ca58a0b610810865e85334c81bb147d1a2b803915b5f39ec1f131d8eff84d4040457c805a2fe1ffd073ccdbd008cdc3747a0fc05f3f2ed15a1b715d0165e91ccd4c5edb756792114d1797457004cd1e48f4c732c5f16f88f87df95b8226233a861967adc4e0d78bc005eebfd23ff75def87b3657da175587d4921cbe118ad2898341bc17", 0xa6}], 0x1}, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6, 0x2}, 0xffa6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x60, "a1ae0ced36c466cfacb008c88386af0b145260c21cd9c7fa42a1d05a882b9cf4ad5547cb4f84e253689b364e9820d2a3f7ee0fe21bdebf5283c07ef87648b9aa9e03d49bff87527d5860e106522ef0aae4cb670f2433664ddd33047b5dfd4635"}, &(0x7f00000002c0)=0x68) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x48, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) sendfile(r8, r7, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) 142.417997ms ago: executing program 1 (id=1387): socket(0x2a, 0x80000, 0x9f6) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0xffffffffffffff2b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000aed"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) 133.533125ms ago: executing program 2 (id=1388): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7, 0x40, 0x9, 0x6, {{0xc, 0x4, 0x2, 0x13, 0x30, 0x66, 0x0, 0xfa, 0x3d, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x88, 0x9, "e5129db99ded89"}, @end, @cipso={0x86, 0x6, 0x2}, @timestamp_addr={0x44, 0xc, 0x11, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x2}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/172, 0xac, 0x0, &(0x7f00000008c0)=""/29, 0x1d}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1c, 0x6, 0x4e, 0x4, 0x280, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0xfffffff7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1e, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x8, 0x68, &(0x7f00000005c0)=""/104, 0x40f00, 0x10, '\x00', r1, @fallback=0x31, r2, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xc, 0x213ee672, 0x200}, 0x10, r3, r4, 0x0, &(0x7f0000000a40)=[r5, 0x1, 0x1, 0x1, r6, r7], 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x8) r12 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r12, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) sendfile(r12, r13, 0x0, 0xffffffff000) getpeername(r12, 0x0, 0x0) 131.887217ms ago: executing program 4 (id=1389): getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0xffffffff, 0x2, 0x2, [0x7fffffffffffffff, 0x1]}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000840), &(0x7f0000000880)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x360, 0x7, 0x7f}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, 0x0, &(0x7f0000000000)=@udp=r8}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r10, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r1, &(0x7f0000000480)="b663", 0x2, 0x24004001, &(0x7f0000000280)={0xa, 0x0, 0xe8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) accept4$ax25(r0, &(0x7f0000000140)={{0x3, @netrom}, [@null, @remote, @remote, @rose, @remote, @remote, @remote, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r11, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x20) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 0s ago: executing program 33 (id=1389): getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0xffffffff, 0x2, 0x2, [0x7fffffffffffffff, 0x1]}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000840), &(0x7f0000000880)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x360, 0x7, 0x7f}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, 0x0, &(0x7f0000000000)=@udp=r8}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r10, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r1, &(0x7f0000000480)="b663", 0x2, 0x24004001, &(0x7f0000000280)={0xa, 0x0, 0xe8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) accept4$ax25(r0, &(0x7f0000000140)={{0x3, @netrom}, [@null, @remote, @remote, @rose, @remote, @remote, @remote, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r11, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x20) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): p link [ 79.590731][ T5823] Bluetooth: hci0: command tx timeout [ 79.616532][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.646100][ T5831] team0: Port device team_slave_0 added [ 79.654247][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.688908][ T5831] team0: Port device team_slave_1 added [ 79.696495][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.723425][ T5830] team0: Port device team_slave_0 added [ 79.749521][ T5828] team0: Port device team_slave_0 added [ 79.762424][ T5830] team0: Port device team_slave_1 added [ 79.788767][ T5828] team0: Port device team_slave_1 added [ 79.811444][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.818394][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.844648][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.850964][ T5823] Bluetooth: hci1: command tx timeout [ 79.858192][ T5837] team0: Port device team_slave_0 added [ 79.892061][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.899027][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.925682][ T5823] Bluetooth: hci3: command tx timeout [ 79.925810][ T5823] Bluetooth: hci2: command tx timeout [ 79.930024][ T5823] Bluetooth: hci4: command tx timeout [ 79.931509][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.954408][ T5837] team0: Port device team_slave_1 added [ 79.978611][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.985684][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.012721][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.041739][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.048698][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.075120][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.099069][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.106423][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.132804][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.163118][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.170155][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.196200][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.220690][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.227650][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.254060][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.294033][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.301035][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.327742][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.407288][ T5831] hsr_slave_0: entered promiscuous mode [ 80.413753][ T5831] hsr_slave_1: entered promiscuous mode [ 80.419792][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 80.425663][ T5831] Cannot create hsr debugfs directory [ 80.447607][ T5830] hsr_slave_0: entered promiscuous mode [ 80.453965][ T5830] hsr_slave_1: entered promiscuous mode [ 80.460592][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 80.466311][ T5830] Cannot create hsr debugfs directory [ 80.476507][ T5828] hsr_slave_0: entered promiscuous mode [ 80.482743][ T5828] hsr_slave_1: entered promiscuous mode [ 80.488854][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 80.495065][ T5828] Cannot create hsr debugfs directory [ 80.581318][ T5837] hsr_slave_0: entered promiscuous mode [ 80.587580][ T5837] hsr_slave_1: entered promiscuous mode [ 80.594353][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 80.600268][ T5837] Cannot create hsr debugfs directory [ 80.726075][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.761687][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.795729][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.831469][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.041655][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.058648][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.070603][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.082039][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.163194][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.174895][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.186281][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.196543][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.318885][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.334558][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.352175][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.359319][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.383937][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.468504][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.487882][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.506437][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.513660][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.522780][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.533873][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.546899][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.571817][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.578943][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.643355][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.670122][ T5823] Bluetooth: hci0: command tx timeout [ 81.697192][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.709671][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.749067][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.756289][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.781382][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.812814][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.820031][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.835402][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.842609][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.873443][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.880643][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.919983][ T5823] Bluetooth: hci1: command tx timeout [ 81.963208][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.993169][ T5823] Bluetooth: hci4: command tx timeout [ 81.993224][ T5149] Bluetooth: hci2: command tx timeout [ 81.999092][ T5836] Bluetooth: hci3: command tx timeout [ 82.047365][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.127141][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.157570][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.164769][ T2123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.203849][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.221437][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.228610][ T2123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.245527][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.263725][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.271011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.329774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.336945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.456863][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.552045][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.562869][ T5822] veth0_vlan: entered promiscuous mode [ 82.628890][ T5822] veth1_vlan: entered promiscuous mode [ 82.751442][ T5828] veth0_vlan: entered promiscuous mode [ 82.785811][ T5822] veth0_macvtap: entered promiscuous mode [ 82.826369][ T5822] veth1_macvtap: entered promiscuous mode [ 82.842784][ T5828] veth1_vlan: entered promiscuous mode [ 82.886289][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.895338][ T5831] veth0_vlan: entered promiscuous mode [ 82.911470][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.925118][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.935877][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.958184][ T5831] veth1_vlan: entered promiscuous mode [ 82.985285][ T4469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.997701][ T4469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.021462][ T4469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.045745][ T4469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.062796][ T5828] veth0_macvtap: entered promiscuous mode [ 83.099284][ T5828] veth1_macvtap: entered promiscuous mode [ 83.179127][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.208912][ T5830] veth0_vlan: entered promiscuous mode [ 83.238885][ T5831] veth0_macvtap: entered promiscuous mode [ 83.253531][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.275832][ T2097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.292632][ T2123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.307281][ T2097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.310770][ T5831] veth1_macvtap: entered promiscuous mode [ 83.331895][ T5830] veth1_vlan: entered promiscuous mode [ 83.342064][ T2123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.374871][ T2123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385603][ T2123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.415348][ T2123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.426121][ T2123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.508896][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.519857][ T5830] veth0_macvtap: entered promiscuous mode [ 83.537091][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.571534][ T5830] veth1_macvtap: entered promiscuous mode [ 83.601455][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.647403][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.667985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.711324][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.725063][ T2097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.750124][ T5836] Bluetooth: hci0: command tx timeout [ 83.757694][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.774022][ T2123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.786910][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.787101][ T2123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.797444][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815011][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.834211][ T5837] veth0_vlan: entered promiscuous mode [ 83.887284][ T5945] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 83.912452][ T5945] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 83.921916][ T5945] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 83.929410][ T5945] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 83.972303][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991174][ T5836] Bluetooth: hci1: command tx timeout [ 84.006099][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.049657][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.059283][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.070901][ T5823] Bluetooth: hci4: command tx timeout [ 84.076434][ T5836] Bluetooth: hci3: command tx timeout [ 84.080547][ T5823] Bluetooth: hci2: command tx timeout [ 84.092221][ T5837] veth1_vlan: entered promiscuous mode [ 84.158964][ T2123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.179738][ T2123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.282823][ T5952] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 84.319683][ T5837] veth0_macvtap: entered promiscuous mode [ 84.349076][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 84.366822][ T5952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6'. [ 84.503016][ T5837] veth1_macvtap: entered promiscuous mode [ 84.512754][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.514071][ T5954] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.522170][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.547668][ T5954] nbd: must specify at least one socket [ 84.576630][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.595452][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.712794][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.753033][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.773604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.799206][ T1081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.818522][ T1081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.835295][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.880674][ T1081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915120][ T1081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997358][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 85.028041][ T5966] hsr_slave_0: left promiscuous mode [ 85.053900][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 85.063591][ T5966] hsr_slave_1: left promiscuous mode [ 85.194079][ T2097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.240067][ T2097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.315293][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 85.357670][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.373985][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.422660][ T5979] syzkaller0: entered promiscuous mode [ 85.452505][ T5979] syzkaller0: entered allmulticast mode [ 85.842167][ T5823] Bluetooth: hci0: command tx timeout [ 86.054244][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 86.070808][ T5823] Bluetooth: hci1: command tx timeout [ 86.158129][ T5823] Bluetooth: hci3: command tx timeout [ 86.158158][ T5836] Bluetooth: hci4: command tx timeout [ 86.163646][ T5149] Bluetooth: hci2: command tx timeout [ 86.209242][ T6009] netlink: 136 bytes leftover after parsing attributes in process `syz.4.19'. [ 86.341558][ T6013] netlink: 'syz.3.21': attribute type 16 has an invalid length. [ 86.349230][ T6013] netlink: 'syz.3.21': attribute type 17 has an invalid length. [ 86.455611][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 87.133244][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.155770][ T6005] bond0: (slave rose0): Enslaving as an active interface with an up link [ 87.338596][ T6025] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 87.404522][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.412787][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.423239][ T6028] netlink: 172 bytes leftover after parsing attributes in process `syz.2.24'. [ 87.503378][ T6032] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 87.607179][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.627392][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.767338][ T6043] xt_connbytes: Forcing CT accounting to be enabled [ 87.846360][ T6048] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 87.883541][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.965695][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.002363][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.066886][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.632865][ T6076] Zero length message leads to an empty skb [ 89.084453][ T6092] delete_channel: no stack [ 89.417467][ T6124] __nla_validate_parse: 5 callbacks suppressed [ 89.417485][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40'. [ 89.791739][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x22 [ 89.952115][ T6163] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.228869][ T6180] netlink: 1 bytes leftover after parsing attributes in process `syz.0.51'. [ 90.268897][ T6181] netlink: 'syz.3.50': attribute type 13 has an invalid length. [ 90.290062][ T6181] netlink: 'syz.3.50': attribute type 17 has an invalid length. [ 90.322209][ T6172] tipc: Started in network mode [ 90.343491][ T6172] tipc: Node identity 0a99debed068, cluster identity 4711 [ 90.352019][ T6186] netlink: 'syz.2.53': attribute type 16 has an invalid length. [ 90.359771][ T6186] netlink: 156 bytes leftover after parsing attributes in process `syz.2.53'. [ 90.400333][ T6172] tipc: Enabled bearer , priority 0 [ 90.426784][ T6186] netlink: 'syz.2.53': attribute type 4 has an invalid length. [ 90.496764][ T6183] netlink: 'syz.2.53': attribute type 4 has an invalid length. [ 90.549679][ T6192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.618943][ T6172] tipc: Disabling bearer [ 90.896429][ T6207] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 90.898618][ T6209] tipc: Started in network mode [ 90.910452][ T6209] tipc: Node identity 7efc82c34d8f, cluster identity 4711 [ 90.917844][ T6209] tipc: Enabled bearer , priority 0 [ 90.947214][ T6210] syzkaller0: entered promiscuous mode [ 90.963182][ T6210] syzkaller0: entered allmulticast mode [ 91.066685][ T6211] tipc: Resetting bearer [ 91.113110][ T6208] tipc: Resetting bearer [ 91.153465][ T6208] tipc: Disabling bearer [ 91.332598][ T6225] openvswitch: netlink: Flow key attribute not present in set flow. [ 91.364281][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 91.419647][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 91.880951][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.67'. [ 91.995135][ T932] cfg80211: failed to load regulatory.db [ 92.143103][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 92.196302][ T6248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.69'. [ 92.388350][ T6257] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.73'. [ 92.403108][ T6258] warning: `syz.3.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.265630][ T6300] syzkaller1: entered promiscuous mode [ 93.290890][ T6300] syzkaller1: entered allmulticast mode [ 93.312042][ T6302] netlink: 'syz.2.81': attribute type 6 has an invalid length. [ 93.351710][ T6302] team0: Device ip6tnl1 is of different type [ 93.478088][ T6308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.550997][ T6308] syzkaller0: entered promiscuous mode [ 93.560068][ T6308] syzkaller0: entered allmulticast mode [ 93.750391][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 94.625837][ T6372] raw_sendmsg: syz.4.90 forgot to set AF_INET. Fix it! [ 94.927258][ T6384] netlink: 'syz.0.92': attribute type 9 has an invalid length. [ 94.948654][ T6384] netlink: 'syz.0.92': attribute type 11 has an invalid length. [ 94.976002][ T6384] netlink: 'syz.0.92': attribute type 12 has an invalid length. [ 95.011287][ T6384] __nla_validate_parse: 7 callbacks suppressed [ 95.011303][ T6384] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.92'. [ 95.082737][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 95.361739][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 95.480793][ T6399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.618852][ T6409] sit0: entered promiscuous mode [ 95.667503][ T6409] netlink: 1 bytes leftover after parsing attributes in process `syz.0.98'. [ 95.710817][ T6401] syz.1.96 (6401) used greatest stack depth: 15616 bytes left [ 95.796339][ T6399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.867380][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 95.914955][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 95.954910][ T6399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.072131][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 96.184833][ T6448] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 96.283375][ T6399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.415427][ T6452] netlink: 'syz.0.109': attribute type 2 has an invalid length. [ 96.614864][ T6277] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.781114][ T6469] x9: renamed from bridge_slave_0 (while UP) [ 96.833880][ T6472] openvswitch: netlink: Flow key attribute not present in set flow. [ 96.845716][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'. [ 96.912434][ T6277] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.243700][ T6478] team_slave_0: entered promiscuous mode [ 97.249609][ T6478] team_slave_1: entered promiscuous mode [ 97.297331][ T6478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.337628][ T6286] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.346831][ T6286] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.757789][ T6492] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 97.767031][ T6484] netlink: 'syz.3.121': attribute type 29 has an invalid length. [ 97.775881][ T6484] syzkaller0: entered promiscuous mode [ 97.781448][ T6484] syzkaller0: entered allmulticast mode [ 97.847752][ T6486] tipc: Enabled bearer , priority 0 [ 97.880746][ T6486] syzkaller0: entered promiscuous mode [ 97.891947][ T6486] syzkaller0: entered allmulticast mode [ 97.962756][ T6486] tipc: Resetting bearer [ 97.986700][ T6482] tipc: Resetting bearer [ 98.016527][ T6482] tipc: Disabling bearer [ 98.698689][ T6537] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 98.776127][ T6544] bridge0: entered promiscuous mode [ 98.810221][ T6544] bridge0: port 3(macvtap1) entered blocking state [ 98.816942][ T6544] bridge0: port 3(macvtap1) entered disabled state [ 98.825251][ T6544] macvtap1: entered allmulticast mode [ 98.834356][ T6544] bridge0: entered allmulticast mode [ 98.842600][ T6544] macvtap1: left allmulticast mode [ 98.847862][ T6544] bridge0: left allmulticast mode [ 98.869719][ T6544] bridge0: left promiscuous mode [ 98.888838][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 98.992353][ T6558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.134'. [ 100.142604][ T6592] __nla_validate_parse: 1 callbacks suppressed [ 100.142622][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.147'. [ 100.356530][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.152'. [ 100.375513][ T6596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.149'. [ 100.391621][ T6602] openvswitch: netlink: Key type 1030 is out of range max 32 [ 100.402039][ T6596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.149'. [ 100.646402][ T6617] netlink: 'syz.4.157': attribute type 3 has an invalid length. [ 101.009493][ T6632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.160'. [ 101.165516][ T6650] erspan0: entered allmulticast mode [ 101.378773][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 101.723458][ T6671] syzkaller0: entered promiscuous mode [ 101.730042][ T6671] syzkaller0: entered allmulticast mode [ 101.868830][ T6689] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 101.870383][ T6686] netlink: 'syz.4.174': attribute type 3 has an invalid length. [ 101.888794][ T6689] netlink: 'syz.2.175': attribute type 17 has an invalid length. [ 102.109092][ T6689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.386980][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 103.018518][ T6748] netlink: 96 bytes leftover after parsing attributes in process `syz.3.185'. [ 103.035753][ T6748] bond0: option min_links: invalid value (18446744071830523904) [ 103.102655][ T6748] bond0: option min_links: allowed values 0 - 2147483647 [ 103.178858][ T6759] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 103.242222][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'. [ 103.372091][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.191'. [ 103.403514][ T6759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.723579][ T6759] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 103.792374][ T6759] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 104.224855][ T6758] lec:lec_atm_close: lec0: Shut down! [ 105.391225][ T6840] delete_channel: no stack [ 105.798803][ T6861] __nla_validate_parse: 5 callbacks suppressed [ 105.798819][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 105.820058][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 105.858605][ T6861] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 105.930196][ T6861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.639020][ T6884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.215'. [ 107.196880][ T6891] netlink: 'syz.3.217': attribute type 9 has an invalid length. [ 107.208156][ T6891] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.217'. [ 107.346603][ T6899] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 107.560735][ T6905] netlink: 36 bytes leftover after parsing attributes in process `syz.3.222'. [ 107.583614][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.223'. [ 107.664307][ T6910] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 107.690297][ T6910] syzkaller1: linktype set to 260 [ 107.774757][ T6916] syzkaller1: entered promiscuous mode [ 107.788853][ T6916] syzkaller1: entered allmulticast mode [ 107.798561][ T6917] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 107.812450][ T6917] netlink: 'syz.2.225': attribute type 13 has an invalid length. [ 108.239154][ T6923] syzkaller1: left promiscuous mode [ 108.263586][ T6923] syzkaller1: left allmulticast mode [ 108.277835][ T6928] gretap0: entered promiscuous mode [ 108.455121][ T6940] netlink: 48 bytes leftover after parsing attributes in process `syz.4.229'. [ 108.529754][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 108.917262][ T9] IPVS: starting estimator thread 0... [ 109.010175][ T6962] IPVS: using max 31 ests per chain, 74400 per kthread [ 109.353307][ T6982] ieee802154 phy0 wpan0: encryption failed: -90 [ 109.449563][ T6991] netlink: 'syz.4.244': attribute type 2 has an invalid length. [ 109.547184][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 109.591325][ T6997] vlan2: entered promiscuous mode [ 109.606552][ T6997] bond0: entered promiscuous mode [ 109.622527][ T6997] bond_slave_0: entered promiscuous mode [ 109.628494][ T6997] bond_slave_1: entered promiscuous mode [ 109.824354][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 109.842146][ T7013] sit0: left promiscuous mode [ 109.919718][ T7013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.614606][ T7042] netlink: 'syz.0.263': attribute type 21 has an invalid length. [ 110.707786][ T7042] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 110.782266][ T7047] vlan3: entered promiscuous mode [ 110.787551][ T7047] bond0: entered promiscuous mode [ 110.795403][ T7047] bond_slave_0: entered promiscuous mode [ 110.814276][ T7047] bond_slave_1: entered promiscuous mode [ 110.889701][ T7051] syzkaller0: entered promiscuous mode [ 110.918682][ T7051] syzkaller0: entered allmulticast mode [ 110.929118][ T7051] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 111.163694][ T7071] openvswitch: netlink: Key type 148 is out of range max 32 [ 111.886507][ T7087] netlink: 'syz.4.275': attribute type 12 has an invalid length. [ 112.021741][ T7087] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 112.337833][ T7095] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 112.431607][ T7095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.462875][ T7095] vlan2: entered allmulticast mode [ 112.468504][ T7095] veth1: entered allmulticast mode [ 112.481932][ T7095] bond2: (slave vlan2): making interface the new active one [ 112.492759][ T7095] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 112.537239][ T7099] bond2: (slave veth3): Enslaving as an active interface with a down link [ 112.717127][ T7123] __nla_validate_parse: 22 callbacks suppressed [ 112.717146][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.287'. [ 112.881875][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 113.006476][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'. [ 113.304088][ T7137] netlink: 'syz.0.290': attribute type 32 has an invalid length. [ 113.438626][ T7145] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 113.513576][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 113.592971][ T7142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.653772][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 113.927287][ T7142] bond1 (unregistering): Released all slaves [ 114.316231][ T7166] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 114.339033][ T7168] netlink: 'syz.0.299': attribute type 4 has an invalid length. [ 114.357019][ T7168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.299'. [ 114.371401][ T7166] netlink: 'syz.4.298': attribute type 10 has an invalid length. [ 114.372666][ T7170] netlink: 'syz.3.300': attribute type 10 has an invalid length. [ 114.387864][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.404768][ T7166] team0: entered promiscuous mode [ 114.409839][ T7166] team_slave_0: entered promiscuous mode [ 114.420554][ T7166] team_slave_1: entered promiscuous mode [ 114.432723][ T7166] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.479612][ T7168] netlink: 6 bytes leftover after parsing attributes in process `syz.0.299'. [ 114.490577][ T7168] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 114.521515][ T7170] team0: Port device syz_tun added [ 114.703570][ T7174] macsec1: entered promiscuous mode [ 114.709676][ T7174] bridge0: entered promiscuous mode [ 114.716675][ T7174] bridge0: port 3(macsec1) entered blocking state [ 114.723816][ T7174] bridge0: port 3(macsec1) entered disabled state [ 114.731053][ T7174] macsec1: entered allmulticast mode [ 114.737699][ T7174] bridge0: entered allmulticast mode [ 114.756621][ T7174] macsec1: left allmulticast mode [ 114.765136][ T7174] bridge0: left allmulticast mode [ 114.791807][ T7174] bridge0: left promiscuous mode [ 115.006594][ T7185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 115.034102][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 115.057775][ T7187] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 115.159112][ T7187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.162963][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.207812][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.219619][ T7194] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.232571][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.241972][ T7194] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 115.305050][ T7199] pim6reg: entered allmulticast mode [ 115.320985][ T7203] x_tables: duplicate underflow at hook 1 [ 115.338167][ T7200] gretap1: entered promiscuous mode [ 115.354158][ T7199] netlink: 'syz.3.307': attribute type 5 has an invalid length. [ 115.362397][ T7200] bond1: (slave gretap1): making interface the new active one [ 115.372305][ T7200] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.406437][ T7201] pim6reg: left allmulticast mode [ 115.487137][ T7187] macvlan6: entered promiscuous mode [ 115.493038][ T7187] macvlan6: entered allmulticast mode [ 115.499391][ T7187] bond1: entered promiscuous mode [ 115.506317][ T7187] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 115.529340][ T7187] bond1: (slave macvlan6): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 115.603984][ T7187] bond1: left promiscuous mode [ 116.330484][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 116.395838][ T7227] hsr_slave_0: left promiscuous mode [ 116.402448][ T7227] hsr_slave_1: left promiscuous mode [ 116.737964][ T7115] Set syz1 is full, maxelem 65536 reached [ 117.171303][ T7256] veth0: entered promiscuous mode [ 117.336290][ T7256] veth0: left promiscuous mode [ 117.397244][ T7271] ip6t_srh: unknown srh match flags 4000 [ 117.413703][ T7272] ip6t_srh: unknown srh match flags 4000 [ 117.487442][ T7276] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 117.510802][ T7276] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 117.540837][ T7276] syzkaller1: entered promiscuous mode [ 117.546361][ T7276] syzkaller1: entered allmulticast mode [ 117.586190][ T7282] xt_socket: unknown flags 0xfc [ 117.687406][ T7293] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 117.735738][ T7293] netlink: 'syz.3.332': attribute type 4 has an invalid length. [ 117.766413][ T7293] Bluetooth: MGMT ver 1.23 [ 117.782386][ T7295] __nla_validate_parse: 4 callbacks suppressed [ 117.782404][ T7295] netlink: 60 bytes leftover after parsing attributes in process `syz.4.334'. [ 117.956899][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 118.063663][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 118.076374][ T7321] netlink: 'syz.4.342': attribute type 23 has an invalid length. [ 118.084706][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 118.096064][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 118.105499][ T7321] netlink: 'syz.4.342': attribute type 23 has an invalid length. [ 118.136641][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 118.207401][ T7329] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 118.380839][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 118.411908][ T7339] openvswitch: netlink: Duplicate or invalid key (type 0). [ 118.452540][ T7339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.604899][ T7348] syzkaller0: create flow: hash 1670522695 index 1 [ 118.644955][ T7354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.348'. [ 118.773845][ T6273] syzkaller0: tun_net_xmit 76 [ 118.790524][ T6273] syzkaller0: tun_net_xmit 48 [ 118.800966][ T5879] syzkaller0: tun_net_xmit 76 [ 118.811583][ T7341] syzkaller0: delete flow: hash 1670522695 index 1 [ 119.890075][ T7380] netlink: 128 bytes leftover after parsing attributes in process `syz.3.354'. [ 119.899077][ T7380] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 120.107359][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 120.118997][ T7385] syzkaller0: entered promiscuous mode [ 120.138699][ T7385] syzkaller0: entered allmulticast mode [ 120.204835][ T7397] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 120.213036][ T7398] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 121.609542][ T7459] syzkaller0: entered promiscuous mode [ 121.629971][ T7459] syzkaller0: entered allmulticast mode [ 121.777993][ T7478] trusted_key: syz.4.384 sent an empty control message without MSG_MORE. [ 122.790171][ T7496] netlink: 'syz.0.387': attribute type 2 has an invalid length. [ 122.855829][ T7500] sctp: [Deprecated]: syz.4.389 (pid 7500) Use of int in maxseg socket option. [ 122.855829][ T7500] Use struct sctp_assoc_value instead [ 122.885088][ T7502] __nla_validate_parse: 8 callbacks suppressed [ 122.885106][ T7502] netlink: 34 bytes leftover after parsing attributes in process `syz.2.388'. [ 122.904250][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.904250][ T7503] Use struct sctp_sack_info instead [ 122.956454][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.956454][ T7503] Use struct sctp_sack_info instead [ 122.994467][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.994467][ T7503] Use struct sctp_sack_info instead [ 123.011765][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.011765][ T7503] Use struct sctp_sack_info instead [ 123.036905][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.036905][ T7503] Use struct sctp_sack_info instead [ 123.054586][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.054586][ T7503] Use struct sctp_sack_info instead [ 123.073293][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.073293][ T7503] Use struct sctp_sack_info instead [ 123.090517][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.090517][ T7503] Use struct sctp_sack_info instead [ 123.108502][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.108502][ T7503] Use struct sctp_sack_info instead [ 123.188445][ T7503] sctp: [Deprecated]: syz.2.388 (pid 7503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.188445][ T7503] Use struct sctp_sack_info instead [ 123.325836][ T7526] netlink: 56 bytes leftover after parsing attributes in process `syz.4.395'. [ 123.381768][ T7535] netlink: 1208 bytes leftover after parsing attributes in process `syz.4.395'. [ 123.391933][ T7535] netlink: 'syz.4.395': attribute type 4 has an invalid length. [ 123.577225][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 123.621905][ T7544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 123.673404][ T7554] bridge_slave_1: left allmulticast mode [ 123.702823][ T7554] bridge_slave_1: left promiscuous mode [ 123.708688][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.739812][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 123.871072][ T7560] netlink: 'syz.1.403': attribute type 8 has an invalid length. [ 124.138311][ T7554] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 124.331029][ T7556] hsr_slave_1 (unregistering): left promiscuous mode [ 124.406251][ T7561] ip6tnl1: entered allmulticast mode [ 124.520932][ T7574] netlink: 'syz.4.407': attribute type 10 has an invalid length. [ 124.559476][ T7574] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 124.582115][ T7574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.662546][ T7582] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 124.696232][ T7582] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 124.732078][ T7586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.409'. [ 124.768226][ T7582] Bluetooth: MGMT ver 1.23 [ 124.823394][ T7590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.411'. [ 125.186758][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 125.200970][ T7616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 125.583241][ T7652] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 125.634795][ T7652] bond1: entered promiscuous mode [ 125.640826][ T7652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.006332][ T30] audit: type=1800 audit(1767204308.473:2): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.438" name="memory.events" dev="tmpfs" ino=436 res=0 errno=0 [ 126.063307][ T30] audit: type=1804 audit(1767204308.493:3): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.438" name="memory.events" dev="tmpfs" ino=436 res=1 errno=0 [ 126.126880][ T7683] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 126.161791][ T7683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.657212][ T7708] netlink: 'syz.3.446': attribute type 32 has an invalid length. [ 126.667821][ T7709] netlink: 'syz.3.446': attribute type 32 has an invalid length. [ 126.740717][ T7708] bond2: Setting coupled_control to off (0) [ 126.778711][ T7709] bond3: Setting coupled_control to off (0) [ 126.835213][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.844056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.927324][ T7719] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 127.072407][ T7725] netlink: 'syz.3.451': attribute type 8 has an invalid length. [ 127.080467][ T7725] netlink: 'syz.3.451': attribute type 9 has an invalid length. [ 127.227965][ T7731] gretap0: entered promiscuous mode [ 127.813872][ T7746] syzkaller0: entered promiscuous mode [ 127.840048][ T7746] syzkaller0: entered allmulticast mode [ 128.173612][ T7759] __nla_validate_parse: 8 callbacks suppressed [ 128.173629][ T7759] netlink: 68 bytes leftover after parsing attributes in process `syz.0.459'. [ 128.327894][ T7769] validate_nla: 3 callbacks suppressed [ 128.327912][ T7769] netlink: 'syz.4.461': attribute type 2 has an invalid length. [ 128.383503][ T7769] : entered promiscuous mode [ 128.510178][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 128.928659][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 130.047752][ T7831] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.480'. [ 130.156068][ T7829] tipc: Started in network mode [ 130.162949][ T7829] tipc: Node identity e2d5a08d504e, cluster identity 4711 [ 130.170713][ T7829] tipc: Enabled bearer , priority 0 [ 130.203000][ T7836] syzkaller0: entered promiscuous mode [ 130.221151][ T7836] syzkaller0: entered allmulticast mode [ 130.297705][ T7829] tipc: Resetting bearer [ 130.403102][ T7828] tipc: Resetting bearer [ 130.438890][ T7828] tipc: Disabling bearer [ 130.799759][ T7857] netlink: 220 bytes leftover after parsing attributes in process `syz.0.486'. [ 130.847147][ T7861] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 130.856189][ T7861] netlink: 224 bytes leftover after parsing attributes in process `syz.2.490'. [ 131.108390][ T7875] netlink: 60 bytes leftover after parsing attributes in process `syz.4.494'. [ 131.302410][ T7889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.354236][ T7894] tipc: Enabled bearer , priority 0 [ 131.383756][ T7884] syzkaller0: entered promiscuous mode [ 131.389270][ T7884] syzkaller0: entered allmulticast mode [ 131.793110][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 131.946786][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.508'. [ 132.039668][ T7878] tipc: Resetting bearer [ 132.122341][ T7878] tipc: Disabling bearer [ 132.324281][ T6272] nci: nci_rx_work: unknown MT 0x6 [ 132.393331][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 132.721437][ T7977] x_tables: duplicate underflow at hook 1 [ 132.729778][ T7977] No such timeout policy "syz1" [ 132.955148][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.200814][ T7989] __nla_validate_parse: 1 callbacks suppressed [ 133.200832][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.521'. [ 133.286918][ T7991] tipc: Enabling of bearer rejected, failed to enable media [ 133.501457][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 133.526971][ T8005] syzkaller0: entered promiscuous mode [ 133.554222][ T8005] syzkaller0: entered allmulticast mode [ 134.296025][ T8033] unsupported nlmsg_type 40 [ 134.446875][ T8038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.762902][ T8048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 135.152057][ T8062] netlink: 211664 bytes leftover after parsing attributes in process `syz.2.539'. [ 135.172272][ T8058] syzkaller0: entered promiscuous mode [ 135.177788][ T8058] syzkaller0: entered allmulticast mode [ 135.260360][ T8080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.541'. [ 135.599051][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 135.980309][ T8112] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 137.023777][ T8126] tipc: Enabled bearer , priority 0 [ 137.031610][ T8126] syzkaller0: entered promiscuous mode [ 137.042506][ T8126] syzkaller0: entered allmulticast mode [ 137.094021][ T8129] xt_ecn: cannot match TCP bits for non-tcp packets [ 137.118621][ T8126] tipc: Resetting bearer [ 137.146988][ T8125] tipc: Resetting bearer [ 137.191728][ T8125] tipc: Disabling bearer [ 137.218212][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 137.252043][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.3.557'. [ 137.272380][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 137.289467][ T8139] netlink: 'syz.3.557': attribute type 7 has an invalid length. [ 137.297482][ T8139] netlink: 'syz.3.557': attribute type 8 has an invalid length. [ 137.441234][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 137.494974][ T8145] SET target dimension over the limit! [ 137.579650][ T5921] IPVS: starting estimator thread 0... [ 137.673564][ T8155] IPVS: using max 33 ests per chain, 79200 per kthread [ 138.054171][ T8184] netlink: 'syz.1.570': attribute type 6 has an invalid length. [ 138.075756][ T8184] netlink: 'syz.1.570': attribute type 6 has an invalid length. [ 138.410062][ T8203] netlink: 68 bytes leftover after parsing attributes in process `syz.0.576'. [ 138.813747][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.583'. [ 138.929464][ T8233] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 139.011758][ T8233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.091699][ T8236] bond3: (slave gretap1): making interface the new active one [ 139.118253][ T8236] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 139.292131][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.588'. [ 140.107448][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 140.416362][ T8281] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 140.528427][ T8287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.600'. [ 140.595474][ T8284] bond4: option lp_interval: invalid value (0) [ 140.610158][ T8284] bond4: option lp_interval: allowed values 1 - 2147483647 [ 140.622706][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 140.662032][ T8284] bond4 (unregistering): Released all slaves [ 140.676496][ T8298] FAULT_INJECTION: forcing a failure. [ 140.676496][ T8298] name failslab, interval 1, probability 0, space 0, times 1 [ 140.700498][ T8298] CPU: 0 UID: 0 PID: 8298 Comm: syz.0.601 Not tainted syzkaller #0 PREEMPT(full) [ 140.700523][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.700541][ T8298] Call Trace: [ 140.700549][ T8298] [ 140.700557][ T8298] dump_stack_lvl+0xe8/0x150 [ 140.700596][ T8298] should_fail_ex+0x414/0x560 [ 140.700630][ T8298] should_failslab+0xa8/0x100 [ 140.700655][ T8298] __kmalloc_node_noprof+0xe7/0x820 [ 140.700675][ T8298] ? alloc_slab_obj_exts+0x3e/0x100 [ 140.700706][ T8298] alloc_slab_obj_exts+0x3e/0x100 [ 140.700734][ T8298] __memcg_slab_post_alloc_hook+0x330/0x730 [ 140.700782][ T8298] kmem_cache_alloc_node_noprof+0x4ed/0x720 [ 140.700809][ T8298] ? __alloc_skb+0x1dc/0x3a0 [ 140.700826][ T8298] ? __local_bh_enable_ip+0xd0/0x130 [ 140.700845][ T8298] ? __alloc_skb+0x198/0x3a0 [ 140.700863][ T8298] __alloc_skb+0x1dc/0x3a0 [ 140.700885][ T8298] alloc_skb_with_frags+0xca/0x890 [ 140.700920][ T8298] sock_alloc_send_pskb+0x84d/0x980 [ 140.700958][ T8298] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 140.700978][ T8298] ? unwind_next_frame+0xa5/0x23d0 [ 140.700996][ T8298] ? rcu_is_watching+0x15/0xb0 [ 140.701018][ T8298] ? unwind_next_frame+0xa5/0x23d0 [ 140.701036][ T8298] ? rcu_is_watching+0x15/0xb0 [ 140.701057][ T8298] ? __kasan_check_byte+0x12/0x40 [ 140.701083][ T8298] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 140.701107][ T8298] unix_dgram_sendmsg+0x454/0x1840 [ 140.701132][ T8298] ? check_path+0x21/0x40 [ 140.701153][ T8298] ? check_noncircular+0xda/0x150 [ 140.701183][ T8298] ? lockdep_unlock+0x6c/0xf0 [ 140.701197][ T8298] ? __lock_acquire+0x146f/0x2cf0 [ 140.701220][ T8298] ? __lock_acquire+0x6b6/0x2cf0 [ 140.701238][ T8298] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 140.701257][ T8298] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 140.701294][ T8298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.701311][ T8298] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 140.701333][ T8298] __sock_sendmsg+0x21c/0x270 [ 140.701362][ T8298] ____sys_sendmsg+0x505/0x820 [ 140.701390][ T8298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.701421][ T8298] ? import_iovec+0x74/0xa0 [ 140.701448][ T8298] ___sys_sendmsg+0x21f/0x2a0 [ 140.701472][ T8298] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.701529][ T8298] ? __fget_files+0x2a/0x420 [ 140.701551][ T8298] ? __fget_files+0x3a0/0x420 [ 140.701585][ T8298] __x64_sys_sendmsg+0x19b/0x260 [ 140.701609][ T8298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.701641][ T8298] ? __pfx_ksys_write+0x10/0x10 [ 140.701671][ T8298] do_syscall_64+0xec/0xf80 [ 140.701691][ T8298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.701708][ T8298] ? trace_irq_disable+0x37/0x100 [ 140.701733][ T8298] ? clear_bhb_loop+0x60/0xb0 [ 140.701762][ T8298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.701780][ T8298] RIP: 0033:0x7fae0158f749 [ 140.701803][ T8298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.701819][ T8298] RSP: 002b:00007fae0239e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.701843][ T8298] RAX: ffffffffffffffda RBX: 00007fae017e6180 RCX: 00007fae0158f749 [ 140.701858][ T8298] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 000000000000000a [ 140.701870][ T8298] RBP: 00007fae0239e090 R08: 0000000000000000 R09: 0000000000000000 [ 140.701882][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.701893][ T8298] R13: 00007fae017e6218 R14: 00007fae017e6180 R15: 00007ffd41c959c8 [ 140.701925][ T8298] [ 140.768632][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.603'. [ 140.869188][ T8302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.297958][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.607'. [ 141.314220][ T8316] netlink: 428 bytes leftover after parsing attributes in process `syz.4.606'. [ 141.337799][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'. [ 141.605013][ T8333] sctp: [Deprecated]: syz.4.612 (pid 8333) Use of int in max_burst socket option deprecated. [ 141.605013][ T8333] Use struct sctp_assoc_value instead [ 141.753033][ T8344] netlink: 'syz.4.615': attribute type 6 has an invalid length. [ 141.942154][ T5899] IPVS: starting estimator thread 0... [ 142.040179][ T8356] IPVS: using max 30 ests per chain, 72000 per kthread [ 142.280270][ T8345] syzkaller0: entered promiscuous mode [ 142.294485][ T8345] syzkaller0: entered allmulticast mode [ 142.316304][ T8375] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 142.336222][ T8375] syzkaller1: entered promiscuous mode [ 142.347068][ T8375] syzkaller1: entered allmulticast mode [ 142.430726][ T8380] netlink: 'syz.0.626': attribute type 4 has an invalid length. [ 142.493596][ T8388] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 142.603939][ T8388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.702603][ T8391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.735020][ T8391] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.756775][ T8391] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 144.404855][ T8388] veth3: entered promiscuous mode [ 144.417569][ T8388] bond3: (slave veth3): Enslaving as an active interface with a down link [ 144.635414][ T8415] __nla_validate_parse: 5 callbacks suppressed [ 144.635434][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 144.790990][ T8421] netlink: 148 bytes leftover after parsing attributes in process `syz.0.634'. [ 144.791253][ T8417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.042342][ T8426] pimreg3: entered allmulticast mode [ 145.195660][ T8431] FAULT_INJECTION: forcing a failure. [ 145.195660][ T8431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.228042][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz.3.637 Not tainted syzkaller #0 PREEMPT(full) [ 145.228069][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.228081][ T8431] Call Trace: [ 145.228089][ T8431] [ 145.228097][ T8431] dump_stack_lvl+0xe8/0x150 [ 145.228127][ T8431] should_fail_ex+0x414/0x560 [ 145.228230][ T8431] _copy_to_user+0x31/0xb0 [ 145.228256][ T8431] simple_read_from_buffer+0xe1/0x170 [ 145.228282][ T8431] proc_fail_nth_read+0x1b3/0x220 [ 145.228306][ T8431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.228329][ T8431] ? rw_verify_area+0x2a6/0x4d0 [ 145.228346][ T8431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.228366][ T8431] vfs_read+0x200/0xa30 [ 145.228393][ T8431] ? __pfx_vfs_read+0x10/0x10 [ 145.228419][ T8431] ? __x64_sys_sendmsg+0x1b4/0x260 [ 145.228452][ T8431] ksys_read+0x145/0x250 [ 145.228472][ T8431] ? __pfx_ksys_read+0x10/0x10 [ 145.228503][ T8431] do_syscall_64+0xec/0xf80 [ 145.228522][ T8431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.228538][ T8431] ? trace_irq_disable+0x37/0x100 [ 145.228562][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 145.228586][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.228604][ T8431] RIP: 0033:0x7fef8dd8e15c [ 145.228622][ T8431] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.228638][ T8431] RSP: 002b:00007fef8ed06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.228658][ T8431] RAX: ffffffffffffffda RBX: 00007fef8dfe5fa0 RCX: 00007fef8dd8e15c [ 145.228672][ T8431] RDX: 000000000000000f RSI: 00007fef8ed060a0 RDI: 000000000000000c [ 145.228684][ T8431] RBP: 00007fef8ed06090 R08: 0000000000000000 R09: 0000000000000000 [ 145.228696][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.228707][ T8431] R13: 00007fef8dfe6038 R14: 00007fef8dfe5fa0 R15: 00007ffeebf63958 [ 145.228739][ T8431] [ 145.797229][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 145.833563][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 145.864160][ T8448] bridge_slave_1: left allmulticast mode [ 145.869850][ T8448] bridge_slave_1: left promiscuous mode [ 145.885909][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.888175][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 145.911426][ T8448] bridge_slave_0: left allmulticast mode [ 145.917115][ T8448] bridge_slave_0: left promiscuous mode [ 145.923330][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.934868][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'. [ 145.951300][ T8458] netlink: 428 bytes leftover after parsing attributes in process `syz.0.642'. [ 146.058272][ T8458] netlink: 64 bytes leftover after parsing attributes in process `syz.0.642'. [ 146.125876][ T6283] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.153367][ T6283] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.224529][ T6283] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.257743][ T6283] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.402220][ T8484] netlink: 280 bytes leftover after parsing attributes in process `syz.3.651'. [ 146.441194][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 146.721007][ T8505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.825128][ T8508] bond3: Removing last ns target with arp_interval on [ 146.938264][ T8520] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.954976][ T8523] bond0: ARP target 170.170.170.170 is already present [ 146.965975][ T8523] bond0: option arp_ip_target: invalid value (2863311530) [ 146.978056][ T8512] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 146.993929][ T8512] bond4 (unregistering): Released all slaves [ 147.014392][ T5836] block nbd0: Receive control failed (result -32) [ 147.218595][ T8533] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 0, id = 0 [ 147.468705][ T8551] syzkaller0: entered promiscuous mode [ 147.474919][ T8551] syzkaller0: entered allmulticast mode [ 148.092374][ T8589] syzkaller1: left promiscuous mode [ 148.097753][ T8589] syzkaller1: left allmulticast mode [ 148.266930][ T8563] infiniband syz1: set active [ 148.305628][ T8563] infiniband syz1: added bond0 [ 148.707688][ T8563] RDS/IB: syz1: added [ 148.778187][ T8563] smc: adding ib device syz1 with port count 1 [ 148.796511][ T8563] smc: ib device syz1 port 1 has no pnetid [ 148.877344][ T8615] tipc: Enabled bearer , priority 0 [ 149.026664][ T8615] syzkaller0: entered promiscuous mode [ 149.047012][ T8615] syzkaller0: entered allmulticast mode [ 150.196117][ T8621] tipc: Resetting bearer [ 150.224818][ T5879] tipc: Node number set to 2996543629 [ 150.243357][ T8614] tipc: Resetting bearer [ 150.267846][ T8614] tipc: Disabling bearer [ 150.277182][ T8632] __nla_validate_parse: 14 callbacks suppressed [ 150.277199][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 150.405787][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 150.642316][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.690'. [ 150.971832][ T8655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 151.081507][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.693'. [ 151.100152][ T8658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.687'. [ 151.816849][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 152.375183][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.707'. [ 152.468823][ T8711] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 153.020093][ T8727] netlink: 'syz.4.712': attribute type 13 has an invalid length. [ 153.245371][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 153.319204][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.423888][ T8727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.442206][ T8727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.644107][ T6272] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.681911][ T6272] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.705718][ T6272] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.745422][ T6272] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.346209][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.721'. [ 154.544694][ T8737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.825521][ T8788] ip6erspan0: entered allmulticast mode [ 155.428695][ T8830] tipc: Enabled bearer , priority 0 [ 155.445177][ T8830] tipc: Resetting bearer [ 155.479118][ T8830] tipc: Disabling bearer [ 155.577217][ T8838] x_tables: duplicate underflow at hook 2 [ 155.588022][ T8837] syz_tun: entered allmulticast mode [ 155.606407][ T8837] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.625058][ T8837] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.657282][ T8846] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 155.666317][ T8847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.706199][ T8837] syz_tun: left allmulticast mode [ 155.745923][ T8840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.781376][ T8846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.830858][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.017966][ T8871] xt_ipcomp: unknown flags 1D [ 156.550848][ T8897] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.618842][ T8897] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.649545][ T8904] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.706330][ T8904] m1Ie5n: entered promiscuous mode [ 156.778170][ T8897] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.835874][ T8897] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.106060][ T8897] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.116340][ T8897] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.188121][ T8897] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.206616][ T8897] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.233955][ T8923] ip6gre1: entered allmulticast mode [ 157.328230][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.358499][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.427768][ T6287] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.438048][ T6287] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.445833][ T8938] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 157.490332][ T6274] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.503101][ T6274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.526487][ T6274] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.535239][ T6274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.581525][ T8942] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.765'. [ 157.653719][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 158.037606][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 158.058960][ T8961] netlink: 'syz.3.770': attribute type 5 has an invalid length. [ 158.081193][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 158.190642][ T8961] geneve2: entered promiscuous mode [ 158.230289][ T8961] geneve2: entered allmulticast mode [ 158.370532][ T8966] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 158.386865][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 158.410323][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 158.489142][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 158.540030][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 158.620055][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 159.157607][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 159.329659][ T9027] tipc: Enabling of bearer rejected, failed to enable media [ 159.481790][ T9031] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 159.501384][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 159.517018][ T9031] veth0_macvtap: left promiscuous mode [ 159.545870][ T9031] team0: Device veth0_macvtap failed to register rx_handler [ 159.592160][ T9033] syzkaller0: entered promiscuous mode [ 159.597683][ T9033] syzkaller0: entered allmulticast mode [ 159.940502][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.788'. [ 160.193701][ T9057] syzkaller0: entered promiscuous mode [ 160.200325][ T9057] syzkaller0: entered allmulticast mode [ 160.239787][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 160.495857][ T9070] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.795'. [ 160.540259][ T30] audit: type=1800 audit(1767204343.013:4): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.798" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=859 res=0 errno=0 [ 160.630499][ T9081] netlink: 'syz.0.799': attribute type 33 has an invalid length. [ 161.889734][ T9120] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 162.029135][ T9120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.227235][ T9127] bond5: (slave ip6gretap1): making interface the new active one [ 162.248579][ T9127] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 162.327071][ T9133] veth5: entered promiscuous mode [ 162.345190][ T9133] bond5: (slave veth5): Enslaving as an active interface with a down link [ 162.485792][ T9120] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 162.566653][ T9127] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 162.831059][ T9153] __nla_validate_parse: 5 callbacks suppressed [ 162.831079][ T9153] netlink: 348 bytes leftover after parsing attributes in process `syz.0.818'. [ 162.966495][ T9162] netlink: 'syz.0.822': attribute type 2 has an invalid length. [ 162.982715][ T9162] : entered promiscuous mode [ 163.407575][ T9172] bond3: option arp_validate: invalid value (18446744073491447809) [ 163.436231][ T9177] netlink: 'syz.4.825': attribute type 13 has an invalid length. [ 163.450921][ T9172] bond3 (unregistering): Released all slaves [ 163.460336][ T9177] netlink: 'syz.4.825': attribute type 27 has an invalid length. [ 163.782206][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 163.833843][ T9188] netlink: 720 bytes leftover after parsing attributes in process `syz.3.832'. [ 163.852313][ T9184] tap0: tun_chr_ioctl cmd 1074025676 [ 163.857624][ T9184] tap0: owner set to 0 [ 163.866342][ T9186] netlink: 428 bytes leftover after parsing attributes in process `syz.4.831'. [ 163.877798][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.4.831'. [ 163.949139][ T9196] netlink: 'syz.2.834': attribute type 6 has an invalid length. [ 164.009488][ T9200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.076900][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.109578][ T9211] Bluetooth: MGMT ver 1.23 [ 164.119108][ T9212] netlink: 'syz.2.836': attribute type 3 has an invalid length. [ 164.644207][ T9230] tipc: Failed to remove unknown binding: 66,1,1/0:2245327944/2245327946 [ 164.681902][ T9230] tipc: Failed to remove unknown binding: 66,1,1/0:2245327944/2245327946 [ 164.714566][ T9230] tipc: Failed to remove unknown binding: 66,1,1/0:2245327944/2245327946 [ 164.816870][ T9233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 164.899353][ T9235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.589173][ T9342] FAULT_INJECTION: forcing a failure. [ 166.589173][ T9342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.627093][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.1.872 Not tainted syzkaller #0 PREEMPT(full) [ 166.627120][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.627131][ T9342] Call Trace: [ 166.627139][ T9342] [ 166.627147][ T9342] dump_stack_lvl+0xe8/0x150 [ 166.627175][ T9342] should_fail_ex+0x414/0x560 [ 166.627209][ T9342] _copy_to_user+0x31/0xb0 [ 166.627233][ T9342] bpf_verifier_vlog+0x3ba/0x900 [ 166.627262][ T9342] btf_verifier_log+0x10a/0x180 [ 166.627291][ T9342] ? __pfx_btf_verifier_log+0x10/0x10 [ 166.627310][ T9342] ? __btf_verifier_log+0xd4/0x120 [ 166.627335][ T9342] ? __pfx___btf_verifier_log+0x10/0x10 [ 166.627359][ T9342] btf_func_proto_log+0x645/0x840 [ 166.627391][ T9342] __btf_verifier_log_type+0x3f5/0x630 [ 166.627420][ T9342] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 166.627445][ T9342] ? sort+0xa4/0xf0 [ 166.627467][ T9342] btf_func_proto_check_meta+0xed/0x160 [ 166.627495][ T9342] btf_parse_type_sec+0x462/0x2530 [ 166.627526][ T9342] ? btf_parse_hdr+0x1e2/0x6d0 [ 166.627551][ T9342] ? __pfx_btf_check_sec_info+0x10/0x10 [ 166.627582][ T9342] ? btf_parse_str_sec+0x212/0x2a0 [ 166.627609][ T9342] btf_new_fd+0x413/0xc90 [ 166.627625][ T9342] ? apparmor_capable+0x137/0x1a0 [ 166.627656][ T9342] ? __pfx_btf_new_fd+0x10/0x10 [ 166.627673][ T9342] ? bpf_token_put+0x143/0x160 [ 166.627693][ T9342] ? bpf_btf_load+0x126/0x190 [ 166.627722][ T9342] __sys_bpf+0x3ed/0x860 [ 166.627748][ T9342] ? __pfx___sys_bpf+0x10/0x10 [ 166.627785][ T9342] ? ksys_write+0x22a/0x250 [ 166.627804][ T9342] ? __pfx_ksys_write+0x10/0x10 [ 166.627826][ T9342] __x64_sys_bpf+0x7c/0x90 [ 166.627860][ T9342] do_syscall_64+0xec/0xf80 [ 166.627880][ T9342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.627898][ T9342] ? trace_irq_disable+0x37/0x100 [ 166.627922][ T9342] ? clear_bhb_loop+0x60/0xb0 [ 166.627944][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.627960][ T9342] RIP: 0033:0x7f010fd8f749 [ 166.627977][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.627993][ T9342] RSP: 002b:00007f010dfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.628013][ T9342] RAX: ffffffffffffffda RBX: 00007f010ffe6090 RCX: 00007f010fd8f749 [ 166.628026][ T9342] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 166.628036][ T9342] RBP: 00007f010dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.628047][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.628057][ T9342] R13: 00007f010ffe6128 R14: 00007f010ffe6090 R15: 00007ffe4bdeb9c8 [ 166.628089][ T9342] [ 166.857148][ T5836] Bluetooth: hci4: link tx timeout [ 166.958536][ T9351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.873'. [ 167.026261][ T5836] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 167.039487][ T5836] Bluetooth: hci4: link tx timeout [ 167.045233][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.129080][ T9356] tipc: New replicast peer: 255.255.255.255 [ 167.137028][ T9356] tipc: Enabled bearer , priority 10 [ 167.179249][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 167.313264][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 167.326444][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.738897][ T9382] vxcan3: entered promiscuous mode [ 168.069200][ T9387] IPVS: set_ctl: invalid protocol: 18 172.20.20.170:20002 [ 168.159406][ T9362] netlink: 'syz.3.878': attribute type 6 has an invalid length. [ 168.221816][ T9394] FAULT_INJECTION: forcing a failure. [ 168.221816][ T9394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.245180][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.2.886 Not tainted syzkaller #0 PREEMPT(full) [ 168.245205][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.245216][ T9394] Call Trace: [ 168.245223][ T9394] [ 168.245231][ T9394] dump_stack_lvl+0xe8/0x150 [ 168.245260][ T9394] should_fail_ex+0x414/0x560 [ 168.245294][ T9394] _copy_to_user+0x31/0xb0 [ 168.245319][ T9394] bpf_verifier_vlog+0x3ba/0x900 [ 168.245348][ T9394] btf_verifier_log+0x10a/0x180 [ 168.245377][ T9394] ? __pfx_btf_verifier_log+0x10/0x10 [ 168.245402][ T9394] ? btf_func_proto_log+0x645/0x840 [ 168.245435][ T9394] __btf_verifier_log_type+0x3f5/0x630 [ 168.245469][ T9394] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 168.245498][ T9394] ? sort+0xa4/0xf0 [ 168.245523][ T9394] btf_func_proto_check_meta+0xed/0x160 [ 168.245553][ T9394] btf_parse_type_sec+0x462/0x2530 [ 168.245586][ T9394] ? btf_parse_hdr+0x1e2/0x6d0 [ 168.245613][ T9394] ? __pfx_btf_check_sec_info+0x10/0x10 [ 168.245646][ T9394] ? btf_parse_str_sec+0x212/0x2a0 [ 168.245676][ T9394] btf_new_fd+0x413/0xc90 [ 168.245693][ T9394] ? apparmor_capable+0x137/0x1a0 [ 168.245735][ T9394] ? __pfx_btf_new_fd+0x10/0x10 [ 168.245755][ T9394] ? bpf_token_put+0x143/0x160 [ 168.245775][ T9394] ? bpf_btf_load+0x126/0x190 [ 168.245804][ T9394] __sys_bpf+0x3ed/0x860 [ 168.245832][ T9394] ? __pfx___sys_bpf+0x10/0x10 [ 168.245873][ T9394] ? ksys_write+0x22a/0x250 [ 168.245894][ T9394] ? __pfx_ksys_write+0x10/0x10 [ 168.245920][ T9394] __x64_sys_bpf+0x7c/0x90 [ 168.245945][ T9394] do_syscall_64+0xec/0xf80 [ 168.245965][ T9394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.245982][ T9394] ? trace_irq_disable+0x37/0x100 [ 168.246005][ T9394] ? clear_bhb_loop+0x60/0xb0 [ 168.246027][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.246044][ T9394] RIP: 0033:0x7fc4f2d8f749 [ 168.246061][ T9394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.246077][ T9394] RSP: 002b:00007fc4f3c1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.246097][ T9394] RAX: ffffffffffffffda RBX: 00007fc4f2fe6090 RCX: 00007fc4f2d8f749 [ 168.246111][ T9394] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 168.246123][ T9394] RBP: 00007fc4f3c1b090 R08: 0000000000000000 R09: 0000000000000000 [ 168.246135][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.246146][ T9394] R13: 00007fc4f2fe6128 R14: 00007fc4f2fe6090 R15: 00007ffc3b835178 [ 168.246176][ T9394] [ 168.250599][ T932] tipc: Node number set to 3673284286 [ 168.518211][ T9401] tipc: Enabled bearer , priority 10 [ 168.732495][ T9420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'. [ 168.818430][ T9421] netlink: 48 bytes leftover after parsing attributes in process `syz.4.891'. [ 168.876634][ T9423] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 169.112853][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 169.835937][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 170.010376][ T9442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.897'. [ 170.236885][ T9445] FAULT_INJECTION: forcing a failure. [ 170.236885][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.274262][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.1.899 Not tainted syzkaller #0 PREEMPT(full) [ 170.274287][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.274299][ T9445] Call Trace: [ 170.274306][ T9445] [ 170.274314][ T9445] dump_stack_lvl+0xe8/0x150 [ 170.274343][ T9445] should_fail_ex+0x414/0x560 [ 170.274377][ T9445] _copy_to_user+0x31/0xb0 [ 170.274402][ T9445] bpf_verifier_vlog+0x3ba/0x900 [ 170.274431][ T9445] __btf_verifier_log+0xd4/0x120 [ 170.274458][ T9445] ? __pfx___btf_verifier_log+0x10/0x10 [ 170.274482][ T9445] ? btf_func_proto_log+0x645/0x840 [ 170.274514][ T9445] __btf_verifier_log_type+0x494/0x630 [ 170.274565][ T9445] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 170.274593][ T9445] ? sort+0xa4/0xf0 [ 170.274617][ T9445] btf_func_proto_check_meta+0xed/0x160 [ 170.274647][ T9445] btf_parse_type_sec+0x462/0x2530 [ 170.274681][ T9445] ? btf_parse_hdr+0x1e2/0x6d0 [ 170.274707][ T9445] ? __pfx_btf_check_sec_info+0x10/0x10 [ 170.274739][ T9445] ? btf_parse_str_sec+0x212/0x2a0 [ 170.274770][ T9445] btf_new_fd+0x413/0xc90 [ 170.274786][ T9445] ? apparmor_capable+0x137/0x1a0 [ 170.274822][ T9445] ? __pfx_btf_new_fd+0x10/0x10 [ 170.274847][ T9445] ? bpf_token_put+0x143/0x160 [ 170.274867][ T9445] ? bpf_btf_load+0x126/0x190 [ 170.274896][ T9445] __sys_bpf+0x3ed/0x860 [ 170.274923][ T9445] ? __pfx___sys_bpf+0x10/0x10 [ 170.274963][ T9445] ? ksys_write+0x22a/0x250 [ 170.274984][ T9445] ? __pfx_ksys_write+0x10/0x10 [ 170.275009][ T9445] __x64_sys_bpf+0x7c/0x90 [ 170.275033][ T9445] do_syscall_64+0xec/0xf80 [ 170.275052][ T9445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.275069][ T9445] ? trace_irq_disable+0x37/0x100 [ 170.275093][ T9445] ? clear_bhb_loop+0x60/0xb0 [ 170.275115][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.275132][ T9445] RIP: 0033:0x7f010fd8f749 [ 170.275147][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.275162][ T9445] RSP: 002b:00007f010dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.275181][ T9445] RAX: ffffffffffffffda RBX: 00007f010ffe5fa0 RCX: 00007f010fd8f749 [ 170.275194][ T9445] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 170.275205][ T9445] RBP: 00007f010dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.275214][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.275222][ T9445] R13: 00007f010ffe6038 R14: 00007f010ffe5fa0 R15: 00007ffe4bdeb9c8 [ 170.275250][ T9445] [ 170.969442][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 170.988203][ T9456] batman_adv: batadv0: Adding interface: vlan3 [ 171.001277][ T9456] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.060113][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.071188][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.085041][ T9456] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 171.135342][ T9464] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.162157][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.902'. [ 171.192514][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 171.254646][ T9470] netlink: 'syz.3.906': attribute type 30 has an invalid length. [ 171.349001][ T9473] netlink: 104 bytes leftover after parsing attributes in process `syz.3.907'. [ 171.884697][ T9488] netlink: 'syz.4.911': attribute type 10 has an invalid length. [ 171.937074][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.914'. [ 171.957786][ T9488] syz_tun: entered promiscuous mode [ 171.978804][ T9488] team0: Port device syz_tun added [ 172.178159][ T9499] netlink: 72 bytes leftover after parsing attributes in process `syz.0.916'. [ 172.193971][ T9499] netlink: 72 bytes leftover after parsing attributes in process `syz.0.916'. [ 172.398416][ T9514] pimreg: entered allmulticast mode [ 172.422919][ T9514] pimreg: left allmulticast mode [ 173.181280][ T9544] bridge: RTM_NEWNEIGH with invalid ether address [ 173.196243][ T9546] IPv6: sit1: Disabled Multicast RS [ 173.402671][ T9550] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 173.471452][ T9556] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 173.522468][ T9556] bond7 (unregistering): Released all slaves [ 173.904773][ T9582] __nla_validate_parse: 5 callbacks suppressed [ 173.904803][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.937'. [ 174.663616][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 174.697180][ T9590] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.938'. [ 174.934665][ T9608] tap0: tun_chr_ioctl cmd 1074025681 [ 175.255122][ T9626] tipc: Started in network mode [ 175.285224][ T9626] tipc: Node identity a61396a495a1, cluster identity 4711 [ 175.334721][ T9626] tipc: Enabled bearer , priority 0 [ 175.371540][ T9636] syzkaller0: entered promiscuous mode [ 175.395391][ T9636] syzkaller0: entered allmulticast mode [ 175.437581][ T9626] tipc: Resetting bearer [ 175.465049][ T9625] tipc: Resetting bearer [ 175.532913][ T9625] tipc: Disabling bearer [ 175.556203][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.948'. [ 175.695726][ T9644] 8021q: VLANs not supported on sit0 [ 175.708956][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 175.896890][ T9658] tap0: tun_chr_ioctl cmd 2148553947 [ 175.910765][ T9658] tap0: tun_chr_ioctl cmd 2147767521 [ 175.942847][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 175.960257][ T9658] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 176.022628][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 176.056230][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.070786][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.301692][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.321798][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.405639][ T9678] tipc: Enabled bearer , priority 0 [ 176.413569][ T9678] syzkaller0: entered promiscuous mode [ 176.419064][ T9678] syzkaller0: entered allmulticast mode [ 176.449222][ T9677] tipc: Resetting bearer [ 176.489053][ T9677] tipc: Disabling bearer [ 176.784678][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 176.869841][ T9689] netlink: 'syz.2.960': attribute type 13 has an invalid length. [ 176.878297][ T9689] netlink: 'syz.2.960': attribute type 17 has an invalid length. [ 176.977154][ T9689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.226638][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'. [ 177.258381][ T9701] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 177.275361][ T9701] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.415017][ T9706] syzkaller1: entered promiscuous mode [ 177.428494][ T9706] syzkaller1: entered allmulticast mode [ 177.440104][ T9705] netlink: 173176 bytes leftover after parsing attributes in process `syz.2.966'. [ 178.514678][ T9764] tipc: Enabled bearer , priority 0 [ 178.526922][ T9764] syzkaller0: entered promiscuous mode [ 178.535236][ T9764] syzkaller0: entered allmulticast mode [ 178.557538][ T9764] tipc: Resetting bearer [ 178.619398][ T9764] tipc: Disabling bearer [ 178.985024][ T9790] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 179.075626][ T9790] netlink: 'syz.3.988': attribute type 15 has an invalid length. [ 179.087550][ T9791] netlink: 'syz.3.988': attribute type 15 has an invalid length. [ 179.106543][ T9790] __nla_validate_parse: 11 callbacks suppressed [ 179.106559][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 179.124032][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 179.158453][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 179.193264][ T9799] ip6tnl1: entered promiscuous mode [ 179.301359][ T9803] netlink: zone id is out of range [ 179.306597][ T9803] netlink: zone id is out of range [ 179.320219][ T9803] netlink: zone id is out of range [ 179.325710][ T9803] netlink: zone id is out of range [ 179.378736][ T9803] netlink: zone id is out of range [ 179.396108][ T9803] netlink: zone id is out of range [ 179.410398][ T9803] netlink: zone id is out of range [ 179.446410][ T9803] netlink: zone id is out of range [ 179.465685][ T9803] netlink: zone id is out of range [ 179.674836][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 180.793914][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1006'. [ 181.054654][ T9877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1013'. [ 181.435637][ T9849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.442040][ T9849] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 181.463787][ T9849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.469800][ T9849] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 181.479774][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.488680][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.507810][ T9849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.511088][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.518313][ T9849] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 181.539671][ T9849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.550721][ T9881] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 181.568437][ T9849] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 181.584779][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.584789][ T9849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.591581][ T9849] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 181.622967][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.660283][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.690547][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.722988][ T9881] wg1 speed is unknown, defaulting to 1000 [ 181.838151][ T9889] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1017'. [ 181.865610][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 181.881617][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 181.891962][ T9889] netlink: 'syz.1.1017': attribute type 15 has an invalid length. [ 182.178827][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1022'. [ 182.483914][ T9923] FAULT_INJECTION: forcing a failure. [ 182.483914][ T9923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.560282][ T9923] CPU: 0 UID: 0 PID: 9923 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) [ 182.560308][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.560319][ T9923] Call Trace: [ 182.560327][ T9923] [ 182.560335][ T9923] dump_stack_lvl+0xe8/0x150 [ 182.560365][ T9923] should_fail_ex+0x414/0x560 [ 182.560400][ T9923] _copy_to_user+0x31/0xb0 [ 182.560426][ T9923] simple_read_from_buffer+0xe1/0x170 [ 182.560455][ T9923] proc_fail_nth_read+0x1b3/0x220 [ 182.560479][ T9923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.560502][ T9923] ? rw_verify_area+0x2a6/0x4d0 [ 182.560519][ T9923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.560540][ T9923] vfs_read+0x200/0xa30 [ 182.560557][ T9923] ? fdget_pos+0x247/0x320 [ 182.560586][ T9923] ? __pfx___mutex_lock+0x10/0x10 [ 182.560606][ T9923] ? __pfx_vfs_read+0x10/0x10 [ 182.560626][ T9923] ? __fget_files+0x2a/0x420 [ 182.560653][ T9923] ? __fget_files+0x3a0/0x420 [ 182.560675][ T9923] ? __fget_files+0x2a/0x420 [ 182.560707][ T9923] ksys_read+0x145/0x250 [ 182.560728][ T9923] ? __pfx_ksys_read+0x10/0x10 [ 182.560759][ T9923] do_syscall_64+0xec/0xf80 [ 182.560778][ T9923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.560796][ T9923] ? trace_irq_disable+0x37/0x100 [ 182.560821][ T9923] ? clear_bhb_loop+0x60/0xb0 [ 182.560842][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.560863][ T9923] RIP: 0033:0x7f010fd8e15c [ 182.560880][ T9923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.560895][ T9923] RSP: 002b:00007f010dfd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.560916][ T9923] RAX: ffffffffffffffda RBX: 00007f010ffe6090 RCX: 00007f010fd8e15c [ 182.560930][ T9923] RDX: 000000000000000f RSI: 00007f010dfd50a0 RDI: 0000000000000003 [ 182.560941][ T9923] RBP: 00007f010dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 182.560952][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.560963][ T9923] R13: 00007f010ffe6128 R14: 00007f010ffe6090 R15: 00007ffe4bdeb9c8 [ 182.560994][ T9923] [ 182.852861][ T9927] net_ratelimit: 46 callbacks suppressed [ 182.852878][ T9927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.964236][ T9934] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 183.073309][ T9936] syzkaller0: entered promiscuous mode [ 183.080050][ T9936] syzkaller0: entered allmulticast mode [ 183.358424][ T9959] netlink: 'syz.4.1040': attribute type 83 has an invalid length. [ 183.399629][ T9961] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 183.551777][ T9961] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 183.595967][ T9961] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 183.622666][ T9965] netlink: 'syz.1.1042': attribute type 33 has an invalid length. [ 183.669145][ T9976] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 183.693039][ T9979] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.706438][ T9979] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.734698][ T9980] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 183.767419][ T9961] macvlan6: entered promiscuous mode [ 183.775026][ T9961] macvlan6: entered allmulticast mode [ 183.781879][ T9961] bond4: entered promiscuous mode [ 183.787742][ T9961] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 183.798445][ T9961] bond4: left promiscuous mode [ 183.846340][ T9979] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.867333][ T9979] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.939161][ T9979] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.977299][ T9979] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.033266][ T9995] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 184.074628][ T9979] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.114194][ T9979] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.168826][T10000] netlink: 'syz.3.1053': attribute type 13 has an invalid length. [ 184.187541][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.215026][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.215339][T10000] netlink: 'syz.3.1053': attribute type 17 has an invalid length. [ 184.237236][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.268309][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.358021][T10008] __nla_validate_parse: 13 callbacks suppressed [ 184.358039][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 184.381535][ T9975] wg1 speed is unknown, defaulting to 1000 [ 184.397584][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 184.420257][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1056'. [ 184.443647][T10008] netlink: 'syz.4.1054': attribute type 18 has an invalid length. [ 184.479726][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.489626][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.509977][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.518407][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.550783][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 184.579238][ T6273] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.592347][ T6273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.614016][T10011] delete_channel: no stack [ 184.621539][T10018] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 184.698119][ T6273] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.732845][ T6273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.838965][T10029] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1063'. [ 184.888323][T10033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'. [ 184.910339][T10034] x_tables: duplicate underflow at hook 1 [ 184.956915][T10033] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 185.004701][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1063'. [ 185.020636][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 185.058021][T10039] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1062'. [ 185.106897][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 185.259792][T10033] netlink: 'syz.4.1062': attribute type 29 has an invalid length. [ 185.278328][T10041] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 186.161179][T10054] wg1 speed is unknown, defaulting to 1000 [ 187.114534][T10119] netlink: 'syz.2.1083': attribute type 2 has an invalid length. [ 187.133517][T10120] netlink: 'syz.2.1083': attribute type 2 has an invalid length. [ 187.523228][T10143] sctp_setsockopt_delayed_ack: 55 callbacks suppressed [ 187.523250][T10143] sctp: [Deprecated]: syz.3.1091 (pid 10143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.523250][T10143] Use struct sctp_sack_info instead [ 187.548080][T10143] sctp: [Deprecated]: syz.3.1091 (pid 10143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.548080][T10143] Use struct sctp_sack_info instead [ 187.567208][T10144] --map-set only usable from mangle table [ 187.626892][T10147] netlink: 'syz.4.1092': attribute type 11 has an invalid length. [ 188.259581][T10186] gretap0: left promiscuous mode [ 188.323355][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.341453][T10186] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.367934][T10186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.643085][T10197] netlink: del zone limit has 4 unknown bytes [ 188.656485][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.664334][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.768303][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.783037][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.924853][ T6274] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.990068][ T6274] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.011881][ T6274] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.033214][ T6274] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.063948][ T6274] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.100268][ T6274] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.108735][ T6274] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.160056][ T6274] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.275711][T10214] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 189.465462][T10233] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 189.547256][T10235] syzkaller0: tun_chr_ioctl cmd 35108 [ 189.554297][T10231] can: request_module (can-proto-5) failed. [ 189.565997][T10235] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 189.609555][T10239] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 189.618493][T10239] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 189.677107][T10239] __nla_validate_parse: 6 callbacks suppressed [ 189.677126][T10239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1114'. [ 189.904223][T10247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1116'. [ 189.915008][T10247] netlink: 'syz.3.1116': attribute type 29 has an invalid length. [ 189.922446][T10264] x_tables: duplicate entry at hook 2 [ 190.052640][T10269] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1122'. [ 190.235180][T10282] syzkaller0: entered promiscuous mode [ 190.251207][T10282] syzkaller0: entered allmulticast mode [ 190.442056][T10291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 190.563966][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 190.587678][T10302] ip6tnl3: entered allmulticast mode [ 190.685586][T10306] netlink: 'syz.0.1133': attribute type 10 has an invalid length. [ 190.705385][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 190.728136][T10306] netlink: 'syz.0.1133': attribute type 30 has an invalid length. [ 191.005734][T10325] syzkaller0: entered promiscuous mode [ 191.038029][T10325] syzkaller0: entered allmulticast mode [ 191.293481][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1144'. [ 191.302240][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 191.332078][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.355527][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.374165][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.393198][T10336] netlink: 'syz.1.1144': attribute type 33 has an invalid length. [ 191.419272][T10336] team0: entered allmulticast mode [ 191.445313][T10336] team_slave_0: entered allmulticast mode [ 191.465014][T10336] team_slave_1: entered allmulticast mode [ 191.514779][T10347] tipc: Enabled bearer , priority 0 [ 191.530548][T10345] syzkaller0: entered promiscuous mode [ 191.536663][T10345] syzkaller0: entered allmulticast mode [ 191.579227][T10345] tipc: Resetting bearer [ 191.641968][T10345] tipc: Disabling bearer [ 191.738182][T10340] infiniband syz2: set active [ 191.743026][T10340] infiniband syz2: added ip6_vti0 [ 191.778738][T10340] RDS/IB: syz2: added [ 191.782935][T10340] smc: adding ib device syz2 with port count 1 [ 191.790467][T10340] smc: ib device syz2 port 1 has no pnetid [ 191.799663][ T980] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.814139][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.911985][ T980] ip6_vti0 speed is unknown, defaulting to 1000 [ 192.195320][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 192.196405][T10359] syzkaller0: entered promiscuous mode [ 192.207373][T10359] syzkaller0: entered allmulticast mode [ 192.268841][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'. [ 192.302763][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'. [ 192.710855][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 192.733018][T10383] netlink: 'syz.0.1155': attribute type 3 has an invalid length. [ 193.057135][T10378] wg1 speed is unknown, defaulting to 1000 [ 193.136289][T10378] ip6_vti0 speed is unknown, defaulting to 1000 [ 193.382997][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 193.823702][T10395] netlink: 'syz.0.1160': attribute type 3 has an invalid length. [ 194.207527][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.459973][T10421] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 194.642049][T10340] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.901791][T10403] wg1 speed is unknown, defaulting to 1000 [ 195.147064][T10432] syzkaller0: entered promiscuous mode [ 195.161913][T10432] syzkaller0: entered allmulticast mode [ 195.286265][T10436] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 195.294394][T10436] __nla_validate_parse: 3 callbacks suppressed [ 195.294409][T10436] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1169'. [ 195.457772][T10444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.893750][T10470] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1179'. [ 195.903812][T10470] openvswitch: netlink: Flow key attr not present in new flow. [ 196.941795][T10481] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 196.946387][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 196.968499][T10486] syzkaller0: entered promiscuous mode [ 196.975180][T10486] syzkaller0: entered allmulticast mode [ 197.150123][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.486526][T10523] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 197.558615][T10523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 197.626090][T10529] vlan2: entered promiscuous mode [ 197.632583][T10527] netlink: 'syz.4.1196': attribute type 10 has an invalid length. [ 197.633247][T10529] bond8: entered promiscuous mode [ 197.646834][T10529] vlan2: entered allmulticast mode [ 197.652112][T10529] bond8: entered allmulticast mode [ 197.675508][T10523] bond8: (slave gretap3): making interface the new active one [ 197.683399][T10523] gretap3: entered promiscuous mode [ 197.690149][T10523] gretap3: entered allmulticast mode [ 197.698112][T10523] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 197.740682][T10523] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 197.766374][T10527] syz_tun: left promiscuous mode [ 197.775397][T10527] team0: Port device syz_tun removed [ 197.795842][T10527] syz_tun: entered promiscuous mode [ 197.815077][T10527] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 198.118533][T10550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.129419][T10551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.225369][ T980] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.272834][T10559] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 198.287128][T10559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1204'. [ 198.350672][T10559] bond0: (slave syz_tun): Releasing backup interface [ 198.359167][T10559] syz_tun: left promiscuous mode [ 198.376114][T10559] bond0: (slave team0): Releasing backup interface [ 198.388377][T10566] netlink: 'syz.4.1204': attribute type 10 has an invalid length. [ 198.402393][T10559] team0: left promiscuous mode [ 198.407201][T10559] team_slave_0: left promiscuous mode [ 198.413638][T10559] team_slave_1: left promiscuous mode [ 198.422650][T10559] bridge_slave_0: left allmulticast mode [ 198.428539][T10559] bridge_slave_0: left promiscuous mode [ 198.434482][T10559] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.448612][T10559] bond0: (slave bond_slave_0): Releasing backup interface [ 198.458420][T10559] bond_slave_0: left promiscuous mode [ 198.468391][T10559] bond0: (slave bond_slave_1): Releasing backup interface [ 198.478997][T10559] bond_slave_1: left promiscuous mode [ 198.487565][T10559] team0: Port device team_slave_0 removed [ 198.498995][T10559] team0: Port device team_slave_1 removed [ 198.531153][T10559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.539489][T10559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.548259][T10559] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.568152][T10566] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 198.585588][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 198.613808][T10578] tipc: Enabled bearer , priority 0 [ 198.710439][T10565] syzkaller0: entered promiscuous mode [ 198.715965][T10565] syzkaller0: entered allmulticast mode [ 198.835322][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1211'. [ 198.932787][T10593] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 198.941239][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1212'. [ 200.112955][T10563] tipc: Resetting bearer [ 200.159452][T10563] tipc: Disabling bearer [ 200.171346][T10601] veth1_to_bond: entered allmulticast mode [ 200.178623][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 200.409569][T10612] geneve2: entered promiscuous mode [ 200.416752][T10615] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 200.425546][T10612] geneve2: entered allmulticast mode [ 200.434472][T10615] xt_hashlimit: max too large, truncated to 1048576 [ 200.449711][ T6278] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.463747][T10617] Bluetooth: MGMT ver 1.23 [ 200.473589][T10615] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.489216][ T6278] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.510532][ T6278] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.533705][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 200.551211][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 200.562691][ T6278] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.603550][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 200.752875][T10636] syzkaller0: entered promiscuous mode [ 200.767749][T10636] syzkaller0: entered allmulticast mode [ 200.847081][T10643] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 200.953273][T10643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.017495][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1230'. [ 201.028694][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1230'. [ 201.152795][T10624] wg1 speed is unknown, defaulting to 1000 [ 201.217209][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 201.226842][T10663] netlink: 'syz.2.1234': attribute type 2 has an invalid length. [ 201.236446][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 201.251709][T10624] ip6_vti0 speed is unknown, defaulting to 1000 [ 201.472183][T10652] wg1 speed is unknown, defaulting to 1000 [ 201.687513][T10652] ip6_vti0 speed is unknown, defaulting to 1000 [ 202.209291][T10702] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1243'. [ 202.412039][T10706] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 202.520764][T10706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.540944][T10710] bond5: (slave gretap1): making interface the new active one [ 202.560286][T10710] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 202.705554][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 202.895835][T10729] sctp: [Deprecated]: syz.4.1252 (pid 10729) Use of int in maxseg socket option. [ 202.895835][T10729] Use struct sctp_assoc_value instead [ 202.988283][T10732] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.169608][T10737] netlink: 'syz.2.1255': attribute type 12 has an invalid length. [ 203.419536][T10755] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1258'. [ 203.462700][T10755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.747518][T10772] block nbd1: Unsupported socket: should be TCP or UNIX. [ 203.918622][T10775] xt_bpf: check failed: parse error [ 204.090241][T10770] team_slave_0: left promiscuous mode [ 204.110128][T10770] team_slave_1: left promiscuous mode [ 204.138333][ T30] audit: type=1107 audit(1767204386.603:5): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ƽs׸.d7hSp-/# UyΫu̟qNj YcGU#&tOnb2m.;ۧ|Eb+`oE&ԼuxN@TjJܘ3 X~SX73"ZΊuFmVY+`],|nU&Ah{#~zGJS/vU̙Ϳ馉AoR)o$mw1ছ¶5q;V ~%³ =K8`Dc=.5{B6SS E1J`BZ0']曆7@&,?&Ě]r޿D~~n:9)S  |Ȩ%m!Aѩ^lpc(Zŏ ›HNvU<{qgz3ufMD8ՖR+ss>j|thnlI瑍Y]w)4oQŷY9yDŽʂnA $sHCM R=fuY5nLbY [ 205.001207][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.015762][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.033237][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.070040][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.078963][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.203677][T10802] hsr_slave_1 (unregistering): left promiscuous mode [ 205.263480][T10814] bond5: option arp_validate: invalid value (18446744073491447809) [ 205.277688][T10814] bond5 (unregistering): Released all slaves [ 205.410841][T10835] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 205.418788][T10835] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 205.602159][T10848] __nla_validate_parse: 7 callbacks suppressed [ 205.602178][T10848] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1281'. [ 205.643340][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'. [ 205.678832][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'. [ 205.693912][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 205.804549][T10861] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1285'. [ 205.836206][T10861] bridge_slave_0: left allmulticast mode [ 205.842338][T10861] bridge_slave_0: left promiscuous mode [ 205.848210][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.860300][T10864] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1286'. [ 205.869476][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1286'. [ 205.882076][T10861] bridge_slave_1: left allmulticast mode [ 205.888957][T10861] bridge_slave_1: left promiscuous mode [ 205.895414][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.918849][T10861] bond0: (slave bond_slave_0): Releasing backup interface [ 205.936186][T10861] bond0: (slave bond_slave_1): Releasing backup interface [ 205.961025][T10861] team0: Port device team_slave_0 removed [ 205.972634][T10861] team0: Port device team_slave_1 removed [ 205.978946][T10861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.987703][T10861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.007908][T10861] bond1: (slave wlan0): Releasing active interface [ 206.019399][T10861] bond2: (slave vlan2): Releasing active interface [ 206.026396][T10861] bond2: (slave vlan2): the permanent HWaddr of slave - aa:aa:aa:aa:aa:19 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 206.048145][T10861] bond2: (slave veth3): Releasing active interface [ 206.055288][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1286'. [ 206.067453][T10861] bond3: (slave gretap1): Releasing active interface [ 206.129129][T10873] syzkaller0: entered promiscuous mode [ 206.137304][T10873] syzkaller0: entered allmulticast mode [ 206.302867][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1289'. [ 206.315304][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 206.471525][T10898] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 206.500374][T10899] netlink: get zone limit has 8 unknown bytes [ 207.227020][T10902] wg1 speed is unknown, defaulting to 1000 [ 207.235120][T10902] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.406543][T10918] tc_dump_action: action bad kind [ 207.422580][T10920] tc_dump_action: action bad kind [ 207.583284][T10922] bridge3: entered promiscuous mode [ 207.591765][T10922] bridge3: entered allmulticast mode [ 208.014296][T10931] syzkaller0: entered promiscuous mode [ 208.040069][T10931] syzkaller0: entered allmulticast mode [ 208.442684][T10952] sctp: [Deprecated]: syz.0.1311 (pid 10952) Use of int in max_burst socket option deprecated. [ 208.442684][T10952] Use struct sctp_assoc_value instead [ 208.475977][T10952] sctp: [Deprecated]: syz.0.1311 (pid 10952) Use of int in max_burst socket option. [ 208.475977][T10952] Use struct sctp_assoc_value instead [ 208.794771][T10974] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 208.886425][T10974] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 209.022071][T10974] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 209.133744][T10974] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 209.333405][ T6278] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 209.396570][ T1103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 209.423534][ T1103] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 209.491431][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 209.600260][T11018] x_tables: duplicate underflow at hook 2 [ 209.747512][T11030] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 210.337695][T11042] netlink: 'syz.0.1333': attribute type 32 has an invalid length. [ 210.467896][T11042] bond5: Setting coupled_control to off (0) [ 210.752254][T11058] __nla_validate_parse: 9 callbacks suppressed [ 210.752274][T11058] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1338'. [ 210.859249][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1339'. [ 210.869425][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'. [ 210.925522][T11065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1334'. [ 210.931917][T11061] ip6gretap1: entered allmulticast mode [ 210.970862][T11067] rdma_rxe: rxe_newlink: failed to add lo [ 210.977819][T11069] netlink: 'syz.2.1341': attribute type 33 has an invalid length. [ 211.002287][T11071] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 211.010908][T11069] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1341'. [ 211.641376][T11067] wg1 speed is unknown, defaulting to 1000 [ 211.649669][T11067] ip6_vti0 speed is unknown, defaulting to 1000 [ 211.831457][T11092] geneve2: entered promiscuous mode [ 211.932551][ T1103] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 211.965354][ T1103] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 211.990173][ T1103] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.034110][ T1103] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.189062][T11103] netlink: 'syz.3.1348': attribute type 11 has an invalid length. [ 212.318017][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 213.222297][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'. [ 213.252218][T11160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1360'. [ 213.824581][ T980] IPVS: starting estimator thread 0... [ 213.920054][T11175] IPVS: using max 34 ests per chain, 81600 per kthread [ 214.204260][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'. [ 214.230464][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'. [ 214.479543][ T5830] team0: Port device syz_tun removed [ 214.805240][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 214.956500][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 215.056714][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 215.093201][T11203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.136021][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 215.163268][T11202] lec:lec_atm_close: lec0: Shut down! [ 215.461439][ T36] [ 215.463809][ T36] ============================================ [ 215.469975][ T36] WARNING: possible recursive locking detected [ 215.476176][ T36] syzkaller #0 Not tainted [ 215.480606][ T36] -------------------------------------------- [ 215.486803][ T36] kworker/u8:2/36 is trying to acquire lock: [ 215.492797][ T36] ffff8880272bd158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 215.502749][ T36] [ 215.502749][ T36] but task is already holding lock: [ 215.510212][ T36] ffff88802a026158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 215.512539][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.520081][ T36] [ 215.520081][ T36] other info that might help us debug this: [ 215.520093][ T36] Possible unsafe locking scenario: [ 215.520093][ T36] [ 215.520098][ T36] CPU0 [ 215.520102][ T36] ---- [ 215.520106][ T36] lock(&qdisc_xmit_lock_key#4); [ 215.520127][ T36] lock(&qdisc_xmit_lock_key#4); [ 215.520143][ T36] [ 215.520143][ T36] *** DEADLOCK *** [ 215.520143][ T36] [ 215.520148][ T36] May be due to missing lock nesting notation [ 215.520148][ T36] [ 215.520154][ T36] 11 locks held by kworker/u8:2/36: [ 215.520165][ T36] #0: ffff888053e0a148 ((wq_completion)bond8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 215.520213][ T36] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 215.520258][ T36] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 215.520308][ T36] #3: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 215.520360][ T36] #4: ffff888054a35228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 215.520411][ T36] #5: ffff88802a026158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 215.520459][ T36] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.520504][ T36] #7: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0x1000 [ 215.528830][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.535601][ T36] #8: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 215.535657][ T36] #9: ffffffff8df41b00 [ 215.543799][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.546367][ T36] (rcu_read_lock_bh [ 215.550416][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.554659][ T36] ){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0 [ 215.560453][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.567826][ T36] #10: ffff8880319fc228 [ 215.579603][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.581324][ T36] (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0 [ 215.592588][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.605009][ T36] [ 215.605009][ T36] stack backtrace: [ 215.605026][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 215.605044][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.605057][ T36] Workqueue: bond8 bond_alb_monitor [ 215.605086][ T36] Call Trace: [ 215.605094][ T36] [ 215.605104][ T36] dump_stack_lvl+0xe8/0x150 [ 215.605128][ T36] print_deadlock_bug+0x279/0x290 [ 215.605152][ T36] __lock_acquire+0x2540/0x2cf0 [ 215.605174][ T36] ? __pfx_netif_skb_features+0x10/0x10 [ 215.605197][ T36] ? unwind_next_frame+0xa5/0x23d0 [ 215.605223][ T36] ? sch_direct_xmit+0x153/0x4b0 [ 215.605240][ T36] lock_acquire+0x107/0x340 [ 215.605258][ T36] ? sch_direct_xmit+0x153/0x4b0 [ 215.605281][ T36] _raw_spin_lock+0x2e/0x40 [ 215.605307][ T36] ? sch_direct_xmit+0x153/0x4b0 [ 215.605323][ T36] sch_direct_xmit+0x153/0x4b0 [ 215.605344][ T36] ? __pfx_sch_direct_xmit+0x10/0x10 [ 215.605361][ T36] ? kmalloc_reserve+0xbd/0x290 [ 215.605379][ T36] ? arp_send_dst+0x70/0x340 [ 215.605399][ T36] ? arp_solicit+0xbbd/0xe10 [ 215.605423][ T36] __dev_queue_xmit+0x1379/0x31c0 [ 215.605447][ T36] ? bond_alb_monitor+0x3e4/0x1800 [ 215.605475][ T36] ? __dev_queue_xmit+0x289/0x31c0 [ 215.605501][ T36] ? __lock_acquire+0x6b6/0x2cf0 [ 215.605526][ T36] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.605552][ T36] ? rcu_is_watching+0x15/0xb0 [ 215.605583][ T36] ? NF_HOOK+0x9e/0x3a0 [ 215.605605][ T36] NF_HOOK+0x310/0x3a0 [ 215.605626][ T36] ? __pfx_arp_xmit_finish+0x10/0x10 [ 215.605647][ T36] ? NF_HOOK+0x9e/0x3a0 [ 215.605666][ T36] ? __pfx_NF_HOOK+0x10/0x10 [ 215.605686][ T36] ? lock_acquire+0x107/0x340 [ 215.605703][ T36] ? arp_xmit+0x23/0x270 [ 215.605729][ T36] arp_xmit+0x16c/0x270 [ 215.605747][ T36] ? arp_xmit+0x23/0x270 [ 215.605774][ T36] arp_solicit+0xbbd/0xe10 [ 215.605799][ T36] ? arp_solicit+0xfc/0xe10 [ 215.605820][ T36] ? __pfx_arp_solicit+0x10/0x10 [ 215.605843][ T36] ? __neigh_event_send+0xed6/0x1520 [ 215.605862][ T36] ? __pfx_arp_solicit+0x10/0x10 [ 215.605884][ T36] __neigh_event_send+0xf3e/0x1520 [ 215.605907][ T36] neigh_resolve_output+0x198/0x750 [ 215.605927][ T36] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 215.605951][ T36] ip_finish_output2+0xbb6/0x1000 [ 215.605972][ T36] ? ip_skb_dst_mtu+0x917/0xb70 [ 215.605992][ T36] ? ip_finish_output2+0x3d0/0x1000 [ 215.606011][ T36] ? ip_finish_output+0x33a/0x3f0 [ 215.606030][ T36] ip_output+0x29f/0x450 [ 215.606048][ T36] ? ip_output+0x5b/0x450 [ 215.606065][ T36] iptunnel_xmit+0x5f8/0xa90 [ 215.606098][ T36] ip_tunnel_xmit+0x1c41/0x2390 [ 215.606122][ T36] ? __lock_acquire+0x6b6/0x2cf0 [ 215.606148][ T36] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 215.606168][ T36] ? gre_build_header+0x3fd/0xa40 [ 215.606193][ T36] ? __pfx_gre_build_header+0x10/0x10 [ 215.606213][ T36] ? iptunnel_handle_offloads+0x2fd/0x630 [ 215.606242][ T36] gre_tap_xmit+0x590/0x7a0 [ 215.606264][ T36] ? __pfx_gre_tap_xmit+0x10/0x10 [ 215.606287][ T36] dev_hard_start_xmit+0x2cd/0x800 [ 215.606317][ T36] sch_direct_xmit+0x241/0x4b0 [ 215.606337][ T36] ? __pfx_sch_direct_xmit+0x10/0x10 [ 215.606354][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 215.606381][ T36] __dev_queue_xmit+0x1379/0x31c0 [ 215.606408][ T36] ? __dev_queue_xmit+0x289/0x31c0 [ 215.606438][ T36] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.606463][ T36] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 215.606488][ T36] ? kmem_cache_alloc_node_noprof+0x48c/0x720 [ 215.606522][ T36] ? __alloc_skb+0x27e/0x3a0 [ 215.606542][ T36] ? alb_send_lp_vid+0x13a/0x530 [ 215.606569][ T36] alb_send_lp_vid+0x328/0x530 [ 215.606598][ T36] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 215.606627][ T36] ? __lock_acquire+0x6b6/0x2cf0 [ 215.606648][ T36] alb_send_learning_packets+0x10d/0x2c0 [ 215.606675][ T36] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 215.606701][ T36] ? bond_alb_monitor+0xf1/0x1800 [ 215.606729][ T36] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 215.606756][ T36] bond_alb_monitor+0x3e4/0x1800 [ 215.606785][ T36] ? bond_alb_monitor+0xf1/0x1800 [ 215.606808][ T36] ? process_scheduled_works+0x9ef/0x1770 [ 215.606827][ T36] ? __pfx_bond_alb_monitor+0x10/0x10 [ 215.606854][ T36] ? process_scheduled_works+0x9ef/0x1770 [ 215.606871][ T36] ? process_scheduled_works+0x9ef/0x1770 [ 215.606889][ T36] process_scheduled_works+0xad1/0x1770 [ 215.606919][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.606936][ T36] ? do_raw_spin_lock+0x121/0x290 [ 215.606966][ T36] worker_thread+0x8a0/0xda0 [ 215.606990][ T36] ? __kthread_parkme+0x7b/0x200 [ 215.607014][ T36] kthread+0x711/0x8a0 [ 215.607037][ T36] ? __pfx_worker_thread+0x10/0x10 [ 215.607056][ T36] ? __pfx_kthread+0x10/0x10 [ 215.607078][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.607104][ T36] ? __pfx_kthread+0x10/0x10 [ 215.607126][ T36] ret_from_fork+0x510/0xa50 [ 215.607144][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 215.607160][ T36] ? __switch_to+0xc9e/0x1480 [ 215.607186][ T36] ? __pfx_kthread+0x10/0x10 [ 215.607208][ T36] ret_from_fork_asm+0x1a/0x30 [ 215.607240][ T36] [ 215.765017][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.795724][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.810822][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.816247][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.820802][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.825379][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.850454][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.212553][T11235] wg1 speed is unknown, defaulting to 1000 [ 216.213759][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.219075][T11235] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.318032][T11234] wg1 speed is unknown, defaulting to 1000 [ 216.333190][ T13] bridge_slave_1: left allmulticast mode [ 216.338872][ T13] bridge_slave_1: left promiscuous mode [ 216.455123][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.521914][ T13] bridge_slave_0: left allmulticast mode [ 216.527618][ T13] bridge_slave_0: left promiscuous mode [ 216.533695][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.604435][ T13] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 216.616580][ T13] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a2:c9:ab:e1:c5:2f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 216.640079][ T13] bond5 (unregistering): (slave erspan0): making interface the new active one [ 216.726877][ T13] bond5 (unregistering): (slave erspan0): Releasing active interface [ 216.749316][ T13] bond8 (unregistering): (slave gretap3): Releasing active interface [ 216.757796][ T13] gretap3 (unregistering): left promiscuous mode [ 216.764912][ T13] gretap3 (unregistering): left allmulticast mode [ 216.902491][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.912087][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.922036][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 216.931008][ T13] bond0 (unregistering): Released all slaves [ 216.939563][ T13] bond1 (unregistering): Released all slaves [ 216.948691][ T13] bond2 (unregistering): Released all slaves [ 216.958860][ T13] bond3 (unregistering): Released all slaves [ 216.968718][ T13] bond4 (unregistering): Released all slaves [ 217.051582][ T13] bond5 (unregistering): (slave veth5): Releasing active interface [ 217.060915][ T13] bond5 (unregistering): Released all slaves [ 217.069661][ T13] bond6 (unregistering): Released all slaves [ 217.078418][ T13] bond7 (unregistering): Released all slaves [ 217.091643][ T13] bond8 (unregistering): Released all slaves [ 217.117703][T11234] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.281729][T11234] chnl_net:caif_netlink_parms(): no params data found [ 217.333694][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.341147][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.348341][T11234] bridge_slave_0: entered allmulticast mode [ 217.356244][T11234] bridge_slave_0: entered promiscuous mode [ 217.364299][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.371787][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.379028][T11234] bridge_slave_1: entered allmulticast mode [ 217.387988][T11234] bridge_slave_1: entered promiscuous mode [ 217.459364][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.474629][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.497155][T11234] team0: Port device team_slave_0 added [ 217.504831][T11234] team0: Port device team_slave_1 added [ 217.522056][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.529011][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.555295][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.567722][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.577476][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.603662][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.642003][T11234] hsr_slave_0: entered promiscuous mode [ 217.648415][T11234] hsr_slave_1: entered promiscuous mode [ 217.656819][T11234] debugfs: 'hsr0' already exists in 'hsr' [ 217.662976][T11234] Cannot create hsr debugfs directory [ 217.753755][T11234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.762770][T11234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.772303][T11234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.781469][T11234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.798765][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.805869][T11234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.813242][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.820330][T11234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.852810][T11234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.865493][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.873256][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.885538][T11234] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.896143][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.903237][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.914435][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.921524][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.024480][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.138431][T11234] veth0_vlan: entered promiscuous mode [ 218.147546][T11234] veth1_vlan: entered promiscuous mode [ 218.166531][T11234] veth0_macvtap: entered promiscuous mode [ 218.176343][T11234] veth1_macvtap: entered promiscuous mode [ 218.188966][T11234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.199517][T11234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.211011][ T6274] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.221740][ T6274] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.231189][ T6274] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.241986][ T6274] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.262565][T11234] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 218.279345][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.281657][T11234] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 218.296035][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.310792][ T5823] Bluetooth: hci4: command tx timeout [ 218.315189][ T6273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.324816][ T6273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50