last executing test programs: 2m1.514593684s ago: executing program 0 (id=8066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x22020600) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000600)=@ccm_128={{0x304}, "e9e73e0f55297379", "c1d3f5fe5b2ef53e043b4b8dd64d99b0", "671e6ee6", "39102f02ca3f3532"}, 0x28) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00'], 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000680)=0x3, 0x4) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001080)={0x0, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000000000002004e20e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e23ac1e010100000000000000000000000000000000000000000000000000000000bb00"/272], 0x110) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@deltclass={0x78, 0x29, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x7ffb, 0xb}, {0xfff2, 0x5}}, [@TCA_RATE={0x0, 0x5, {0xa, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @TCA_RATE={0x6, 0x5, {0x5, 0xbd}}, @TCA_RATE={0x0, 0x5, {0xb, 0x40}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_sfq={0x8}]}, 0xfffffffffffffd29}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0xfff1, 0xf}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x20044800) bind$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r6, 0x3) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) write$tun(r0, &(0x7f0000000500)={@val, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xfffffffe, 0x5865}}}}}}}, 0x42) 1m52.376555963s ago: executing program 1 (id=8086): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xffae9965a9104e91}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0xc20, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xb2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xc}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x80001) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) close(r10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a1180003", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x388, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x34c}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x40c}}, 0x40000) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848180000005e140602000000000e000a0010000000028000fd1294", 0x2e}], 0x1}, 0x80054) sendmsg$nl_route(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000070d27bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/270], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 1m50.488727412s ago: executing program 0 (id=8088): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x772}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000900)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r5, 0xfff) accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x800) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)='\t', 0x1, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x2, 0x3}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) 1m50.109588719s ago: executing program 4 (id=8092): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000001}) (fail_nth: 36) 1m49.664288926s ago: executing program 4 (id=8093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10007ff}, 0x94) 1m49.54869642s ago: executing program 0 (id=8094): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='*\x8b\x00', &(0x7f0000000040)='-\x00', 0x9}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='.{\x00', 0xc0, &(0x7f0000000100)={@align=0x9, {0x5, 0x7, 0x0, 0x1ff}}, 0x543d82ac, &(0x7f0000000140), &(0x7f0000000180)=0x6}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x1, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000012c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000003180)) sendmmsg$inet(r2, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001900)="0ab39eb4e7efd653b0872de537bf28cda60796244b1f0dc14ef51dd7eb8aea93c576d9b067495e1abd5d32e3cb1a584bf2c7669ddc0074e4df1d1ff0ce17d3516a8fa86cf936110e093bd6da4055e87d2ff928bdb7d648103ed906c56d14a3311926c9b9742f35", 0x67}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003080), 0x0, &(0x7f00000031c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x20}}], 0x2, 0x40054) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000006280)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006300), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f0000006380)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84010}, 0x0) 1m49.482406157s ago: executing program 4 (id=8095): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x891b, &(0x7f0000000840)={@empty, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x5, 0x8, 0x2, 0x0, 0x3, 0x400148}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xffffffffffffff94, 0x0, 0x0, 0xfc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x40, 0x0, @void}}}}}}}}, 0x36) pselect6(0x40, &(0x7f0000000100)={0x2a, 0xe, 0x14, 0x3, 0x80000003, 0x2c0, 0x4baf, 0x2}, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) 1m49.137968546s ago: executing program 0 (id=8098): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) (async) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m48.753442344s ago: executing program 1 (id=8101): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140f, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) (async) listen(0xffffffffffffffff, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xa}]}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m48.55199561s ago: executing program 1 (id=8102): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='*\x8b\x00', &(0x7f0000000040)='-\x00', 0x9}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='.{\x00', 0xc0, &(0x7f0000000100)={@align=0x9, {0x5, 0x7, 0x0, 0x1ff}}, 0x543d82ac, &(0x7f0000000140), &(0x7f0000000180)=0x6}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x1, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000012c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000003180)) sendmmsg$inet(r2, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001900)="0ab39eb4e7efd653b0872de537bf28cda60796244b1f0dc14ef51dd7eb8aea93c576d9b067495e1abd5d32e3cb1a584bf2c7669ddc0074e4df1d1ff0ce17d3516a8fa86cf936110e093bd6da4055e87d2ff928bdb7d648103ed906c56d14a3311926c9b9742f35", 0x67}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003080), 0x0, &(0x7f00000031c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x20}}], 0x2, 0x40054) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000006280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000006300), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006340)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={0x0}, 0x1, 0x0, 0x0, 0x84010}, 0x0) 1m48.166731826s ago: executing program 1 (id=8104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x4c, 0x12, 0x1, 0x70bd25, 0x25dfdbfe, {0x29, 0x63, 0x8, 0x67, {0x4e24, 0x4e24, [0x8, 0x5, 0x6, 0x9], [0x8, 0x1, 0xd, 0x6], 0x0, [0x8c7e, 0x1]}, 0x4, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020642500000000002020207b1af8ff00000000bfa10000000000000001000000ffffffb702000008000000b703009724cba263b4000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xb8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x80, 0x2, [@TCA_ROUTE4_ACT={0x7c, 0x6, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 1m48.102948758s ago: executing program 2 (id=8106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf", 0x86}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="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", 0xe00}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f53", 0xe1}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m48.03935024s ago: executing program 2 (id=8107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "8eeb"}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b0016"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x0) 1m47.624909915s ago: executing program 2 (id=8109): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newchain={0x24, 0x1e, 0x601, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0x8, 0xe}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48884}, 0x4c084) socket$igmp(0x2, 0x3, 0x2) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x600000}, 0x8) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x977, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001160000000000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x9c) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) bind$llc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000180)=[{{0x2, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1}, {0x2, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x18) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1m47.57476982s ago: executing program 3 (id=8110): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000840)=0xc64e, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) close(0x3) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffffb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}], 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x72bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x8}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000009006000000000000000300000a38000000090a010200000000000000000000000508000a40000000000900020073797a3100000000080005400000000008000a4000000003140000000500010000000000000000000084000a7db2c82c99678741dcc106b7f0075d9699983acc6655f80dbe87880a0cbc4db2abf9af5db6c86e28cab1483699568202e57923718cdd33c27e6f26483ec4ae809cb3e135ffec7fad6e9f2400bc6262a75605c9ba38ec37a375cc1fbfd17341c575893d34da0a00d63b4ad2bab06238e6cd8fee0edb075059b05a03fecec4d1e9a46b404ea5db63d46e4e0700"], 0x60}, 0x1, 0x0, 0x0, 0x8805}, 0x810) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010024010000340200000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) write$nci(r10, &(0x7f0000000900)=ANY=[@ANYBLOB="428001"], 0x5) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0xfffffffe, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xffffff9a}, {0x4}, {0x4}, {0xc, 0xb}, {0xb, 0xa}}}]}]}, 0x48}}, 0x0) 1m47.200140724s ago: executing program 3 (id=8111): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2e, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}]}, 0x24}}, 0x2004c000) 1m47.199766234s ago: executing program 3 (id=8112): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d6a1cf16cf7e6f45924e9d285da684857411a5b3d53f20d6832d37683ab1b1f2a822108", 0x92}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503e38701", 0xc0}, {&(0x7f0000000400)="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", 0xeef}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {&(0x7f0000002a00)="fb4efd86a665c4eda2f7e8678caf44d7e292753af1468aaf5d68d18ba453b469a795d897e41e6fb2da50d2a29a909018c1f29ff4a9bea54f463bc14b77fb51b939871bf3ac8200020de63c5d376f96301bd95b3befa615981422ce8fc83d378bed216560f9eea8c9ee0b62975faed0960de6fba5b92adc71189f5f1b1145ca74bae5f96d95a79d0a377bc54c56d9b8e8c0a812d229331e87962c5b91c903dc31f4afa83c0290d443da3f9b3919c121670904ffa8dcc19d55cc299b9d0753752369254ed356a0769efe6b64ae8aaac107ec4ef9e877d2a43a631972fa4072824b12616d43ed1e7672dd04c15dc48ec388e47624600a7f185fda1402459c27bbb48513c4ce5ad98fa2e347945145ac767e279e43b988ebaf39515e829425dbf8d66153af8cfec336da7f7556e3cd599699b72098758535fcb9d6584e20a24d14548065d295dbcffd871829", 0x14a}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b", 0x64}, {&(0x7f0000001700)="567dde672061bf3404515d0852fd1d1f17ccfa51f23ae8fc7318bb8f550b9e0b2e3af9f50d1c0ccbe76adc32baeee13e8f009c6fe2eb40759f8385a1938e95ffbc67cc59819f5509b4b76204741df20894b1a81a77247a1eb6707d10a31168935ed151cafc78aacfc5ab2a1fe8410352369fff3112495a19d0d18c910adcca16ec1c110e383ab9c4b76f26701d399ea8cd3e30d044cd300b666c5929fbca2e52d4b480a9df35b76ae60f7dd5b5585eced76c2b5847b1b1676c5bd1c0e9eb87", 0xbf}], 0x5}}, {{&(0x7f0000001880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40) close(r2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c4) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "09eef577cf8bf3c3", "3eaa363d71f8ed8769fde868e956aa0a5d0782e1b448ef2f4533a8eeff2c4466", "792a58eb", "07be79acb0cff47a"}, 0x38) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) 1m47.03668839s ago: executing program 2 (id=8113): recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x629f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088}, 0x40081c4) 1m46.76100849s ago: executing program 3 (id=8114): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='*\x8b\x00', &(0x7f0000000040)='-\x00', 0x9}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='.{\x00', 0xc0, &(0x7f0000000100)={@align=0x9, {0x5, 0x7, 0x0, 0x1ff}}, 0x543d82ac, &(0x7f0000000140), &(0x7f0000000180)=0x6}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200)=0x1, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000012c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000003180)) sendmmsg$inet(r2, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001900)="0ab39eb4e7efd653b0872de537bf28cda60796244b1f0dc14ef51dd7eb8aea93c576d9b067495e1abd5d32e3cb1a584bf2c7669ddc0074e4df1d1ff0ce17d3516a8fa86cf936110e093bd6da4055e87d2ff928bdb7d648103ed906c56d14a3311926c9b9742f35", 0x67}], 0x1}}, {{&(0x7f0000002b00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003080), 0x0, &(0x7f00000031c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x20}}], 0x2, 0x40054) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000006280)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006300), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000006340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f0000006380)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84010}, 0x0) 1m46.760472937s ago: executing program 3 (id=8115): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x41) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x9}, 0x9, 0x8, 0xc, 0x8, 0x0, 'syz0\x00', "c403ae7a9da892a8cdc411b0587e38b83420c877002d301fb27ce82105b3a58d", "e00ea81bc5e483e1b285772fa80ca5516f4b3c6d8706bcab867fb5cf5e93948d", [{0x0, 0x9, {0x2, 0xc949}}, {0x3, 0x8, {0x0, 0xfff}}, {0x4, 0x3, {0x3, 0x6}}, {0x0, 0x9, {0x0, 0x400}}, {0xc21, 0x4, {0x1, 0x88}}, {0x8, 0x2f, {0xe58c1ab3117f93bf, 0x5}}, {0x7, 0x9, {0x1, 0x7}}, {0xff, 0xe8d, {0x2, 0x1}}, {0x9, 0x101, {0x3, 0x80000001}}, {0x8001, 0x2, {0x0, 0x4}}, {0x9, 0x1, {0x2, 0x8}}, {0xc, 0xfd, {0x3, 0x735}}, {0x87, 0xf, {0x3, 0x8000}}, {0x7f, 0x2, {0x1, 0x2}}, {0x9, 0x2b8, {0x1, 0x9}}, {0x3, 0x4, {0x3, 0x1}}, {0x3, 0x4, {0x1, 0x2}}, {0x3, 0x0, {0x2, 0xfffff000}}, {0x4fd8, 0xffff, {0x2}}, {0x7fff, 0x8, {0x2, 0x8}}, {0x100, 0x4, {0x0, 0x3}}, {0x1, 0x7ff, {0x2, 0x5}}, {0x9a, 0x3ff, {0x0, 0x80}}, {0x8, 0x6, {0x2, 0x3}}, {0x0, 0x2, {0x3, 0xffffffff}}, {0x401, 0x9, {0x3, 0x9862}}, {0x4, 0x7f, {0x3, 0x7}}, {0x5, 0xf6, {0x1, 0x3520}}, {0xba, 0xff, {0x1, 0xb}}, {0x3, 0xd68, {0x2, 0x6}}, {0xde, 0xb29, {0x2, 0x10000}}, {0x2, 0x1000, {0x2, 0x4}}, {0x27, 0x9, {0x2, 0x80000000}}, {0x8, 0x4, {0x0, 0x92f}}, {0xfd33, 0x7, {0x0, 0x7ff}}, {0x1, 0xd4, {0x2, 0x3}}, {0x40, 0x7fff, {0x1}}, {0x7f, 0x2f, {0x3, 0x2}}, {0x200, 0x7ff, {0x3, 0x5}}, {0x2, 0x5, {0x3, 0xfffff001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1m45.711859504s ago: executing program 2 (id=8116): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001010000000000020400"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x845}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m45.711427603s ago: executing program 0 (id=8117): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000248bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m45.693305029s ago: executing program 4 (id=8118): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r2, r1, 0x25, 0x8, @void}, 0x10) 1m45.663947391s ago: executing program 1 (id=8119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1m45.571351598s ago: executing program 2 (id=8120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="e24fc801dffdf37981a92f7f4005844301258a0ec141f1ec014bd9d03d1db52a75dfb8e04daddc3fac31adda350235262d9e1b8e20d406b97372033032d7623ff84bbf544a91c12eb644b323e9653fd76852c025e718cc91d9e9e274a7ed2dc15d8efec8d11a7983cdc8f3c39dbf764fc28873b760c435743929653c359ee706dcf2658403b25fbf3382f179562dc64883887ead6a916ef430ee4f67e21a3f01a3a35627bfb2f6ba204da0280c9f2fb5443879616a431884af82606286c4760a9ef4aa264e0000137f28dbe594332062120a76b565165987eef46c1d523f0fba98cd51f14537e313952f76574e3137aa1b41ae8e16f4087ddbaa7de98ca609a1b01b64ab10613204e4d18f376138fe7735ffb2fa09843922ce5a365e1e84286f09c432e0f521be13182256dcf534e03efb1735e55a8dce53e32ac669207d21e3b79414a8e61204f7c4173f2381e4c5e6cce12f6bae60d5bff199d5da50e40f87efbcec332173caba740a1b12c915bccf04940399b9a72a7dca4b8c7d46a2c444f6c7e30cf1f811a4a31cabb9b512a949105e2aa4081a3d613ad9ae4cf209d684e4b27c204bc5a395da552b8638df42d4c3522b64eaf11c988fce5634757ed41b39c338aea3ed2171e86fd34cde22dc3519edd2108641f3c3d4ca2016524b8f7d67e80ef5474d0a4a157eca9e5c0c5fcd7f459f64e91effe3bbcdcf9aba5704952cf0b82b1b0d4533a9c7ddc914bc7dfd8eea591be5806408191e3cca1cd6101f575b7c7206cd219b9f379fc3d03c3c867e5c36a8fcc75e86988a1897876b5a3bb2b3e102a742ebaeb50e08096c1990fa8d8755c187f86213f3cfc322f7997da73594e30f68a1da5768201916dfd52711ad79caae751260cc054dda58307f4031aebc75514795e6d7ae7725c27f7bc8f1e2115603e1f8b18517a74ddd901752a194cfb37535c949f4a5eefc98b231e03fd7a5d7643817567c7fbdcad37365a1a063c11bfd7e6474e9608391f3f3ebcd97a3ad7a9873d8615a9a4dac09ebc528b9277f71d5c2e6012645c643764319941206e6957987b5423b3864e6acb89c0e0371d66c5e16dfd920305cf5dc39ea0d48cea652236f3492f5b60a2a648e8ac61bf13811a81be593e430f504d0fe3d38222acd10e188605410900c55f203e0f6d553cf4e7cdfdfdbf4b60ee166c8be15757c6042f7f7b0c0c75932f795b075ba4116f1336622bafc47e58206255af610b3a7e88fed94a1c4a8b29e7e379b084431d5e059c0d0342678ef5b2ad08d10be3b48e4a1d0de16e8ca0175e1453fa15f8086f7b93d15e5f0769d56cbcec255fd1e82c43a61d50b893a8e7bc84c7cc1b9cffbc4d8f8d703d1ca879acf93e82f35a534665bd5a5a9e13e35ed00d796b830c45f87ba6c90857d05774506611c940e391752237af000473cfff41236801a9e78c48206e03e2a4b1c9164eb1f8cfb71d1559d3b5650327868ef87906b5a0e05470b0655f51090a57a65895608866ac0e008c44898ea0fa968ae510b561b8ebb9f0a38c2572f93aa6a8f5aaab1ff62ad761af234379adfc397c186a99bbecd534266358c5e053de4698e37fb0c512d72492c6f0d18e686c21665224d23fb6b15670e235a96bab63d63df51624f73d78fc38e0c8956882ebbbe0207f3b13be74b70ef29e64912cac49dd90a7f4d5fd09bec08dcb8413578f9e4456079c3673ffd33b366d4a203af63f25ba792a722a4d36749c6724e0b37cfd71761f3ff122861e362aab7a26a8c8090b65ab080535fa912d5b58a9b65410b94acc42396796e35a308cac7594439f4ed2afc8cc4676159751d9ce63ff894a7cad95b375f852d9bd493719ab9bac41cd9ec817b835628a6a9f4869fc9ce72ea3fc7119341ceaf23e85f7a990b7eeb35ef2ef2c84f6fafa0c186a0b2490c72cfe2ce7607634e0d651e4c87514a177300f4f3b762e386cc1522e9b859fb9297329a73b89b8a97184864823d1829fe7a6bf30c69f24b61338e3f341e05e3f70ec6cd6f3544652f69ade293dc896836632271cde36ebb6f515dc8d13121def9d2911ed0d19f2fc31a12b1de3b43dbfb32c0df664c85d4b978f3a41b43546844c8581590dade2db066d5a948a386438232b0be334232800fd164aac8047a96b85356820597a0ef21b2df300a8ef2a08155b7a8eb7793e5ec768db868432c9d65cd748369f24909862131553af695be43c95f2e65a9ef1f8fbad3d03bee4640639c0351c6ed58113b86ec0530aff32f4e4b786285ce72afd6dce83b3a82f58a0bc62735e3402848690d2865438c81f174588e6046ba95935ec0dfbbbb87dda17d8fdcf07b8322bdf18b1421293ead6a8b38119724c9c122f457f85129cbd50338a7e3194418c00ed91cd39878f7753477a17856281ae743c8dcdfc7d5c7142348f9fae4f7767f2c89c394c3fd5d8f261bde3b2055ccddf05c36643e21ec542a62be492501b470813fcedf01c876da0e1e822c3867f32951053f2963b5d1f90e713df0b2c526f36e685b4153d4ae4e8c607df1308c84e500c0bd9fe80dc3cf28187a39fd09643afb25eaa9411f3ce6304dc8bfd02afc9a6bad59887a1cad44a1f613a0779059a90248f09e357af291b1cce42cb9ac766dac70e599c1bbba4a58715adf2426a865eb1e0b80f10602db39c400b45131700490a9c38345022acc79851c2368bc7d191bc1f995722c564198669a68c971f60779e6983508a7c8077cdc7677d9a8b70b8fd1183f57cbc2d653ef6e96110c0c6730be7add59392b4082a6478447cc307d35512dfb2c4e27122b9749eeed9b5a5906f99ee57d7b565822bd4d78aed8f1567409a59ae77b3a1552a5cdb1558ff3ffd2b4cd0e141fce5ad11de5509c6dac5858bbb222bc403e3a307294afbe9633e162bfc5231284f58d475ef19cc1012cb4a81bd26e7e24509ecb5bd859a04a8e39f373188fc58573a52bf8a5de50aa082a4ad28202d01da2f0c7d3a6d1d3b9c3dab9d3ad9a663af4894904236632514d668e5f5016a350ae5accae2902cb9cba8d5262abc4e934329f410739831d447b798bb1da19bd3c98e90f43e54b8911ab9da8d594c9d0617396a53469ec2eb6ca0843ffd39e65b79bf856c755d8fda71b66e16cba537adac14de21a16a379513555d13ee6e021e6bb1cb5db35a7cb0162c3dbf631e8b6b42cc98fba74396971be184b910dbf0fbc29c0e45acfe59c789a134bcc01f7c3b2513d4ef988e7f66e5002d9ee8766870b9502d173953b78b654f020349b7af7845462822a6c78a63416606a265389216f141ca8269a11f18edf1d11de7f11906b787a0189a4fe5a55bb0f78c25319583b5f81c4ad25dd4544d35a2f8afce5b8a117b16104c45997f9ad31421414006f158881e9c7f553f3b7364e274bff39236720d67346e8270b2fd6b5b33c0cece3251b62ec09c709ad1adee626e43a54356b803adf23e45ddbe2bbade69974ca43c3f2246389612398a5247678299995592002f369b0a779ffa60d0785edecab597cb6fa11e2ce68d5e956c5fe95c12ce24cb334a2d1fe9e63491b7d85d58ba4150df6c42f29223eaa607837fee3c71667d7c4a69d5bd2a88e548429e4630c59c38689a52cbc9099f303d680c053cce1a0b24c17a918f7dd08a9348a414e30c8c91e9680facb185914018e1c5a090cd00578c837d9f69e49eae3e45326b679678cca81ca20cf3bfa8e4e548dc446d168382695319ea9fdc14bf29c2b15e2acb925f7db4723f6b382efcbdb10f00837278564a2d0e0da63b755206bdf69faba7e5d7406ec324ca089729a68ca29cbccd17256cb465b91e718b3b64429b8a8e70a72d85b470d85f4b8169ebc74809334db04384c3c2887f09374e60cb3d5c93f3ce5077bcea293b37215ba345f6a30b1d6e08c1cf7024b65ecac5063e177d9af7f687a35c377871d87b00fe7c453199e5c0588a49bf9981651f57468bb37d1812cce02cf1a6df234cf50aabb65959fb7863384d46cbf43600aeb2858a8bea733eec75bcf02f2dfc0c2df6b6c0f807236e67cf6e7253a6f0582cad219daad67c91b8c2f38ad91a9db3bc284f6301f28ad3d1ade08cfc4a8b63268de502d7b4cad5973ce2867a534e576789fe2bd60b15da33d7a5a5e728f6e5ab7052c4636439258979a804bf67aec5546343d7cbee90b4be9d5ef0775d64bfade2daae18d7de4240dd1d88ff3816f2d5c871174b3b48e9fab898abd4cd2df8cb1c3cfff889594a3f08cb935031edbe34aab3433ffd50263a406deef158bbabfa2ec70e79c761d95fcfbef0800c95413068b3789c6b12de5ebe9b414e65ce4f86a6bbccd5ec8e4e220f8ad07255abbaef719ebe1e5d066db4dd1f639cb156c34755eb14053824a1003e97ee54e8dab35f441ee563d80d3163a7b8f71d4f17e240cfae9f2e50c164cf373bb174f5dadafe2430a17be757e30f251d5d60863526a8f46addb932c8170c4a383348c5441aa353e5f1181482d4d0cc0e5d2809c11ee1fac29230c907926c2d3fa55298ae9835c46218650421497d060d15a4194c4d7382a886333375098156a9f0fd6b1d0d94933bb6f285fe51d4aa3037739f143ba20f9b326565f6db49787d1aeb30055ce588dd3c008c0bc1a08935c991067d63003b68b9e2db95360d8aaf2103bb5142c590bb799b268488febc7414b9ae8e108ca4ab4f031adbb9fbe4631c29adb14fb9726df3c6192a3e81b6c34d68e15ee309503ccc1ab240d4ce3c9a099cd7f8782eea9bd1c7005582b9c1fe08030b47958865723652fed003c90703e07f9f1782e33f3bf3d0b83691cd5970fb4af65afa2244bff41e93fa24c33c26c43c93c33a2144aac437a4ab2b4f498104278ec5f2cd38de61eb8b436f5a9dbc3d8b2405ff0598cbcaa964377f61daaf935c42e0db4567520cfee195da1c6090d62031dd0865b2f5aa88be1746a761e3a64b78de338b8996136bbd6b859eb730aa8ab1f68bb5a02b713d8b303ab2ef1e5433d225b0dd485d40a049a1953b488df5314fdbc1c654132498838043c35c7b168e786b0f35a04ec4417968c5561", 0xe00}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5b", 0xc5}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295e", 0x46}], 0x1}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m45.475552129s ago: executing program 0 (id=8121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf", 0x86}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f53", 0xe1}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f48", 0x36}], 0x1}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edd", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m45.462424841s ago: executing program 4 (id=8122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x40400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1m45.393922706s ago: executing program 1 (id=8123): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x800004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xb, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffc, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1m37.791704317s ago: executing program 3 (id=8124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65, 0x0, 0x0, 0x0, 0x81}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m31.681994831s ago: executing program 4 (id=8125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000063000200000000000000abfb00000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$xdp(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd070000001ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a8da494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c841d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99ad4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a000000007dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d455bae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a950000000000000000000000003e64c8a48ae215673b928d238ac07b631e793d2bda33a80dfaaf53e6c2dea09fc29a42d2495c4192860e2866615008f74ea070c55f68", 0x427}], 0x2, 0x0, 0x0, 0x14000891}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000300)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="76feffff020601026c1b00000000000000007ff22c0004050001000700000024000780050007000c0000000500150002000000050014000800000008000b4000000404090002007c797a31000000000900230073797a3000000000100003006269746d61703a706f727400090002007379014bcf1f9a2db00bf56269d1467a310000000005000400030000000900021773797a3200"], 0x88}}, 0x2dc256956446ddb) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0xfffffffe, 0xfffffffc}, 0xff5e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (fail_nth: 1) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) 1m25.45691863s ago: executing program 32 (id=8121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf", 0x86}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f53", 0xe1}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f48", 0x36}], 0x1}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edd", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m19.375146574s ago: executing program 33 (id=8123): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x800004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xb, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffc, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1m11.815623873s ago: executing program 34 (id=8120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a4", 0x53}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="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", 0xe00}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5b", 0xc5}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295e", 0x46}], 0x1}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m9.831571656s ago: executing program 35 (id=8124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2c}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65, 0x0, 0x0, 0x0, 0x81}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m6.722634019s ago: executing program 36 (id=8125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000063000200000000000000abfb00000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$xdp(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd070000001ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a8da494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c841d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99ad4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a000000007dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d455bae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a950000000000000000000000003e64c8a48ae215673b928d238ac07b631e793d2bda33a80dfaaf53e6c2dea09fc29a42d2495c4192860e2866615008f74ea070c55f68", 0x427}], 0x2, 0x0, 0x0, 0x14000891}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000300)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="76feffff020601026c1b00000000000000007ff22c0004050001000700000024000780050007000c0000000500150002000000050014000800000008000b4000000404090002007c797a31000000000900230073797a3000000000100003006269746d61703a706f727400090002007379014bcf1f9a2db00bf56269d1467a310000000005000400030000000900021773797a3200"], 0x88}}, 0x2dc256956446ddb) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0xfffffffe, 0xfffffffc}, 0xff5e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (fail_nth: 1) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) 41.099352166s ago: executing program 6 (id=8127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_tracing={0x1a, 0x34, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000100000018110067", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c8b70000850000000600000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x1, 0xb3, &(0x7f0000000a80)=""/179, 0x41100, 0x14, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x400, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x30000, 0xffffffffffffffff, 0x1, &(0x7f0000001400)=[r0], &(0x7f0000001440)=[{0x1, 0x2, 0xf, 0x7}], 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$xdp(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000900)="30ed7b7e387619c5ba0461d1e96149909bbb49758945c7622a041c9422c247341e5b23d365d30c8fbc7109a14e2ccb2f91b594dd35a049a248b6d51f22f91826c911dba4c151dc10b6ec57c52fc3140f5db38432ad91960e87c4c435ed31b1dbdf0d693415930a421a9376d8d365e71e3fd0a9810b5e6265a1db9b27cd84b20b63e2b78800a70defddc04cbf2c958b125e4b605b23c6503eef5483e30b2d415dc400f70d1379fa", 0xa7}], 0x1, 0x0, 0x0, 0x14040896}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000300)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e00, 0x4}}, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1, 0x0, 0xfffffffffffffede}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="76feffff020601026c1b00000000000000007ff22c0004050001000700000024000780050007000c0000000500150002000000050014000800000008000b4000000404090002007c797a31000000000900230073797a3000000000100003006269746d61703a706f727400090002007379014bcf1f9a2db00bf56269d1467a310000000005000400030000000900021773797a3200"], 0x88}}, 0x2dc256956446ddb) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0xfffffffe, 0xfffffffc}, 0xff5e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) 0s ago: executing program 6 (id=8127): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_tracing={0x1a, 0x34, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000100000018110067", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c8b70000850000000600000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x1, 0xb3, &(0x7f0000000a80)=""/179, 0x41100, 0x14, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x400, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x30000, 0xffffffffffffffff, 0x1, &(0x7f0000001400)=[r0], &(0x7f0000001440)=[{0x1, 0x2, 0xf, 0x7}], 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000081) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$xdp(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000900)="30ed7b7e387619c5ba0461d1e96149909bbb49758945c7622a041c9422c247341e5b23d365d30c8fbc7109a14e2ccb2f91b594dd35a049a248b6d51f22f91826c911dba4c151dc10b6ec57c52fc3140f5db38432ad91960e87c4c435ed31b1dbdf0d693415930a421a9376d8d365e71e3fd0a9810b5e6265a1db9b27cd84b20b63e2b78800a70defddc04cbf2c958b125e4b605b23c6503eef5483e30b2d415dc400f70d1379fa", 0xa7}], 0x1, 0x0, 0x0, 0x14040896}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000300)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e00, 0x4}}, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1, 0x0, 0xfffffffffffffede}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="76feffff020601026c1b00000000000000007ff22c0004050001000700000024000780050007000c0000000500150002000000050014000800000008000b4000000404090002007c797a31000000000900230073797a3000000000100003006269746d61703a706f727400090002007379014bcf1f9a2db00bf56269d1467a310000000005000400030000000900021773797a3200"], 0x88}}, 0x2dc256956446ddb) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0xfffffffe, 0xfffffffc}, 0xff5e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): left allmulticast mode [ 757.964937][ T6308] bridge_slave_0: left promiscuous mode [ 758.018082][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.459602][ T6308] dvmrp12: left allmulticast mode [ 758.816291][ T6308] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 758.917503][ T6308] bond5 (unregistering): (slave bridge1): Releasing active interface [ 759.105769][ T6308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.116485][ T6308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.126437][ T6308] bond0 (unregistering): Released all slaves [ 759.136408][ T6308] bond1 (unregistering): Released all slaves [ 759.150398][ T6308] bond2 (unregistering): Released all slaves [ 759.163868][ T6308] bond3 (unregistering): (slave veth9): Releasing backup interface [ 759.173322][ T6308] bond3 (unregistering): Released all slaves [ 759.191009][ T6308] bond4 (unregistering): Released all slaves [ 759.207371][ T6308] bond5 (unregistering): Released all slaves [ 759.221081][ T6308] bond6 (unregistering): Released all slaves [ 759.237302][ T6308] bond7 (unregistering): Released all slaves [ 759.254427][ T6308] bond8 (unregistering): Released all slaves [ 759.267596][ T6308] bond9 (unregistering): (slave veth19): Releasing active interface [ 759.278171][ T6308] bond9 (unregistering): Released all slaves [ 759.313087][T31482] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 759.325734][T31485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.388404][T31431] lo speed is unknown, defaulting to 1000 [ 759.492538][ T6308] tipc: Left network mode [ 759.743371][T31513] __nla_validate_parse: 8 callbacks suppressed [ 759.743395][T31513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6842'. [ 759.807412][T31513] tipc: Invalid UDP bearer configuration [ 759.807486][T31513] tipc: Enabling of bearer rejected, failed to enable media [ 759.912714][T31523] netlink: 'syz.4.6842': attribute type 3 has an invalid length. [ 760.025768][T31531] tap1: tun_chr_ioctl cmd 2148553947 [ 760.298541][T31533] syzkaller0: entered promiscuous mode [ 760.304217][T31533] syzkaller0: entered allmulticast mode [ 760.313287][T31539] netlink: 'syz.4.6846': attribute type 3 has an invalid length. [ 760.388843][T31541] netlink: 'syz.0.6847': attribute type 4 has an invalid length. [ 760.419256][T31541] netlink: 'syz.0.6847': attribute type 4 has an invalid length. [ 760.419873][T31539] block nbd4: NBD_DISCONNECT [ 762.282487][T31553] 8021q: VLANs not supported on caif0 [ 762.314898][T31555] rdma_rxe: rxe_newlink: failed to add bond0 [ 762.321900][T31557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.322375][T31555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6850'. [ 762.697311][T31565] syzkaller0: entered promiscuous mode [ 762.746191][T31565] syzkaller0: entered allmulticast mode [ 762.774111][T31577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6861'. [ 762.799318][ T6308] hsr_slave_0: left promiscuous mode [ 762.902545][T31577] netlink: 'syz.3.6861': attribute type 1 has an invalid length. [ 763.203142][ T6308] team0 (unregistering): Port device team_slave_1 removed [ 763.245055][ T6308] team0 (unregistering): Port device team_slave_0 removed [ 763.448945][T31580] tipc: Enabled bearer , priority 0 [ 763.456551][T31583] syzkaller0: entered promiscuous mode [ 763.465217][T31583] syzkaller0: entered allmulticast mode [ 763.517610][T31577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.557106][T31571] lo speed is unknown, defaulting to 1000 [ 763.580327][T31583] tipc: Resetting bearer [ 763.607905][T31583] tipc: Disabling bearer [ 763.798766][T31601] netlink: 'syz.4.6865': attribute type 21 has an invalid length. [ 763.923632][T31571] lo speed is unknown, defaulting to 1000 [ 763.950468][T31601] netlink: 'syz.4.6865': attribute type 1 has an invalid length. [ 763.986798][T31601] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6865'. [ 764.040788][ T6308] IPVS: stop unused estimator thread 0... [ 764.054457][T31617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6867'. [ 764.091621][ T30] audit: type=1107 audit(1775172506.362:8): pid=31608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 764.105482][T31618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6868'. [ 764.230833][T31622] wg1: entered promiscuous mode [ 764.251537][T31622] wg1: entered allmulticast mode [ 765.233269][T31655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.543660][T31675] lo speed is unknown, defaulting to 1000 [ 765.743058][T31675] lo speed is unknown, defaulting to 1000 [ 766.181585][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6892'. [ 766.389083][T31715] xt_connbytes: Forcing CT accounting to be enabled [ 766.556872][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6902'. [ 766.570024][T31722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6902'. [ 766.571900][T31718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6898'. [ 766.754202][T31735] netlink: 'syz.0.6898': attribute type 1 has an invalid length. [ 766.768123][T31735] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6898'. [ 766.908486][T31747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6906'. [ 767.608854][ T6299] bridge_slave_0: left allmulticast mode [ 767.616713][ T6299] bridge_slave_0: left promiscuous mode [ 767.629423][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.827931][ T6299] erspan0 (unregistering): left allmulticast mode [ 767.890552][ T6299] bond3 (unregistering): (slave gretap1): Releasing active interface [ 767.953026][ T6299] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 768.130713][T31798] netlink: 2120 bytes leftover after parsing attributes in process `syz.2.6928'. [ 768.180389][T31799] netlink: 'syz.1.6927': attribute type 10 has an invalid length. [ 768.236816][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.269972][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.291367][ T6299] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 768.309220][ T6299] bond0 (unregistering): Released all slaves [ 768.323437][ T6299] bond1 (unregistering): Released all slaves [ 768.343791][ T6299] bond2 (unregistering): Released all slaves [ 768.361911][ T6299] bond3 (unregistering): Released all slaves [ 768.382270][ T6299] bond4 (unregistering): Released all slaves [ 768.407445][ T6299] bond5 (unregistering): Released all slaves [ 768.424368][ T6299] bond6 (unregistering): Released all slaves [ 768.442096][ T6299] bond8 (unregistering): Released all slaves [ 768.633124][ T6299] tipc: Disabling bearer [ 768.640331][ T6299] tipc: Left network mode [ 768.677734][T31809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6930'. [ 768.800617][T31813] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6933'. [ 768.855493][T31813] openvswitch: netlink: Missing key (keys=40, expected=100) [ 768.870676][T31817] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 769.545060][ T6299] hsr_slave_0: left promiscuous mode [ 769.567015][ T6299] hsr_slave_1: left promiscuous mode [ 769.575387][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.583661][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.879017][ T6299] veth0 (unregistering): left allmulticast mode [ 769.922034][T30348] smc: removing ib device syz0 [ 769.928234][ T796] lo speed is unknown, defaulting to 1000 [ 769.933985][ T796] syz0: Port: 1 Link DOWN [ 770.984303][ T6299] IPVS: stop unused estimator thread 0... [ 772.242113][T31847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 772.419680][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6948'. [ 772.452785][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6947'. [ 772.463044][T31859] netlink: 'syz.0.6947': attribute type 2 has an invalid length. [ 772.477462][T31859] !9: entered promiscuous mode [ 772.498399][T31867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6948'. [ 772.513688][T31863] ip6tnl2: entered promiscuous mode [ 772.519812][T31867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6948'. [ 773.073206][T31913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6965'. [ 773.202328][T31919] tipc: Enabled bearer , priority 0 [ 773.224656][T31919] tipc: Resetting bearer [ 773.280345][T31915] tipc: Disabling bearer [ 774.541794][T31958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6973'. [ 774.560674][T31958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6973'. [ 774.797912][T23347] Bluetooth: hci3: command 0x0406 tx timeout [ 775.827058][T31943] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 775.847924][T31943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 775.857535][T31943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 776.049191][T31974] IPVS: Scheduler module ip_vs_ not found [ 776.080495][T31981] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6980'. [ 776.131104][T31982] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6980'. [ 776.321567][T31997] netlink: 'syz.2.6985': attribute type 11 has an invalid length. [ 776.331749][T31997] netlink: 'syz.2.6985': attribute type 23 has an invalid length. [ 776.340079][T31997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6985'. [ 776.573093][T31999] veth1: entered promiscuous mode [ 776.579169][T31999] veth1: entered allmulticast mode [ 777.294555][T32068] netlink: 'syz.0.7008': attribute type 2 has an invalid length. [ 777.384948][T32063] lo speed is unknown, defaulting to 1000 [ 777.391399][T32070] netlink: 'syz.2.7009': attribute type 10 has an invalid length. [ 777.402798][T32070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.414250][T32070] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 777.507295][T32068] geneve2: entered promiscuous mode [ 777.760168][T32088] syzkaller0: entered promiscuous mode [ 777.774216][T32088] syzkaller0: entered allmulticast mode [ 777.805448][T32088] __nla_validate_parse: 5 callbacks suppressed [ 777.805470][T32088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7015'. [ 777.839194][T32090] syzkaller0: entered promiscuous mode [ 777.844715][T32090] syzkaller0: entered allmulticast mode [ 777.913273][T32088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 777.968501][T32101] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7019'. [ 778.179888][T32107] netlink: 'syz.4.7023': attribute type 10 has an invalid length. [ 778.272020][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7024'. [ 778.347092][T32116] netlink: 'syz.3.7024': attribute type 2 has an invalid length. [ 778.416548][T32116] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7024'. [ 778.440746][T32116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7024'. [ 778.590207][T32116] geneve3: entered promiscuous mode [ 778.646570][T32122] macsec1: left promiscuous mode [ 778.669970][T32122] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 778.696616][T32122] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode [ 778.724240][T32122] veth5: left allmulticast mode [ 778.940700][T32160] netlink: 'syz.0.7035': attribute type 10 has an invalid length. [ 779.155085][T30348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.170522][T30348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.290789][T32185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7043'. [ 779.380147][T32185] netlink: 'syz.1.7043': attribute type 2 has an invalid length. [ 779.412448][T32185] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7043'. [ 779.476062][T32185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7043'. [ 779.658839][T32185] geneve2: entered promiscuous mode [ 779.881958][T32216] lo: entered allmulticast mode [ 780.093002][T32228] syzkaller0: entered promiscuous mode [ 780.113693][T32228] syzkaller0: entered allmulticast mode [ 780.144817][T32228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7049'. [ 780.190156][T32236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7055'. [ 780.326788][T32242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.468097][T32252] netlink: 'syz.2.7061': attribute type 2 has an invalid length. [ 780.522276][T32252] geneve2: entered promiscuous mode [ 780.586202][T32259] veth0_vlan: left allmulticast mode [ 780.708614][T32262] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 781.263584][T32303] netlink: 'syz.2.7075': attribute type 2 has an invalid length. [ 781.869897][T32336] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 782.236029][T32360] netlink: 'syz.3.7094': attribute type 2 has an invalid length. [ 782.358830][T32365] netlink: 'syz.1.7096': attribute type 83 has an invalid length. [ 782.366890][T32364] netlink: 'syz.1.7096': attribute type 83 has an invalid length. [ 782.485179][T32368] lo speed is unknown, defaulting to 1000 [ 783.057537][T32399] __nla_validate_parse: 16 callbacks suppressed [ 783.057558][T32399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7105'. [ 783.088208][T32399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7105'. [ 783.854849][T32442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7117'. [ 783.885792][T32442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7117'. [ 784.005553][T32447] lo speed is unknown, defaulting to 1000 [ 784.065377][T32455] netlink: 'syz.2.7118': attribute type 10 has an invalid length. [ 784.076512][T32455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 784.160266][T32461] netlink: 4704 bytes leftover after parsing attributes in process `syz.0.7119'. [ 784.259681][T32465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.384648][T32471] lo speed is unknown, defaulting to 1000 [ 784.501195][T32478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.027985][T23347] Bluetooth: hci5: command 0x0406 tx timeout [ 785.732202][T32498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7131'. [ 786.021141][T32515] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7134'. [ 786.046846][T32510] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 786.159652][T32522] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7135'. [ 786.198210][T32517] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 786.253359][T32409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 786.331985][T32524] netlink: 'syz.3.7136': attribute type 10 has an invalid length. [ 786.355337][T32524] team0: Failed to send options change via netlink (err -105) [ 786.366319][T32524] team0: Port device dummy0 added [ 786.375075][T32524] netlink: 'syz.3.7136': attribute type 10 has an invalid length. [ 786.418893][T32524] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 786.451149][T32524] team0: Failed to send options change via netlink (err -105) [ 786.463953][T32524] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 786.480882][T32524] team0: Port device dummy0 removed [ 786.491362][T32524] dummy0: entered promiscuous mode [ 786.496730][T32524] dummy0: entered allmulticast mode [ 786.503175][T32524] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 786.514678][T32530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7139'. [ 786.552998][T32530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7139'. [ 786.732159][T32541] IPVS: Scheduler module ip_vs_ not found [ 786.750113][T32552] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 786.791534][T32551] lo speed is unknown, defaulting to 1000 [ 786.805808][T32541] 8021q: VLANs not supported on ip6gre0 [ 787.139640][T32572] netlink: 'syz.1.7151': attribute type 1 has an invalid length. [ 787.147423][T32572] netlink: 'syz.1.7151': attribute type 1 has an invalid length. [ 787.158323][T32572] netlink: 'syz.1.7151': attribute type 1 has an invalid length. [ 787.230232][T32572] netlink: 'syz.1.7151': attribute type 1 has an invalid length. [ 787.248747][T32572] netlink: 'syz.1.7151': attribute type 1 has an invalid length. [ 787.803958][T32612] sctp: [Deprecated]: syz.2.7164 (pid 32612) Use of int in maxseg socket option. [ 787.803958][T32612] Use struct sctp_assoc_value instead [ 787.821801][ T796] IPVS: starting estimator thread 0... [ 787.917937][T32613] IPVS: using max 33 ests per chain, 79200 per kthread [ 787.936892][T32603] lo speed is unknown, defaulting to 1000 [ 788.023622][T32622] FAULT_INJECTION: forcing a failure. [ 788.023622][T32622] name failslab, interval 1, probability 0, space 0, times 0 [ 788.056319][T32622] CPU: 0 UID: 0 PID: 32622 Comm: syz.1.7168 Not tainted syzkaller #0 PREEMPT(full) [ 788.056346][T32622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.056357][T32622] Call Trace: [ 788.056365][T32622] [ 788.056374][T32622] dump_stack_lvl+0xe8/0x150 [ 788.056405][T32622] should_fail_ex+0x412/0x560 [ 788.056435][T32622] should_failslab+0xa8/0x100 [ 788.056461][T32622] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 788.056483][T32622] ? __alloc_skb+0x1d0/0x7d0 [ 788.056502][T32622] ? __local_bh_enable_ip+0xd0/0x130 [ 788.056530][T32622] __alloc_skb+0x1d0/0x7d0 [ 788.056557][T32622] mgmt_cmd_status+0x41/0x500 [ 788.056592][T32622] read_local_oob_data+0x166/0x360 [ 788.056616][T32622] hci_mgmt_cmd+0xa14/0xfa0 [ 788.056646][T32622] hci_sock_sendmsg+0x6dd/0xf40 [ 788.056671][T32622] ? __pfx_aa_sk_perm+0x10/0x10 [ 788.056700][T32622] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 788.056726][T32622] ? aa_sock_msg_perm+0xf1/0x1b0 [ 788.056752][T32622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.056774][T32622] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 788.056798][T32622] sock_write_iter+0x49b/0x4f0 [ 788.056826][T32622] ? __pfx_sock_write_iter+0x10/0x10 [ 788.056861][T32622] ? bpf_lsm_file_permission+0x9/0x20 [ 788.056893][T32622] ? security_file_permission+0x75/0x260 [ 788.056923][T32622] vfs_write+0x61d/0xb90 [ 788.056952][T32622] ? __pfx_vfs_write+0x10/0x10 [ 788.056981][T32622] ? __fget_files+0x2a/0x420 [ 788.057015][T32622] ksys_write+0x150/0x270 [ 788.057038][T32622] ? __pfx_ksys_write+0x10/0x10 [ 788.057070][T32622] do_syscall_64+0x14d/0xf80 [ 788.057096][T32622] ? trace_irq_disable+0x3b/0x150 [ 788.057112][T32622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.057134][T32622] ? clear_bhb_loop+0x40/0x90 [ 788.057157][T32622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.057176][T32622] RIP: 0033:0x7f5c56d9c819 [ 788.057194][T32622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.057209][T32622] RSP: 002b:00007f5c57c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.057229][T32622] RAX: ffffffffffffffda RBX: 00007f5c57015fa0 RCX: 00007f5c56d9c819 [ 788.057241][T32622] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 788.057253][T32622] RBP: 00007f5c57c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 788.057264][T32622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.057275][T32622] R13: 00007f5c57016038 R14: 00007f5c57015fa0 R15: 00007ffc507df8e8 [ 788.057307][T32622] [ 788.533726][T32210] bridge_slave_1: left allmulticast mode [ 788.539535][T32210] bridge_slave_1: left promiscuous mode [ 788.545378][T32210] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.572131][T32210] bridge_slave_0: left allmulticast mode [ 788.578377][T32210] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.628377][T32639] __nla_validate_parse: 1 callbacks suppressed [ 788.628396][T32639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7171'. [ 788.835625][T32210] bond7 (unregistering): (slave gretap1): Releasing active interface [ 789.038376][T32210] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 789.046503][T32210] bridge1 (unregistering): left promiscuous mode [ 789.110916][T32651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7175'. [ 789.122394][T32210] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 789.130912][T32210] bridge2 (unregistering): left promiscuous mode [ 789.152072][T32210] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 789.160313][T32210] bridge3 (unregistering): left promiscuous mode [ 789.221038][T32210] bond5 (unregistering): (slave bridge4): Releasing active interface [ 789.261672][T32210] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 789.270028][T32210] bridge5 (unregistering): left promiscuous mode [ 789.434425][T32210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.444522][T32210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.454283][T32210] bond0 (unregistering): Released all slaves [ 789.464449][T32210] bond1 (unregistering): Released all slaves [ 789.480430][T32210] bond2 (unregistering): Released all slaves [ 789.493351][T32210] bond3 (unregistering): Released all slaves [ 789.506368][T32210] bond4 (unregistering): Released all slaves [ 789.528315][T32210] bond5 (unregistering): Released all slaves [ 789.541177][T32210] bond6 (unregistering): Released all slaves [ 789.553631][T32210] bond7 (unregistering): Released all slaves [ 789.566794][T32210] bond8 (unregistering): Released all slaves [ 789.583538][T32210] bond9 (unregistering): (slave veth21): Releasing active interface [ 789.600750][T32210] dummy0: entered promiscuous mode [ 789.607395][T32210] bond9 (unregistering): (slave dummy0): Releasing active interface [ 789.616552][T32210] bond9 (unregistering): Released all slaves [ 789.815502][T32658] IPVS: length: 145 != 8 [ 789.829079][T32659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7178'. [ 789.887992][T32210] : left promiscuous mode [ 790.006757][T32210] tipc: Left network mode [ 790.067692][T32670] syzkaller0: entered promiscuous mode [ 790.073918][T32670] syzkaller0: entered allmulticast mode [ 790.894092][T32730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7203'. [ 790.979132][T32741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7207'. [ 791.366990][T32210] hsr_slave_0: left promiscuous mode [ 791.388816][T32210] hsr_slave_1: left promiscuous mode [ 791.400889][T32210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.593842][T32210] pim6reg (unregistering): left allmulticast mode [ 792.192128][ T338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7221'. [ 792.242425][ T340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7221'. [ 792.245524][T32210] team_slave_1 (unregistering): left promiscuous mode [ 792.260032][T32210] team0 (unregistering): Port device team_slave_1 removed [ 792.283243][T32210] team_slave_0 (unregistering): left promiscuous mode [ 792.290926][T32210] team0 (unregistering): Port device team_slave_0 removed [ 792.428664][T32756] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 792.448034][T32756] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 792.458915][T32756] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 792.564692][ T345] netlink: 'syz.4.7223': attribute type 4 has an invalid length. [ 792.595809][ T345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7223'. [ 792.926776][ T357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7224'. [ 793.289479][ T371] netlink: 'syz.2.7230': attribute type 25 has an invalid length. [ 793.308404][ T371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7230'. [ 793.339148][ T373] geneve2: entered promiscuous mode [ 793.379670][ T378] netlink: 'syz.2.7230': attribute type 25 has an invalid length. [ 793.613352][T32210] IPVS: stop unused estimator thread 0... [ 794.926875][ T423] syzkaller1: entered promiscuous mode [ 794.935104][ T424] __nla_validate_parse: 2 callbacks suppressed [ 794.935123][ T424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7241'. [ 794.937844][ T423] syzkaller1: entered allmulticast mode [ 795.029209][ T5904] IPVS: starting estimator thread 0... [ 795.188080][ T431] IPVS: using max 29 ests per chain, 69600 per kthread [ 795.309648][ T428] batadv_slave_0: entered promiscuous mode [ 795.554605][ T445] netlink: 'syz.3.7246': attribute type 8 has an invalid length. [ 795.576820][ T445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7246'. [ 795.594854][ T426] batadv_slave_0: left promiscuous mode [ 795.960450][ T455] netlink: 'syz.2.7249': attribute type 13 has an invalid length. [ 795.984824][ T455] netlink: 'syz.2.7249': attribute type 17 has an invalid length. [ 796.162008][ T455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.190134][ T455] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.238438][ T455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.239095][ T477] netlink: 'syz.1.7254': attribute type 11 has an invalid length. [ 796.501288][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7254'. [ 796.896196][ T499] netlink: 'syz.1.7259': attribute type 1 has an invalid length. [ 796.917431][ T499] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7259'. [ 797.449268][ T527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7268'. [ 797.467967][ T527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7268'. [ 797.535179][ T530] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7269'. [ 797.644628][ T536] netem: change failed [ 797.914482][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7274'. [ 797.980329][ T551] netlink: 'syz.4.7275': attribute type 10 has an invalid length. [ 798.162261][ T562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7277'. [ 798.173649][ T564] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 798.179906][ T564] syzkaller1: linktype set to 825 [ 798.197919][ T564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7278'. [ 798.377129][ T570] hsr_slave_0: left promiscuous mode [ 798.388797][ T570] hsr_slave_1: left promiscuous mode [ 798.509668][ T579] pim6reg: entered allmulticast mode [ 798.639070][ T589] tipc: Enabling of bearer rejected, already enabled [ 798.691260][ T589] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 798.715332][ T589] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 798.758030][ T598] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 798.802554][ T603] netlink: 'syz.1.7289': attribute type 10 has an invalid length. [ 799.145116][ T629] tipc: Enabled bearer , priority 14 [ 799.209224][ T624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 799.365512][ T651] FAULT_INJECTION: forcing a failure. [ 799.365512][ T651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.410055][ T651] CPU: 1 UID: 0 PID: 651 Comm: syz.3.7301 Not tainted syzkaller #0 PREEMPT(full) [ 799.410089][ T651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 799.410101][ T651] Call Trace: [ 799.410108][ T651] [ 799.410117][ T651] dump_stack_lvl+0xe8/0x150 [ 799.410146][ T651] should_fail_ex+0x412/0x560 [ 799.410175][ T651] strncpy_from_user+0x36/0x2b0 [ 799.410204][ T651] mptcp_setsockopt+0x1380/0x36a0 [ 799.410234][ T651] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 799.410259][ T651] ? __pfx_aa_sk_perm+0x10/0x10 [ 799.410287][ T651] ? __fget_files+0x2a/0x420 [ 799.410311][ T651] ? aa_sock_opt_perm+0xff/0x1a0 [ 799.410340][ T651] ? sock_common_setsockopt+0x36/0xc0 [ 799.410359][ T651] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 799.410381][ T651] do_sock_setsockopt+0x17c/0x1b0 [ 799.410406][ T651] __x64_sys_setsockopt+0x13d/0x1b0 [ 799.410432][ T651] do_syscall_64+0x14d/0xf80 [ 799.410455][ T651] ? trace_irq_disable+0x3b/0x150 [ 799.410472][ T651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.410491][ T651] ? clear_bhb_loop+0x40/0x90 [ 799.410513][ T651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.410532][ T651] RIP: 0033:0x7f3aa999c819 [ 799.410550][ T651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.410566][ T651] RSP: 002b:00007f3aaa806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 799.410586][ T651] RAX: ffffffffffffffda RBX: 00007f3aa9c16090 RCX: 00007f3aa999c819 [ 799.410599][ T651] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000009 [ 799.410610][ T651] RBP: 00007f3aaa806090 R08: 0000000000000004 R09: 0000000000000000 [ 799.410622][ T651] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.410634][ T651] R13: 00007f3aa9c16128 R14: 00007f3aa9c16090 R15: 00007fff56ae3ef8 [ 799.410664][ T651] [ 799.431467][ T652] netlink: 'syz.0.7302': attribute type 10 has an invalid length. [ 799.851955][ T671] tipc: Started in network mode [ 799.856886][ T671] tipc: Node identity 0a081afbb9e5, cluster identity 4711 [ 799.864474][ T671] tipc: Enabled bearer , priority 0 [ 799.925734][ T671] syzkaller0: entered promiscuous mode [ 799.940938][ T671] syzkaller0: entered allmulticast mode [ 799.954941][ T671] tipc: Resetting bearer [ 800.037376][ T668] tipc: Resetting bearer [ 800.286262][ T689] __nla_validate_parse: 12 callbacks suppressed [ 800.286284][ T689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7308'. [ 800.401529][T23347] Bluetooth: hci0: command 0x0406 tx timeout [ 800.556665][ T706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7309'. [ 802.552939][ T668] tipc: Disabling bearer [ 802.566753][T10988] tipc: Node number set to 3018660603 [ 802.799165][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7317'. [ 802.855996][ T762] FAULT_INJECTION: forcing a failure. [ 802.855996][ T762] name failslab, interval 1, probability 0, space 0, times 0 [ 802.905819][ T762] CPU: 0 UID: 0 PID: 762 Comm: syz.2.7318 Not tainted syzkaller #0 PREEMPT(full) [ 802.905846][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 802.905858][ T762] Call Trace: [ 802.905866][ T762] [ 802.905874][ T762] dump_stack_lvl+0xe8/0x150 [ 802.905904][ T762] should_fail_ex+0x412/0x560 [ 802.905936][ T762] should_failslab+0xa8/0x100 [ 802.905962][ T762] __kmalloc_cache_noprof+0x88/0x660 [ 802.905983][ T762] ? lockdep_hardirqs_on+0x7a/0x110 [ 802.906009][ T762] ? __request_module+0x2d0/0x660 [ 802.906038][ T762] __request_module+0x2d0/0x660 [ 802.906068][ T762] ? __pfx___request_module+0x10/0x10 [ 802.906110][ T762] ? tcp_ca_find_autoload+0x110/0x240 [ 802.906137][ T762] ? tcp_ca_find_autoload+0x110/0x240 [ 802.906161][ T762] tcp_ca_find_autoload+0x138/0x240 [ 802.906187][ T762] tcp_set_congestion_control+0x13f/0xd20 [ 802.906211][ T762] ? tcp_set_congestion_control+0x71/0xd20 [ 802.906236][ T762] ? __local_bh_enable_ip+0xd0/0x130 [ 802.906265][ T762] mptcp_setsockopt+0x2777/0x36a0 [ 802.906296][ T762] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 802.906321][ T762] ? __pfx_aa_sk_perm+0x10/0x10 [ 802.906349][ T762] ? __fget_files+0x2a/0x420 [ 802.906374][ T762] ? aa_sock_opt_perm+0xff/0x1a0 [ 802.906403][ T762] ? sock_common_setsockopt+0x36/0xc0 [ 802.906422][ T762] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 802.906444][ T762] do_sock_setsockopt+0x17c/0x1b0 [ 802.906471][ T762] __x64_sys_setsockopt+0x13d/0x1b0 [ 802.906500][ T762] do_syscall_64+0x14d/0xf80 [ 802.906525][ T762] ? trace_irq_disable+0x3b/0x150 [ 802.906541][ T762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.906560][ T762] ? clear_bhb_loop+0x40/0x90 [ 802.906583][ T762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.906601][ T762] RIP: 0033:0x7f5d8279c819 [ 802.906619][ T762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.906635][ T762] RSP: 002b:00007f5d8371e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 802.906655][ T762] RAX: ffffffffffffffda RBX: 00007f5d82a16090 RCX: 00007f5d8279c819 [ 802.906669][ T762] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000009 [ 802.906680][ T762] RBP: 00007f5d8371e090 R08: 0000000000000004 R09: 0000000000000000 [ 802.906692][ T762] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.906710][ T762] R13: 00007f5d82a16128 R14: 00007f5d82a16090 R15: 00007ffc539553f8 [ 802.906741][ T762] [ 803.043422][ T775] lo speed is unknown, defaulting to 1000 [ 803.052959][ T769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.245792][ T780] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7326'. [ 803.255746][ T780] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7326'. [ 803.313648][ T787] xt_CT: No such helper "syz0" [ 803.737262][ T819] netlink: 'syz.0.7334': attribute type 6 has an invalid length. [ 803.769905][ T825] netlink: 'syz.2.7335': attribute type 10 has an invalid length. [ 803.997111][ T833] netlink: 'syz.0.7338': attribute type 39 has an invalid length. [ 804.128022][ T842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7342'. [ 804.378712][ T856] FAULT_INJECTION: forcing a failure. [ 804.378712][ T856] name failslab, interval 1, probability 0, space 0, times 0 [ 804.448121][ T856] CPU: 0 UID: 0 PID: 856 Comm: syz.2.7345 Not tainted syzkaller #0 PREEMPT(full) [ 804.448149][ T856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 804.448160][ T856] Call Trace: [ 804.448169][ T856] [ 804.448177][ T856] dump_stack_lvl+0xe8/0x150 [ 804.448209][ T856] should_fail_ex+0x412/0x560 [ 804.448238][ T856] should_failslab+0xa8/0x100 [ 804.448261][ T856] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 804.448281][ T856] ? __kasan_kmalloc+0x93/0xb0 [ 804.448302][ T856] ? __request_module+0x2ec/0x660 [ 804.448325][ T856] ? __kmalloc_cache_noprof+0x31c/0x660 [ 804.448348][ T856] kstrdup+0x42/0x100 [ 804.448374][ T856] __request_module+0x2ec/0x660 [ 804.448405][ T856] ? __pfx___request_module+0x10/0x10 [ 804.448444][ T856] ? tcp_ca_find_autoload+0x110/0x240 [ 804.448471][ T856] ? tcp_ca_find_autoload+0x110/0x240 [ 804.448493][ T856] tcp_ca_find_autoload+0x138/0x240 [ 804.448515][ T856] tcp_set_congestion_control+0x13f/0xd20 [ 804.448538][ T856] ? tcp_set_congestion_control+0x71/0xd20 [ 804.448560][ T856] ? __local_bh_enable_ip+0xd0/0x130 [ 804.448588][ T856] mptcp_setsockopt+0x2777/0x36a0 [ 804.448618][ T856] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 804.448642][ T856] ? __pfx_aa_sk_perm+0x10/0x10 [ 804.448679][ T856] ? __fget_files+0x2a/0x420 [ 804.448704][ T856] ? aa_sock_opt_perm+0xff/0x1a0 [ 804.448731][ T856] ? sock_common_setsockopt+0x36/0xc0 [ 804.448750][ T856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 804.448771][ T856] do_sock_setsockopt+0x17c/0x1b0 [ 804.448798][ T856] __x64_sys_setsockopt+0x13d/0x1b0 [ 804.448826][ T856] do_syscall_64+0x14d/0xf80 [ 804.448850][ T856] ? trace_irq_disable+0x3b/0x150 [ 804.448867][ T856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.448885][ T856] ? clear_bhb_loop+0x40/0x90 [ 804.448907][ T856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.448925][ T856] RIP: 0033:0x7f5d8279c819 [ 804.448944][ T856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.448959][ T856] RSP: 002b:00007f5d8371e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 804.448979][ T856] RAX: ffffffffffffffda RBX: 00007f5d82a16090 RCX: 00007f5d8279c819 [ 804.448991][ T856] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000009 [ 804.449001][ T856] RBP: 00007f5d8371e090 R08: 0000000000000004 R09: 0000000000000000 [ 804.449011][ T856] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.449023][ T856] R13: 00007f5d82a16128 R14: 00007f5d82a16090 R15: 00007ffc539553f8 [ 804.449051][ T856] [ 804.568687][ T852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7346'. [ 805.287212][ T876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7353'. [ 805.319960][ T876] netlink: 'syz.3.7353': attribute type 2 has an invalid length. [ 805.348240][ T876] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7353'. [ 805.368787][ T876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7353'. [ 805.811985][ T887] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 805.868685][ T887] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode [ 805.936375][ T890] lo speed is unknown, defaulting to 1000 [ 805.936956][ T893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7357'. [ 806.039019][ T897] netlink: 'syz.2.7356': attribute type 1 has an invalid length. [ 806.166281][ T897] bond3: entered promiscuous mode [ 806.223847][ T897] bond3: entered allmulticast mode [ 806.235166][ T897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 806.253842][ T899] erspan1: entered allmulticast mode [ 806.269299][ T899] bond3: (slave erspan1): making interface the new active one [ 806.277446][ T899] erspan1: entered promiscuous mode [ 806.286322][ T899] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 806.519182][ T925] netlink: 'syz.3.7364': attribute type 10 has an invalid length. [ 806.521799][ T931] xt_hashlimit: size too large, truncated to 1048576 [ 806.990672][ T964] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 807.088933][ T971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.192408][ T976] tipc: Resetting bearer [ 807.302963][ T985] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 807.362294][ T987] netlink: 'syz.2.7381': attribute type 10 has an invalid length. [ 807.439361][ T991] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 807.456441][ T990] No such timeout policy "syz1" [ 807.711545][ T1004] batadv_slave_1: entered promiscuous mode [ 807.751943][ T1004] bridge0: entered promiscuous mode [ 807.769896][ T1002] batadv_slave_1: left promiscuous mode [ 808.010039][ T1018] FAULT_INJECTION: forcing a failure. [ 808.010039][ T1018] name fail_futex, interval 1, probability 0, space 0, times 1 [ 808.049642][ T1018] CPU: 0 UID: 0 PID: 1018 Comm: syz.2.7391 Not tainted syzkaller #0 PREEMPT(full) [ 808.049668][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 808.049680][ T1018] Call Trace: [ 808.049688][ T1018] [ 808.049697][ T1018] dump_stack_lvl+0xe8/0x150 [ 808.049728][ T1018] should_fail_ex+0x412/0x560 [ 808.049759][ T1018] get_futex_key+0x1ac/0x1690 [ 808.049792][ T1018] ? __pfx_get_futex_key+0x10/0x10 [ 808.049813][ T1018] ? __lock_acquire+0x6b5/0x2cf0 [ 808.049846][ T1018] futex_wake+0x114/0x580 [ 808.049872][ T1018] ? __lock_acquire+0x6b5/0x2cf0 [ 808.049898][ T1018] ? __pfx_futex_wake+0x10/0x10 [ 808.049929][ T1018] ? exit_mm_release+0x1a/0x30 [ 808.049960][ T1018] do_futex+0x395/0x420 [ 808.049987][ T1018] ? __pfx_do_futex+0x10/0x10 [ 808.050014][ T1018] ? __might_fault+0xaf/0x130 [ 808.050035][ T1018] mm_release+0x103/0x290 [ 808.050062][ T1018] exit_mm+0x51/0x220 [ 808.050087][ T1018] ? unwind_deferred_task_exit+0x67/0xa0 [ 808.050116][ T1018] do_exit+0x6a2/0x23c0 [ 808.050137][ T1018] ? do_raw_spin_unlock+0xf5/0x210 [ 808.050160][ T1018] ? __pfx_do_exit+0x10/0x10 [ 808.050182][ T1018] ? do_raw_spin_lock+0x12b/0x2f0 [ 808.050210][ T1018] do_group_exit+0x21b/0x2d0 [ 808.050229][ T1018] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.050257][ T1018] get_signal+0x1284/0x1330 [ 808.050299][ T1018] arch_do_signal_or_restart+0xbc/0x830 [ 808.050321][ T1018] ? __pfx_aa_sk_perm+0x10/0x10 [ 808.050347][ T1018] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 808.050386][ T1018] exit_to_user_mode_loop+0x86/0x480 [ 808.050408][ T1018] ? rcu_is_watching+0x15/0xb0 [ 808.050436][ T1018] do_syscall_64+0x32d/0xf80 [ 808.050461][ T1018] ? trace_irq_disable+0x3b/0x150 [ 808.050478][ T1018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.050496][ T1018] ? clear_bhb_loop+0x40/0x90 [ 808.050518][ T1018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.050533][ T1018] RIP: 0033:0x7f5d8279c819 [ 808.050548][ T1018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.050562][ T1018] RSP: 002b:00007f5d8371e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 808.050582][ T1018] RAX: fffffffffffffffe RBX: 00007f5d82a16090 RCX: 00007f5d8279c819 [ 808.050593][ T1018] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000009 [ 808.050602][ T1018] RBP: 00007f5d8371e090 R08: 0000000000000004 R09: 0000000000000000 [ 808.050611][ T1018] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.050621][ T1018] R13: 00007f5d82a16128 R14: 00007f5d82a16090 R15: 00007ffc539553f8 [ 808.050645][ T1018] [ 808.362959][ T1038] netlink: 'syz.1.7394': attribute type 10 has an invalid length. [ 808.387561][ T1041] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 808.453184][ T1046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 808.551875][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.560303][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 809.216405][ T1072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7403'. [ 809.255128][ T1075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7404'. [ 809.495461][ T1090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7409'. [ 809.517406][ T1089] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 809.635590][ T1102] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7412'. [ 809.652176][ T1102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7412'. [ 809.695378][ T1103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7411'. [ 809.754576][ T1103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7411'. [ 810.272273][ T1124] lo speed is unknown, defaulting to 1000 [ 810.613715][ T1138] lo speed is unknown, defaulting to 1000 [ 810.639172][ T9862] Bluetooth: hci1: command 0x0405 tx timeout [ 810.749131][ T1143] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 810.777426][ T1157] netlink: 'syz.2.7425': attribute type 11 has an invalid length. [ 810.881147][ T1159] netlink: 'syz.0.7424': attribute type 2 has an invalid length. [ 810.915318][ T1159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7424'. [ 810.953627][ T1165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7427'. [ 810.963125][ T1165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7427'. [ 810.972653][ T1165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7427'. [ 810.982233][ T1165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7427'. [ 811.077997][ T1170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7429'. [ 811.128518][ T1182] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7428'. [ 811.162357][ T1182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7428'. [ 811.245170][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7428'. [ 811.706903][ T1196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7432'. [ 812.798229][ T1257] tipc: Enabling of bearer rejected, failed to enable media [ 812.913823][ T1266] bond2: option ad_user_port_key: invalid value (65535) [ 812.921443][ T1266] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 812.952805][ T1266] bond2 (unregistering): Released all slaves [ 813.811422][ T1319] netlink: 'syz.2.7461': attribute type 10 has an invalid length. [ 813.878656][ T1324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.149562][ T1341] netlink: 'syz.0.7471': attribute type 2 has an invalid length. [ 814.401393][ T1341] N: left allmulticast mode [ 814.638992][ T1362] netlink: 'syz.3.7476': attribute type 10 has an invalid length. [ 814.820201][T30352] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.856360][T30352] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.899192][T30352] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.939068][T30352] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.532379][ T1394] netlink: 'syz.4.7488': attribute type 2 has an invalid length. [ 815.625136][ T1398] netlink: 'syz.3.7489': attribute type 10 has an invalid length. [ 815.652031][ T1394] veth1: left promiscuous mode [ 815.675502][ T1394] veth1: left allmulticast mode [ 815.758942][ T1394] wg1: left promiscuous mode [ 815.787625][ T1394] wg1: left allmulticast mode [ 815.869985][ T1394] ip6tnl2: left promiscuous mode [ 816.671240][ T1428] __nla_validate_parse: 13 callbacks suppressed [ 816.671259][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7497'. [ 816.803046][ T1431] netlink: 'syz.3.7502': attribute type 10 has an invalid length. [ 816.812757][ T1431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7502'. [ 816.828176][ T1431] team0: entered promiscuous mode [ 816.833261][ T1431] team_slave_0: entered promiscuous mode [ 816.855344][ T1431] team_slave_1: entered promiscuous mode [ 816.865135][ T1431] team0: entered allmulticast mode [ 816.872820][ T1431] team_slave_0: entered allmulticast mode [ 816.880793][ T1431] team_slave_1: entered allmulticast mode [ 816.889071][ T1431] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.897106][ T1431] bridge0: port 4(team0) entered blocking state [ 816.925315][ T1431] bridge0: port 4(team0) entered disabled state [ 817.501694][ T1463] netlink: 'syz.3.7513': attribute type 4 has an invalid length. [ 817.516326][ T1463] netlink: 'syz.3.7513': attribute type 4 has an invalid length. [ 817.533246][T10988] lo speed is unknown, defaulting to 1000 [ 817.539161][T10988] syz2: Port: 1 Link ACTIVE [ 818.159697][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7519'. [ 818.647264][ T1507] netlink: 'syz.1.7525': attribute type 4 has an invalid length. [ 818.661436][ T1507] netlink: 'syz.1.7525': attribute type 4 has an invalid length. [ 818.897259][ T1525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7532'. [ 818.960467][ T1527] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 819.001796][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7532'. [ 819.618823][ T1542] netlink: 'syz.0.7538': attribute type 13 has an invalid length. [ 819.632282][ T1539] netlink: 'syz.2.7539': attribute type 28 has an invalid length. [ 819.647951][ T1542] netlink: 'syz.0.7538': attribute type 17 has an invalid length. [ 819.709633][ T1536] netlink: 'syz.3.7540': attribute type 4 has an invalid length. [ 819.722342][T10988] lo speed is unknown, defaulting to 1000 [ 819.728261][T10988] syz2: Port: 1 Link DOWN [ 819.732774][ T1536] netlink: 'syz.3.7540': attribute type 4 has an invalid length. [ 819.814928][ T1542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.830541][ T1542] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.889701][ T1542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.928988][ T5821] lo speed is unknown, defaulting to 1000 [ 819.934770][ T5821] syz2: Port: 1 Link ACTIVE [ 820.230435][ T1570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7544'. [ 820.478487][ T1581] block nbd1: Unsupported socket: should be TCP or UNIX. [ 820.800593][ T1560] infiniband syz0: set down [ 820.805243][ T1560] infiniband syz0: added bond0 [ 820.964945][ T5488] veth0_macvtap: left promiscuous mode [ 821.004747][ T1560] RDS/IB: syz0: added [ 821.009071][ T1560] smc: adding ib device syz0 with port count 1 [ 821.016472][ T1560] smc: ib device syz0 port 1 has no pnetid [ 821.191823][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7557'. [ 821.223532][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7556'. [ 821.233244][ T1606] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7557'. [ 821.264426][ T1606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7557'. [ 821.749735][ T1606] bond3: left promiscuous mode [ 821.773404][ T1606] erspan1: left promiscuous mode [ 821.796928][ T1606] bond3: left allmulticast mode [ 821.827302][ T1606] erspan1: left allmulticast mode [ 821.853042][ T1607] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 822.149096][ T1631] validate_nla: 2 callbacks suppressed [ 822.149116][ T1631] netlink: 'syz.3.7561': attribute type 8 has an invalid length. [ 822.251413][ T1631] sch_tbf: burst 5 is lower than device lo mtu (11337746) ! [ 823.503322][ T1652] netlink: 'syz.3.7568': attribute type 1 has an invalid length. [ 823.548051][ T1652] __nla_validate_parse: 2 callbacks suppressed [ 823.548069][ T1652] netlink: 304 bytes leftover after parsing attributes in process `syz.3.7568'. [ 823.602453][ T1652] netlink: 'syz.3.7568': attribute type 9 has an invalid length. [ 823.622725][ T1652] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7568'. [ 823.645518][ T1652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7568'. [ 823.695467][ T1660] netlink: 'syz.2.7570': attribute type 2 has an invalid length. [ 823.712125][ T1656] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7570'. [ 823.722126][ T1656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7570'. [ 823.824929][ T1667] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7571'. [ 823.874859][ T1667] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 823.899110][ T1667] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7571'. [ 824.272846][ T1550] Set syz1 is full, maxelem 65536 reached [ 824.401815][ T1686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7577'. [ 824.415222][ T1686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.940235][ T1690] mac80211_hwsim hwsim55 ;: renamed from wlan0 [ 825.074535][ T1701] tipc: Enabling of bearer rejected, failed to enable media [ 825.176266][ T1710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7584'. [ 825.238298][ T1710] netlink: 'syz.1.7584': attribute type 2 has an invalid length. [ 825.246768][ T1720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7586'. [ 825.425956][ T1722] lo speed is unknown, defaulting to 1000 [ 825.808536][ T1757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.841678][ T1744] siw: device registration error -23 [ 825.906442][ T1758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.909169][ T1760] netlink: 'syz.4.7594': attribute type 5 has an invalid length. [ 826.266539][ T1778] netlink: 'syz.0.7601': attribute type 2 has an invalid length. [ 826.737575][ T1785] netlink: 'syz.2.7603': attribute type 9 has an invalid length. [ 827.155444][ T1793] netlink: 'syz.0.7606': attribute type 11 has an invalid length. [ 827.525138][ T1803] bond5: Unable to set up delay as MII monitoring is disabled [ 827.537319][ T1803] bond5 (unregistering): Released all slaves [ 827.864497][ T1829] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 827.925344][ T1835] netlink: 'syz.4.7623': attribute type 11 has an invalid length. [ 827.927831][ T1836] netlink: 'syz.4.7623': attribute type 11 has an invalid length. [ 827.940545][ T1834] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 827.947392][ T1834] syzkaller1: linktype set to 768 [ 828.379104][ T1833] bond1: option miimon: invalid value (18446744073709551607) [ 828.386549][ T1833] bond1: option miimon: allowed values 0 - 2147483647 [ 828.416227][ T1833] bond1 (unregistering): Released all slaves [ 828.954401][ T1882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.432540][ T1891] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 829.476878][ T1840] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 829.528551][ T1893] __nla_validate_parse: 18 callbacks suppressed [ 829.528569][ T1893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 829.766079][ T1904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7646'. [ 829.775405][ T1904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7646'. [ 829.833831][ T1913] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 829.843301][ T1905] geneve0: entered promiscuous mode [ 829.860427][T32200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.888883][T32200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.926105][T32200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.959047][T32200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.162781][ T1931] FAULT_INJECTION: forcing a failure. [ 830.162781][ T1931] name failslab, interval 1, probability 0, space 0, times 0 [ 830.172300][ T1930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7655'. [ 830.188364][ T1931] CPU: 1 UID: 0 PID: 1931 Comm: syz.0.7654 Not tainted syzkaller #0 PREEMPT(full) [ 830.188388][ T1931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 830.188400][ T1931] Call Trace: [ 830.188407][ T1931] [ 830.188416][ T1931] dump_stack_lvl+0xe8/0x150 [ 830.188447][ T1931] should_fail_ex+0x412/0x560 [ 830.188480][ T1931] should_failslab+0xa8/0x100 [ 830.188506][ T1931] __kmalloc_cache_noprof+0x88/0x660 [ 830.188529][ T1931] ? wakeup_source_register+0x5b/0x380 [ 830.188556][ T1931] wakeup_source_register+0x5b/0x380 [ 830.188582][ T1931] ep_insert+0xf34/0x1a40 [ 830.188615][ T1931] ? __pfx_ep_insert+0x10/0x10 [ 830.188644][ T1931] ? bpf_lsm_capable+0x9/0x20 [ 830.188678][ T1931] do_epoll_ctl+0x7f4/0xe80 [ 830.188713][ T1931] __x64_sys_epoll_ctl+0x165/0x1b0 [ 830.188735][ T1931] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 830.188765][ T1931] do_syscall_64+0x14d/0xf80 [ 830.188790][ T1931] ? trace_irq_disable+0x3b/0x150 [ 830.188806][ T1931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.188825][ T1931] ? clear_bhb_loop+0x40/0x90 [ 830.188847][ T1931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.188865][ T1931] RIP: 0033:0x7fb13eb9c819 [ 830.188883][ T1931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.188899][ T1931] RSP: 002b:00007fb13f9c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 830.188918][ T1931] RAX: ffffffffffffffda RBX: 00007fb13ee15fa0 RCX: 00007fb13eb9c819 [ 830.188931][ T1931] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 830.188942][ T1931] RBP: 00007fb13f9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 830.188954][ T1931] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.188965][ T1931] R13: 00007fb13ee16038 R14: 00007fb13ee15fa0 R15: 00007ffc54d86b18 [ 830.188994][ T1931] [ 830.426728][ T1934] syzkaller0: entered promiscuous mode [ 830.432894][ T1934] syzkaller0: entered allmulticast mode [ 830.441880][ T1934] tipc: Enabled bearer , priority 0 [ 830.450299][ T1932] tipc: Resetting bearer [ 830.505981][ T1932] tipc: Disabling bearer [ 830.625201][ T1939] rdma_rxe: rxe_newlink: failed to add bond0 [ 830.662353][ T1939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7656'. [ 830.714897][ T1947] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7660'. [ 831.016655][ T1964] bridge0: port 3(vlan2) entered blocking state [ 831.023264][ T1964] bridge0: port 3(vlan2) entered disabled state [ 831.038365][ T1964] vlan2: entered allmulticast mode [ 831.049846][ T1964] geneve0: entered allmulticast mode [ 831.062918][ T1964] vlan2: entered promiscuous mode [ 831.150403][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7669'. [ 831.275482][ T1976] rdma_rxe: rxe_newlink: failed to add bond0 [ 831.307568][ T1976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7674'. [ 831.459843][ T1990] tipc: Started in network mode [ 831.464770][ T1990] tipc: Node identity 0293bfdddfcb, cluster identity 4711 [ 831.473348][ T1990] tipc: Enabled bearer , priority 0 [ 831.642246][ T1990] syzkaller0: entered promiscuous mode [ 831.656949][ T1990] syzkaller0: entered allmulticast mode [ 831.674587][ T1990] tipc: Resetting bearer [ 831.858607][ T1999] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 831.903179][ T2005] netlink: 'syz.1.7682': attribute type 1 has an invalid length. [ 832.082380][ T1989] tipc: Resetting bearer [ 834.602548][ T1989] tipc: Disabling bearer [ 834.639007][ T2005] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 834.787317][T31182] tipc: Node number set to 3713581021 [ 834.932515][ T2022] syz0: rxe_newlink: already configured on bond0 [ 834.945493][ T2023] nbd: couldn't find a device at index 0 [ 834.958549][ T2022] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7689'. [ 835.115783][ T2034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7690'. [ 835.850868][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7695'. [ 836.150904][ T2070] rdma_rxe: rxe_newlink: failed to add bond0 [ 836.157650][ T2070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7702'. [ 836.472445][ T2085] lo speed is unknown, defaulting to 1000 [ 836.500307][ T2092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7706'. [ 837.238804][ T2121] netlink: 556 bytes leftover after parsing attributes in process `syz.2.7710'. [ 837.639993][ T2134] rdma_rxe: rxe_newlink: failed to add bond0 [ 837.653631][ T2134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7715'. [ 837.825035][ T2142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7716'. [ 837.849510][ T2142] netlink: 'syz.1.7716': attribute type 1 has an invalid length. [ 838.436921][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7725'. [ 838.487616][ T2168] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7725'. [ 838.577399][ T2163] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 839.267607][ T2189] x_tables: duplicate underflow at hook 1 [ 839.628862][ T2201] netlink: 'syz.4.7735': attribute type 4 has an invalid length. [ 839.640534][ T2201] netlink: 'syz.4.7735': attribute type 4 has an invalid length. [ 840.203570][ T2222] __nla_validate_parse: 2 callbacks suppressed [ 840.203590][ T2222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7741'. [ 840.220244][ T2225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7743'. [ 840.232410][ T2222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 840.244628][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 840.262869][ T2226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7744'. [ 840.288587][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 840.298502][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7744'. [ 840.312623][ T2226] netlink: 'syz.3.7744': attribute type 12 has an invalid length. [ 840.340282][T32210] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.340295][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 840.349378][T32210] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.367598][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7744'. [ 840.377231][T32210] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.377708][ T2234] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7747'. [ 840.396039][T32208] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.405966][ T2226] netlink: 'syz.3.7744': attribute type 12 has an invalid length. [ 840.528610][ T2241] bond2: Invalid ad_actor_system MAC address. [ 840.534882][ T2241] bond2: option ad_actor_system: invalid value (7) [ 840.544591][ T2241] bond2 (unregistering): Released all slaves [ 840.626960][ T2250] x_tables: duplicate underflow at hook 1 [ 840.822438][ T2261] tipc: Enabled bearer , priority 0 [ 840.872120][ T2261] syzkaller0: entered promiscuous mode [ 840.877860][ T2261] syzkaller0: entered allmulticast mode [ 840.886359][ T2261] tipc: Resetting bearer [ 840.908789][ T2260] tipc: Resetting bearer [ 842.855941][ T2260] tipc: Disabling bearer [ 843.252665][ T2311] x_tables: duplicate underflow at hook 1 [ 843.253087][ T2313] netlink: 'syz.1.7773': attribute type 1 has an invalid length. [ 843.330990][ T2313] bond5: entered promiscuous mode [ 843.336418][ T2313] 8021q: adding VLAN 0 to HW filter on device bond5 [ 843.356533][ T2313] bridge_slave_1: left allmulticast mode [ 843.362426][ T2313] bridge_slave_1: left promiscuous mode [ 843.369941][ T2313] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.383225][ T2313] x9: left allmulticast mode [ 843.388573][ T2313] x9: left promiscuous mode [ 843.393560][ T2313] bridge0: port 1(1x9) entered disabled state [ 843.563186][ T2332] netlink: 'syz.1.7778': attribute type 2 has an invalid length. [ 843.574896][ T2332] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 843.587051][ T2332] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 843.708926][ T2339] bond3: entered promiscuous mode [ 843.725829][ T2339] vcan1: entered promiscuous mode [ 843.731328][ T2339] vcan1: entered allmulticast mode [ 843.737173][ T2339] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 843.748773][ T2339] bond3: (slave vcan1): Error -95 calling set_mac_address [ 844.191282][ T2361] netlink: 'syz.0.7784': attribute type 2 has an invalid length. [ 844.439550][ T2378] netlink: 'syz.0.7792': attribute type 2 has an invalid length. [ 844.498792][T32208] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.508102][T32208] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.517007][T32208] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.526522][T32208] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.605174][ T2389] x_tables: duplicate underflow at hook 1 [ 844.626524][ T2391] netlink: 'syz.3.7797': attribute type 2 has an invalid length. [ 844.740636][ T2406] FAULT_INJECTION: forcing a failure. [ 844.740636][ T2406] name failslab, interval 1, probability 0, space 0, times 0 [ 844.756425][ T2406] CPU: 0 UID: 0 PID: 2406 Comm: syz.2.7802 Not tainted syzkaller #0 PREEMPT(full) [ 844.756452][ T2406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 844.756464][ T2406] Call Trace: [ 844.756471][ T2406] [ 844.756479][ T2406] dump_stack_lvl+0xe8/0x150 [ 844.756511][ T2406] should_fail_ex+0x412/0x560 [ 844.756542][ T2406] should_failslab+0xa8/0x100 [ 844.756565][ T2406] ? __kernfs_new_node+0xe9/0x8e0 [ 844.756589][ T2406] kmem_cache_alloc_noprof+0x87/0x650 [ 844.756605][ T2406] __kernfs_new_node+0xe9/0x8e0 [ 844.756625][ T2406] ? __pfx___kernfs_new_node+0x10/0x10 [ 844.756639][ T2406] ? kernfs_root+0x1c/0x230 [ 844.756657][ T2406] ? kernfs_root+0x1c/0x230 [ 844.756671][ T2406] ? kernfs_root+0x1c/0x230 [ 844.756686][ T2406] kernfs_new_node+0x102/0x210 [ 844.756703][ T2406] kernfs_create_link+0xa7/0x200 [ 844.756717][ T2406] sysfs_do_create_link_sd+0x83/0x110 [ 844.756733][ T2406] device_add_class_symlinks+0x1cf/0x240 [ 844.756749][ T2406] device_add+0x475/0xb70 [ 844.756761][ T2406] ? device_initialize+0x26a/0x460 [ 844.756774][ T2406] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 844.756790][ T2406] wakeup_source_register+0x18a/0x380 [ 844.756804][ T2406] ep_insert+0xf34/0x1a40 [ 844.756822][ T2406] ? __pfx_ep_insert+0x10/0x10 [ 844.756838][ T2406] ? bpf_lsm_capable+0x9/0x20 [ 844.756856][ T2406] do_epoll_ctl+0x7f4/0xe80 [ 844.756883][ T2406] __x64_sys_epoll_ctl+0x165/0x1b0 [ 844.756895][ T2406] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 844.756911][ T2406] do_syscall_64+0x14d/0xf80 [ 844.756926][ T2406] ? trace_irq_disable+0x3b/0x150 [ 844.756935][ T2406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.756946][ T2406] ? clear_bhb_loop+0x40/0x90 [ 844.756959][ T2406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.756968][ T2406] RIP: 0033:0x7f5d8279c819 [ 844.756980][ T2406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.756989][ T2406] RSP: 002b:00007f5d8373f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 844.757000][ T2406] RAX: ffffffffffffffda RBX: 00007f5d82a15fa0 RCX: 00007f5d8279c819 [ 844.757008][ T2406] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 844.757013][ T2406] RBP: 00007f5d8373f090 R08: 0000000000000000 R09: 0000000000000000 [ 844.757020][ T2406] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.757026][ T2406] R13: 00007f5d82a16038 R14: 00007f5d82a15fa0 R15: 00007ffc539553f8 [ 844.757042][ T2406] [ 845.175764][ T2420] netlink: 'syz.3.7806': attribute type 2 has an invalid length. [ 845.219727][T10988] lo speed is unknown, defaulting to 1000 [ 845.219747][T32208] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.225511][T10988] syz2: Port: 1 Link DOWN [ 845.254267][T32208] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.276554][T32208] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.316115][T32208] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.389793][ T2426] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 845.579053][ T2440] __nla_validate_parse: 14 callbacks suppressed [ 845.579076][ T2440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7812'. [ 845.877000][ T2455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7818'. [ 845.889019][ T2455] netlink: 'syz.3.7818': attribute type 2 has an invalid length. [ 845.999342][ T2466] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7821'. [ 846.035291][ T2466] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7821'. [ 846.608602][ T2511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7831'. [ 846.778570][ T2511] netlink: 'syz.4.7831': attribute type 2 has an invalid length. [ 846.810649][ T2511] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7831'. [ 847.292837][ T2536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7837'. [ 847.292837][ T2537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7837'. [ 847.344749][ T2536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7837'. [ 847.582740][ T2547] netlink: 'syz.1.7840': attribute type 10 has an invalid length. [ 847.650447][ T2547] team0: Port device netdevsim0 added [ 848.026952][ T2567] netlink: 'syz.4.7847': attribute type 33 has an invalid length. [ 848.036466][ T2567] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7847'. [ 848.048562][ T2567] `: renamed from team0 [ 849.076544][T32209] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.093745][T32209] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.112930][T32209] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.130733][T32209] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.296210][ T2677] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 849.895457][ T2724] team1: entered promiscuous mode [ 849.908084][ T2724] team1: entered allmulticast mode [ 849.919449][ T2724] 8021q: adding VLAN 0 to HW filter on device team1 [ 849.976632][ T2724] team2: entered promiscuous mode [ 849.985869][ T2724] team2: entered allmulticast mode [ 849.992960][ T2724] 8021q: adding VLAN 0 to HW filter on device team2 [ 850.204428][ T2745] netlink: 'syz.3.7901': attribute type 1 has an invalid length. [ 850.429349][ T2745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 850.545365][ T2763] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 851.184056][ T2805] __nla_validate_parse: 14 callbacks suppressed [ 851.184078][ T2805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7915'. [ 851.200041][ T2805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.212984][ T2805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.222995][ T2805] bond0: (slave batadv0): Releasing backup interface [ 851.383947][ T2822] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7919'. [ 851.697242][ T2850] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7927'. [ 851.848796][ T2864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7926'. [ 851.920820][ T2874] netlink: 'syz.0.7931': attribute type 1 has an invalid length. [ 851.929663][ T2874] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7931'. [ 851.954175][ T2874] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7931'. [ 852.033965][ T2866] lo speed is unknown, defaulting to 1000 [ 852.108747][ T2886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7934'. [ 852.117670][ T2886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7934'. [ 852.128744][ T2884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7933'. [ 852.138891][ T2883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7933'. [ 852.202603][ T2886] lo speed is unknown, defaulting to 1000 [ 852.855786][ T2912] tipc: Resetting bearer [ 852.909627][ T2924] FAULT_INJECTION: forcing a failure. [ 852.909627][ T2924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.943558][ T2924] CPU: 1 UID: 0 PID: 2924 Comm: syz.1.7946 Not tainted syzkaller #0 PREEMPT(full) [ 852.943585][ T2924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 852.943597][ T2924] Call Trace: [ 852.943605][ T2924] [ 852.943613][ T2924] dump_stack_lvl+0xe8/0x150 [ 852.943642][ T2924] should_fail_ex+0x412/0x560 [ 852.943673][ T2924] _copy_from_iter+0x1d3/0x1670 [ 852.943705][ T2924] ? rcu_is_watching+0x15/0xb0 [ 852.943736][ T2924] ? __pfx__copy_from_iter+0x10/0x10 [ 852.943771][ T2924] ? netlink_sendmsg+0x650/0xb40 [ 852.943791][ T2924] ? skb_put+0x11b/0x210 [ 852.943817][ T2924] netlink_sendmsg+0x6c0/0xb40 [ 852.943843][ T2924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.943865][ T2924] ? aa_sock_msg_perm+0xf1/0x1b0 [ 852.943894][ T2924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 852.943918][ T2924] ____sys_sendmsg+0x972/0x9f0 [ 852.943949][ T2924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.943981][ T2924] ? import_iovec+0x73/0xa0 [ 852.944004][ T2924] ___sys_sendmsg+0x2a5/0x360 [ 852.944033][ T2924] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.944089][ T2924] ? __fget_files+0x2a/0x420 [ 852.944121][ T2924] ? __fget_files+0x3a0/0x420 [ 852.944157][ T2924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 852.944183][ T2924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.944216][ T2924] ? __pfx_ksys_write+0x10/0x10 [ 852.944247][ T2924] do_syscall_64+0x14d/0xf80 [ 852.944273][ T2924] ? trace_irq_disable+0x3b/0x150 [ 852.944289][ T2924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.944308][ T2924] ? clear_bhb_loop+0x40/0x90 [ 852.944331][ T2924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.944346][ T2924] RIP: 0033:0x7f5c56d9c819 [ 852.944363][ T2924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.944378][ T2924] RSP: 002b:00007f5c57c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.944398][ T2924] RAX: ffffffffffffffda RBX: 00007f5c57016090 RCX: 00007f5c56d9c819 [ 852.944411][ T2924] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000004 [ 852.944423][ T2924] RBP: 00007f5c57c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 852.944434][ T2924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.944446][ T2924] R13: 00007f5c57016128 R14: 00007f5c57016090 R15: 00007ffc507df8e8 [ 852.944475][ T2924] [ 853.453685][ T2940] FAULT_INJECTION: forcing a failure. [ 853.453685][ T2940] name failslab, interval 1, probability 0, space 0, times 0 [ 853.495243][ T2940] CPU: 0 UID: 0 PID: 2940 Comm: syz.2.7950 Not tainted syzkaller #0 PREEMPT(full) [ 853.495268][ T2940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 853.495279][ T2940] Call Trace: [ 853.495286][ T2940] [ 853.495294][ T2940] dump_stack_lvl+0xe8/0x150 [ 853.495325][ T2940] should_fail_ex+0x412/0x560 [ 853.495358][ T2940] should_failslab+0xa8/0x100 [ 853.495382][ T2940] ? __kernfs_new_node+0xe9/0x8e0 [ 853.495410][ T2940] kmem_cache_alloc_noprof+0x87/0x650 [ 853.495439][ T2940] __kernfs_new_node+0xe9/0x8e0 [ 853.495473][ T2940] ? __pfx___kernfs_new_node+0x10/0x10 [ 853.495498][ T2940] ? kernfs_root+0x1c/0x230 [ 853.495530][ T2940] ? kernfs_root+0x1c/0x230 [ 853.495555][ T2940] ? kernfs_root+0x1c/0x230 [ 853.495578][ T2940] ? kernfs_root+0x1c/0x230 [ 853.495608][ T2940] kernfs_new_node+0x102/0x210 [ 853.495640][ T2940] __kernfs_create_file+0x4b/0x2e0 [ 853.495664][ T2940] sysfs_add_file_mode_ns+0x238/0x300 [ 853.495696][ T2940] internal_create_group+0x673/0x1180 [ 853.495738][ T2940] ? __pfx_internal_create_group+0x10/0x10 [ 853.495762][ T2940] ? kernfs_add_one+0x477/0x5c0 [ 853.495793][ T2940] ? up_write+0x1ab/0x410 [ 853.495814][ T2940] sysfs_create_groups+0x59/0x120 [ 853.495844][ T2940] device_add_attrs+0x1bf/0x5b0 [ 853.495866][ T2940] ? kernfs_put+0x40e/0x470 [ 853.495894][ T2940] ? __pfx_device_add_attrs+0x10/0x10 [ 853.495914][ T2940] ? kobject_put+0x516/0x560 [ 853.495939][ T2940] ? device_add_class_symlinks+0x21f/0x240 [ 853.495965][ T2940] device_add+0x496/0xb70 [ 853.495987][ T2940] ? device_initialize+0x26a/0x460 [ 853.496011][ T2940] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 853.496040][ T2940] wakeup_source_register+0x18a/0x380 [ 853.496075][ T2940] ep_insert+0xf34/0x1a40 [ 853.496108][ T2940] ? __pfx_ep_insert+0x10/0x10 [ 853.496138][ T2940] ? bpf_lsm_capable+0x9/0x20 [ 853.496171][ T2940] do_epoll_ctl+0x7f4/0xe80 [ 853.496208][ T2940] __x64_sys_epoll_ctl+0x165/0x1b0 [ 853.496233][ T2940] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 853.496264][ T2940] do_syscall_64+0x14d/0xf80 [ 853.496289][ T2940] ? trace_irq_disable+0x3b/0x150 [ 853.496306][ T2940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.496323][ T2940] ? clear_bhb_loop+0x40/0x90 [ 853.496345][ T2940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.496364][ T2940] RIP: 0033:0x7f5d8279c819 [ 853.496382][ T2940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.496398][ T2940] RSP: 002b:00007f5d8373f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 853.496419][ T2940] RAX: ffffffffffffffda RBX: 00007f5d82a15fa0 RCX: 00007f5d8279c819 [ 853.496433][ T2940] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 853.496444][ T2940] RBP: 00007f5d8373f090 R08: 0000000000000000 R09: 0000000000000000 [ 853.496456][ T2940] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.496469][ T2940] R13: 00007f5d82a16038 R14: 00007f5d82a15fa0 R15: 00007ffc539553f8 [ 853.496499][ T2940] [ 853.895253][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 853.909505][ T2949] x_tables: duplicate underflow at hook 1 [ 853.963202][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.002813][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.030654][ T2957] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.086304][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.099914][ T2957] !9: left promiscuous mode [ 854.189653][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.198153][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.206219][ T2951] netlink: 'syz.0.7953': attribute type 2 has an invalid length. [ 854.377305][ T2981] FAULT_INJECTION: forcing a failure. [ 854.377305][ T2981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.392854][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: syz.4.7966 Not tainted syzkaller #0 PREEMPT(full) [ 854.392881][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 854.392894][ T2981] Call Trace: [ 854.392901][ T2981] [ 854.392910][ T2981] dump_stack_lvl+0xe8/0x150 [ 854.392940][ T2981] should_fail_ex+0x412/0x560 [ 854.392970][ T2981] _copy_from_iter+0x1d3/0x1670 [ 854.393063][ T2981] ? rcu_is_watching+0x15/0xb0 [ 854.393094][ T2981] ? __pfx__copy_from_iter+0x10/0x10 [ 854.393129][ T2981] ? netlink_sendmsg+0x650/0xb40 [ 854.393155][ T2981] ? skb_put+0x11b/0x210 [ 854.393179][ T2981] netlink_sendmsg+0x6c0/0xb40 [ 854.393207][ T2981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.393227][ T2981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 854.393252][ T2981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 854.393273][ T2981] ____sys_sendmsg+0x972/0x9f0 [ 854.393304][ T2981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.393336][ T2981] ? import_iovec+0x73/0xa0 [ 854.393357][ T2981] ___sys_sendmsg+0x2a5/0x360 [ 854.393385][ T2981] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.393440][ T2981] ? __fget_files+0x2a/0x420 [ 854.393465][ T2981] ? __fget_files+0x3a0/0x420 [ 854.393513][ T2981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 854.393539][ T2981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.393572][ T2981] ? __pfx_ksys_write+0x10/0x10 [ 854.393603][ T2981] do_syscall_64+0x14d/0xf80 [ 854.393628][ T2981] ? trace_irq_disable+0x3b/0x150 [ 854.393644][ T2981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.393694][ T2981] ? clear_bhb_loop+0x40/0x90 [ 854.393717][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.393735][ T2981] RIP: 0033:0x7f0c2af9c819 [ 854.393753][ T2981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.393768][ T2981] RSP: 002b:00007f0c2bf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.393787][ T2981] RAX: ffffffffffffffda RBX: 00007f0c2b216090 RCX: 00007f0c2af9c819 [ 854.393800][ T2981] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000004 [ 854.393812][ T2981] RBP: 00007f0c2bf00090 R08: 0000000000000000 R09: 0000000000000000 [ 854.393824][ T2981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.393835][ T2981] R13: 00007f0c2b216128 R14: 00007f0c2b216090 R15: 00007ffeae209d28 [ 854.393864][ T2981] [ 854.982306][ T2989] bond3: entered allmulticast mode [ 854.989123][ T2989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.542403][ T3012] __nla_validate_parse: 7 callbacks suppressed [ 856.542423][ T3012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7977'. [ 858.839116][ T3004] geneve2: entered promiscuous mode [ 858.844559][ T3004] geneve2: entered allmulticast mode [ 859.260293][ T3012] veth11: entered promiscuous mode [ 859.353234][ T3042] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 859.531170][ T3013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 859.688775][ T3048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7988'. [ 859.873109][ T3058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7990'. [ 860.560138][ T3074] FAULT_INJECTION: forcing a failure. [ 860.560138][ T3074] name failslab, interval 1, probability 0, space 0, times 0 [ 860.574360][ T3074] CPU: 0 UID: 0 PID: 3074 Comm: syz.1.7992 Not tainted syzkaller #0 PREEMPT(full) [ 860.574384][ T3074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 860.574395][ T3074] Call Trace: [ 860.574403][ T3074] [ 860.574412][ T3074] dump_stack_lvl+0xe8/0x150 [ 860.574442][ T3074] should_fail_ex+0x412/0x560 [ 860.574474][ T3074] should_failslab+0xa8/0x100 [ 860.574500][ T3074] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 860.574523][ T3074] ? __alloc_skb+0x1d0/0x7d0 [ 860.574542][ T3074] ? __local_bh_enable_ip+0xd0/0x130 [ 860.574571][ T3074] __alloc_skb+0x1d0/0x7d0 [ 860.574596][ T3074] netlink_dump+0x1ef/0xe80 [ 860.574614][ T3074] ? rcu_is_watching+0x15/0xb0 [ 860.574640][ T3074] ? trace_kmalloc+0x2a/0x110 [ 860.574662][ T3074] ? __kmalloc_noprof+0x37d/0x760 [ 860.574684][ T3074] ? __pfx_netlink_dump+0x10/0x10 [ 860.574720][ T3074] ? netlink_lookup+0x30/0x200 [ 860.574736][ T3074] ? netlink_lookup+0x30/0x200 [ 860.574760][ T3074] __netlink_dump_start+0x5cb/0x7e0 [ 860.574787][ T3074] inet_diag_rcv_msg_compat+0x214/0x420 [ 860.574815][ T3074] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 860.574846][ T3074] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 860.574867][ T3074] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 860.574888][ T3074] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 860.574916][ T3074] ? sock_diag_rcv_msg+0x188/0x600 [ 860.574939][ T3074] sock_diag_rcv_msg+0x4cc/0x600 [ 860.574963][ T3074] netlink_rcv_skb+0x232/0x4b0 [ 860.574984][ T3074] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 860.575006][ T3074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.575037][ T3074] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.575065][ T3074] netlink_unicast+0x80f/0x9b0 [ 860.575100][ T3074] ? __pfx_netlink_unicast+0x10/0x10 [ 860.575137][ T3074] ? netlink_sendmsg+0x650/0xb40 [ 860.575155][ T3074] ? skb_put+0x11b/0x210 [ 860.575184][ T3074] netlink_sendmsg+0x813/0xb40 [ 860.575214][ T3074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.575238][ T3074] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.575266][ T3074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.575290][ T3074] ____sys_sendmsg+0x972/0x9f0 [ 860.575323][ T3074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.575356][ T3074] ? import_iovec+0x73/0xa0 [ 860.575380][ T3074] ___sys_sendmsg+0x2a5/0x360 [ 860.575409][ T3074] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.575467][ T3074] ? __fget_files+0x2a/0x420 [ 860.575492][ T3074] ? __fget_files+0x3a0/0x420 [ 860.575528][ T3074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 860.575555][ T3074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.575589][ T3074] ? __pfx_ksys_write+0x10/0x10 [ 860.575621][ T3074] do_syscall_64+0x14d/0xf80 [ 860.575647][ T3074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.575666][ T3074] ? clear_bhb_loop+0x40/0x90 [ 860.575688][ T3074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.575712][ T3074] RIP: 0033:0x7f5c56d9c819 [ 860.575730][ T3074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.575745][ T3074] RSP: 002b:00007f5c57c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.575765][ T3074] RAX: ffffffffffffffda RBX: 00007f5c57016090 RCX: 00007f5c56d9c819 [ 860.575778][ T3074] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000004 [ 860.575790][ T3074] RBP: 00007f5c57c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 860.575802][ T3074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.575813][ T3074] R13: 00007f5c57016128 R14: 00007f5c57016090 R15: 00007ffc507df8e8 [ 860.575843][ T3074] [ 861.578921][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7996'. [ 861.588414][ T3083] validate_nla: 58 callbacks suppressed [ 861.588433][ T3083] netlink: 'syz.1.7996': attribute type 30 has an invalid length. [ 861.608008][ T3083] netlink: 'syz.1.7996': attribute type 29 has an invalid length. [ 861.624057][ T3083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7996'. [ 861.728071][ T3086] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 861.919220][ T3093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7997'. [ 861.928836][ T3093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7997'. [ 861.938627][ T3093] netlink: 'syz.4.7997': attribute type 19 has an invalid length. [ 861.946720][ T3093] netlink: 'syz.4.7997': attribute type 20 has an invalid length. [ 862.937450][ T3107] netlink: 'syz.2.8003': attribute type 21 has an invalid length. [ 862.991916][ T3107] netlink: 'syz.2.8003': attribute type 20 has an invalid length. [ 863.283865][ T3117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8006'. [ 863.349436][T30352] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.358529][ T3117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8006'. [ 863.381793][T30352] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.417864][T30352] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.449468][T30352] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.498224][ T3124] tipc: Enabling of bearer rejected, failed to enable media [ 863.688831][ T3131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8009'. [ 863.723159][ T3130] bond0: (slave batadv0): Releasing backup interface [ 863.761237][ T3130] bond0: (slave bond_slave_0): Releasing backup interface [ 863.810440][ T3130] bond0: (slave bond_slave_1): Releasing backup interface [ 863.848885][ T3130] team0: Port device team_slave_0 removed [ 863.872203][ T3130] team0: Port device team_slave_1 removed [ 863.879163][ T3130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.921865][ T3130] team0: Port device netdevsim0 removed [ 863.932564][ T3130] bond1: (slave vxlan0): Releasing backup interface [ 863.957618][ T3130] bond2: (slave bridge1): Removing an active aggregator [ 863.970535][ T3130] bond2: (slave bridge1): Releasing backup interface [ 863.982663][ T3130] bond2: (slave bridge1): the permanent HWaddr of slave - 22:40:12:87:18:e6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 864.045363][ T3136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8011'. [ 864.096182][ T3130] bond2: (slave bridge2): Releasing backup interface [ 864.176963][ T3136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 864.305989][ T3137] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 864.592062][ T3146] FAULT_INJECTION: forcing a failure. [ 864.592062][ T3146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.625883][ T3146] CPU: 0 UID: 0 PID: 3146 Comm: syz.2.8013 Not tainted syzkaller #0 PREEMPT(full) [ 864.625911][ T3146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.625922][ T3146] Call Trace: [ 864.625931][ T3146] [ 864.625938][ T3146] dump_stack_lvl+0xe8/0x150 [ 864.625970][ T3146] should_fail_ex+0x412/0x560 [ 864.626001][ T3146] _copy_to_user+0x31/0xb0 [ 864.626026][ T3146] simple_read_from_buffer+0xe1/0x170 [ 864.626056][ T3146] proc_fail_nth_read+0x1bb/0x230 [ 864.626090][ T3146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 864.626119][ T3146] ? rw_verify_area+0x2a6/0x4d0 [ 864.626139][ T3146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 864.626166][ T3146] vfs_read+0x20c/0xa70 [ 864.626185][ T3146] ? fdget_pos+0x246/0x320 [ 864.626206][ T3146] ? __pfx___mutex_lock+0x10/0x10 [ 864.626234][ T3146] ? __pfx_vfs_read+0x10/0x10 [ 864.626256][ T3146] ? __fget_files+0x2a/0x420 [ 864.626286][ T3146] ? __fget_files+0x3a0/0x420 [ 864.626311][ T3146] ? __fget_files+0x2a/0x420 [ 864.626345][ T3146] ksys_read+0x150/0x270 [ 864.626367][ T3146] ? __pfx_ksys_read+0x10/0x10 [ 864.626398][ T3146] do_syscall_64+0x14d/0xf80 [ 864.626423][ T3146] ? trace_irq_disable+0x3b/0x150 [ 864.626440][ T3146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.626460][ T3146] ? clear_bhb_loop+0x40/0x90 [ 864.626482][ T3146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.626500][ T3146] RIP: 0033:0x7f5d8275d04e [ 864.626518][ T3146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 864.626533][ T3146] RSP: 002b:00007f5d8371dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 864.626553][ T3146] RAX: ffffffffffffffda RBX: 00007f5d8371e6c0 RCX: 00007f5d8275d04e [ 864.626566][ T3146] RDX: 000000000000000f RSI: 00007f5d8371e0a0 RDI: 0000000000000005 [ 864.626578][ T3146] RBP: 00007f5d8371e090 R08: 0000000000000000 R09: 0000000000000000 [ 864.626589][ T3146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.626600][ T3146] R13: 00007f5d82a16128 R14: 00007f5d82a16090 R15: 00007ffc539553f8 [ 864.626630][ T3146] [ 866.950602][ T3198] netlink: 'syz.0.8030': attribute type 1 has an invalid length. [ 866.973324][ T3198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8030'. [ 867.173352][ T3208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8034'. [ 867.907102][ T3211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8035'. [ 867.938578][ T3213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8034'. [ 867.982728][ T3208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8034'. [ 868.085595][ T3217] FAULT_INJECTION: forcing a failure. [ 868.085595][ T3217] name failslab, interval 1, probability 0, space 0, times 0 [ 868.146313][ T3217] CPU: 0 UID: 0 PID: 3217 Comm: syz.4.8037 Not tainted syzkaller #0 PREEMPT(full) [ 868.146341][ T3217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 868.146352][ T3217] Call Trace: [ 868.146359][ T3217] [ 868.146366][ T3217] dump_stack_lvl+0xe8/0x150 [ 868.146394][ T3217] should_fail_ex+0x412/0x560 [ 868.146422][ T3217] should_failslab+0xa8/0x100 [ 868.146445][ T3217] __kmalloc_cache_noprof+0x88/0x660 [ 868.146464][ T3217] ? take_dentry_name_snapshot+0x4eb/0x500 [ 868.146489][ T3217] ? wakeup_source_register+0x5b/0x380 [ 868.146514][ T3217] wakeup_source_register+0x5b/0x380 [ 868.146540][ T3217] ep_insert+0x1022/0x1a40 [ 868.146574][ T3217] ? __pfx_ep_insert+0x10/0x10 [ 868.146609][ T3217] ? bpf_lsm_capable+0x9/0x20 [ 868.146641][ T3217] do_epoll_ctl+0x7f4/0xe80 [ 868.146676][ T3217] __x64_sys_epoll_ctl+0x165/0x1b0 [ 868.146697][ T3217] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 868.146728][ T3217] do_syscall_64+0x14d/0xf80 [ 868.146753][ T3217] ? trace_irq_disable+0x3b/0x150 [ 868.146769][ T3217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.146788][ T3217] ? clear_bhb_loop+0x40/0x90 [ 868.146810][ T3217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.146828][ T3217] RIP: 0033:0x7f0c2af9c819 [ 868.146845][ T3217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.146861][ T3217] RSP: 002b:00007f0c2bf21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 868.146881][ T3217] RAX: ffffffffffffffda RBX: 00007f0c2b215fa0 RCX: 00007f0c2af9c819 [ 868.146895][ T3217] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 868.146906][ T3217] RBP: 00007f0c2bf21090 R08: 0000000000000000 R09: 0000000000000000 [ 868.146917][ T3217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.146929][ T3217] R13: 00007f0c2b216038 R14: 00007f0c2b215fa0 R15: 00007ffeae209d28 [ 868.146959][ T3217] [ 868.780328][ T3234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8043'. [ 868.897137][ T3237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8045'. [ 868.933110][ T3237] netlink: 'syz.3.8045': attribute type 2 has an invalid length. [ 869.008642][ T3240] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8045'. [ 869.080129][ T3237] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 869.135501][ T3237] bond3: left allmulticast mode [ 869.174665][ T3249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8048'. [ 869.199298][ T3249] netlink: 'syz.1.8048': attribute type 2 has an invalid length. [ 869.290494][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8049'. [ 869.340680][ T3249] bond5: left promiscuous mode [ 869.350254][ T3251] netlink: 'syz.0.8049': attribute type 2 has an invalid length. [ 869.494235][ T3251] team1: left promiscuous mode [ 869.499522][ T3251] team1: left allmulticast mode [ 869.525909][ T3251] team2: left promiscuous mode [ 869.531234][ T3251] team2: left allmulticast mode [ 869.543306][ T3251] geneve2: left promiscuous mode [ 869.548706][ T3251] geneve2: left allmulticast mode [ 869.567591][T32202] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.589319][T32202] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.598764][T32202] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.614495][T32202] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.005622][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.015503][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.128741][ T3278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.363887][ T3284] FAULT_INJECTION: forcing a failure. [ 870.363887][ T3284] name failslab, interval 1, probability 0, space 0, times 0 [ 870.409151][ T3284] CPU: 0 UID: 0 PID: 3284 Comm: syz.0.8062 Not tainted syzkaller #0 PREEMPT(full) [ 870.409180][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 870.409191][ T3284] Call Trace: [ 870.409199][ T3284] [ 870.409206][ T3284] dump_stack_lvl+0xe8/0x150 [ 870.409250][ T3284] should_fail_ex+0x412/0x560 [ 870.409282][ T3284] should_failslab+0xa8/0x100 [ 870.409309][ T3284] __kmalloc_cache_noprof+0x88/0x660 [ 870.409330][ T3284] ? take_dentry_name_snapshot+0x4eb/0x500 [ 870.409357][ T3284] ? wakeup_source_register+0x5b/0x380 [ 870.409383][ T3284] wakeup_source_register+0x5b/0x380 [ 870.409410][ T3284] ep_insert+0x1022/0x1a40 [ 870.409444][ T3284] ? __pfx_ep_insert+0x10/0x10 [ 870.409472][ T3284] ? bpf_lsm_capable+0x9/0x20 [ 870.409510][ T3284] do_epoll_ctl+0x7f4/0xe80 [ 870.409546][ T3284] __x64_sys_epoll_ctl+0x165/0x1b0 [ 870.409568][ T3284] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 870.409597][ T3284] do_syscall_64+0x14d/0xf80 [ 870.409622][ T3284] ? trace_irq_disable+0x3b/0x150 [ 870.409638][ T3284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.409657][ T3284] ? clear_bhb_loop+0x40/0x90 [ 870.409680][ T3284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.409697][ T3284] RIP: 0033:0x7fb13eb9c819 [ 870.409715][ T3284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.409731][ T3284] RSP: 002b:00007fb13f9c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 870.409750][ T3284] RAX: ffffffffffffffda RBX: 00007fb13ee15fa0 RCX: 00007fb13eb9c819 [ 870.409763][ T3284] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 870.409774][ T3284] RBP: 00007fb13f9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 870.409785][ T3284] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.409797][ T3284] R13: 00007fb13ee16038 R14: 00007fb13ee15fa0 R15: 00007ffc54d86b18 [ 870.409828][ T3284] [ 871.467087][T32209] gretap0 (unregistering): left promiscuous mode [ 871.526261][T32209] bond2 (unregistering): (slave gretap1): Releasing active interface [ 876.401686][T32209] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 876.410520][T32209] bridge3 (unregistering): left promiscuous mode [ 878.364192][T32209] bond1 (unregistering): Released all slaves [ 878.382023][T32209] bond2 (unregistering): Released all slaves [ 878.427564][T32209] bond0 (unregistering): Released all slaves [ 878.451399][T32209] bond3 (unregistering): Released all slaves [ 878.475982][T32209] bond4 (unregistering): (slave veth27): Releasing active interface [ 878.497099][T32209] bond4 (unregistering): Released all slaves [ 878.518702][T32209] bond5 (unregistering): Released all slaves [ 878.732836][ T3331] FAULT_INJECTION: forcing a failure. [ 878.732836][ T3331] name failslab, interval 1, probability 0, space 0, times 0 [ 878.783211][ T3331] CPU: 0 UID: 0 PID: 3331 Comm: syz.2.8076 Not tainted syzkaller #0 PREEMPT(full) [ 878.783238][ T3331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.783249][ T3331] Call Trace: [ 878.783257][ T3331] [ 878.783266][ T3331] dump_stack_lvl+0xe8/0x150 [ 878.783296][ T3331] should_fail_ex+0x412/0x560 [ 878.783327][ T3331] should_failslab+0xa8/0x100 [ 878.783353][ T3331] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 878.783377][ T3331] ? kobject_set_name_vargs+0x61/0x110 [ 878.783401][ T3331] kvasprintf+0xeb/0x1a0 [ 878.783425][ T3331] ? __pfx_kvasprintf+0x10/0x10 [ 878.783454][ T3331] ? do_raw_spin_lock+0x12b/0x2f0 [ 878.783479][ T3331] ? kvasprintf_const+0xe1/0x240 [ 878.783502][ T3331] kobject_set_name_vargs+0x61/0x110 [ 878.783523][ T3331] dev_set_name+0xe2/0x140 [ 878.783549][ T3331] ? __pfx_dev_set_name+0x10/0x10 [ 878.783568][ T3331] ? __init_waitqueue_head+0xa9/0x150 [ 878.783593][ T3331] ? device_initialize+0x26a/0x460 [ 878.783617][ T3331] wakeup_source_sysfs_add+0x1a9/0x2c0 [ 878.783646][ T3331] wakeup_source_register+0x18a/0x380 [ 878.783673][ T3331] ep_insert+0x1022/0x1a40 [ 878.783704][ T3331] ? __pfx_ep_insert+0x10/0x10 [ 878.783734][ T3331] ? bpf_lsm_capable+0x9/0x20 [ 878.783767][ T3331] do_epoll_ctl+0x7f4/0xe80 [ 878.783802][ T3331] __x64_sys_epoll_ctl+0x165/0x1b0 [ 878.783824][ T3331] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 878.783854][ T3331] do_syscall_64+0x14d/0xf80 [ 878.783878][ T3331] ? trace_irq_disable+0x3b/0x150 [ 878.783895][ T3331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.783914][ T3331] ? clear_bhb_loop+0x40/0x90 [ 878.783936][ T3331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.783954][ T3331] RIP: 0033:0x7f5d8279c819 [ 878.783971][ T3331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.783987][ T3331] RSP: 002b:00007f5d8373f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 878.784007][ T3331] RAX: ffffffffffffffda RBX: 00007f5d82a15fa0 RCX: 00007f5d8279c819 [ 878.784020][ T3331] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 878.784031][ T3331] RBP: 00007f5d8373f090 R08: 0000000000000000 R09: 0000000000000000 [ 878.784042][ T3331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.784054][ T3331] R13: 00007f5d82a16038 R14: 00007f5d82a15fa0 R15: 00007ffc539553f8 [ 878.784084][ T3331] [ 879.152961][ T3335] __nla_validate_parse: 4 callbacks suppressed [ 879.152981][ T3335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8077'. [ 879.580571][ T3359] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8083'. [ 880.272274][ T3384] netlink: 'syz.1.8086': attribute type 3 has an invalid length. [ 880.290322][ T3384] netlink: 772 bytes leftover after parsing attributes in process `syz.1.8086'. [ 880.342091][ T3384] netlink: 'syz.1.8086': attribute type 3 has an invalid length. [ 880.368766][ T3384] netlink: 772 bytes leftover after parsing attributes in process `syz.1.8086'. [ 880.414440][ T3385] netlink: 'syz.1.8086': attribute type 10 has an invalid length. [ 880.939529][ T3385] team0: Port device veth1 added [ 880.945585][T32209] tipc: Left network mode [ 881.011883][ T3386] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 881.057053][ T3386] bond6 (unregistering): Released all slaves [ 882.213211][ T3411] FAULT_INJECTION: forcing a failure. [ 882.213211][ T3411] name failslab, interval 1, probability 0, space 0, times 0 [ 882.226391][ T3411] CPU: 0 UID: 0 PID: 3411 Comm: syz.4.8092 Not tainted syzkaller #0 PREEMPT(full) [ 882.226417][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 882.226430][ T3411] Call Trace: [ 882.226438][ T3411] [ 882.226446][ T3411] dump_stack_lvl+0xe8/0x150 [ 882.226477][ T3411] should_fail_ex+0x412/0x560 [ 882.226509][ T3411] should_failslab+0xa8/0x100 [ 882.226540][ T3411] __kmalloc_cache_noprof+0x88/0x660 [ 882.226562][ T3411] ? device_add+0xbe/0xb70 [ 882.226589][ T3411] device_add+0xbe/0xb70 [ 882.226610][ T3411] ? device_initialize+0x26a/0x460 [ 882.226635][ T3411] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 882.226664][ T3411] wakeup_source_register+0x18a/0x380 [ 882.226690][ T3411] ep_insert+0x1022/0x1a40 [ 882.226723][ T3411] ? __pfx_ep_insert+0x10/0x10 [ 882.226753][ T3411] ? bpf_lsm_capable+0x9/0x20 [ 882.226785][ T3411] do_epoll_ctl+0x7f4/0xe80 [ 882.226820][ T3411] __x64_sys_epoll_ctl+0x165/0x1b0 [ 882.226841][ T3411] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 882.226871][ T3411] do_syscall_64+0x14d/0xf80 [ 882.226896][ T3411] ? trace_irq_disable+0x3b/0x150 [ 882.226912][ T3411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.226931][ T3411] ? clear_bhb_loop+0x40/0x90 [ 882.226953][ T3411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.226972][ T3411] RIP: 0033:0x7f0c2af9c819 [ 882.226990][ T3411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.227005][ T3411] RSP: 002b:00007f0c2bf21028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 882.227025][ T3411] RAX: ffffffffffffffda RBX: 00007f0c2b215fa0 RCX: 00007f0c2af9c819 [ 882.227038][ T3411] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 882.227049][ T3411] RBP: 00007f0c2bf21090 R08: 0000000000000000 R09: 0000000000000000 [ 882.227061][ T3411] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 882.227073][ T3411] R13: 00007f0c2b216038 R14: 00007f0c2b215fa0 R15: 00007ffeae209d28 [ 882.227102][ T3411] [ 882.932459][ T3367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.025573][ T3426] netlink: 'syz.4.8095': attribute type 5 has an invalid length. [ 883.158441][ T3430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8096'. [ 883.197074][ T3430] netlink: 'syz.2.8096': attribute type 1 has an invalid length. [ 883.784414][ T3450] FAULT_INJECTION: forcing a failure. [ 883.784414][ T3450] name failslab, interval 1, probability 0, space 0, times 0 [ 883.797525][ T3450] CPU: 0 UID: 0 PID: 3450 Comm: syz.2.8103 Not tainted syzkaller #0 PREEMPT(full) [ 883.797557][ T3450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 883.797569][ T3450] Call Trace: [ 883.797576][ T3450] [ 883.797585][ T3450] dump_stack_lvl+0xe8/0x150 [ 883.797616][ T3450] should_fail_ex+0x412/0x560 [ 883.797648][ T3450] should_failslab+0xa8/0x100 [ 883.797673][ T3450] __kmalloc_cache_noprof+0x88/0x660 [ 883.797695][ T3450] ? device_add+0xbe/0xb70 [ 883.797723][ T3450] device_add+0xbe/0xb70 [ 883.797744][ T3450] ? device_initialize+0x26a/0x460 [ 883.797768][ T3450] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 883.797797][ T3450] wakeup_source_register+0x18a/0x380 [ 883.797823][ T3450] ep_insert+0x1022/0x1a40 [ 883.797856][ T3450] ? __pfx_ep_insert+0x10/0x10 [ 883.797885][ T3450] ? bpf_lsm_capable+0x9/0x20 [ 883.797919][ T3450] do_epoll_ctl+0x7f4/0xe80 [ 883.797955][ T3450] __x64_sys_epoll_ctl+0x165/0x1b0 [ 883.797975][ T3450] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 883.798006][ T3450] do_syscall_64+0x14d/0xf80 [ 883.798032][ T3450] ? trace_irq_disable+0x3b/0x150 [ 883.798048][ T3450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.798067][ T3450] ? clear_bhb_loop+0x40/0x90 [ 883.798090][ T3450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.798109][ T3450] RIP: 0033:0x7f5d8279c819 [ 883.798127][ T3450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.798142][ T3450] RSP: 002b:00007f5d8373f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 883.798162][ T3450] RAX: ffffffffffffffda RBX: 00007f5d82a15fa0 RCX: 00007f5d8279c819 [ 883.798176][ T3450] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 883.798186][ T3450] RBP: 00007f5d8373f090 R08: 0000000000000000 R09: 0000000000000000 [ 883.798198][ T3450] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 883.798217][ T3450] R13: 00007f5d82a16038 R14: 00007f5d82a15fa0 R15: 00007ffc539553f8 [ 883.798248][ T3450] [ 884.250902][ T3458] lo speed is unknown, defaulting to 1000 [ 884.593594][ T3464] xt_socket: unknown flags 0xfc [ 884.754132][ T3470] sock: sock_timestamping_bind_phc: sock not bind to device [ 884.786008][ T3470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8110'. [ 884.866170][ T3475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8110'. [ 885.016914][ T3477] gre0: MTU too low for tipc bearer [ 885.022687][ T3477] tipc: Enabling of bearer rejected, failed to enable media [ 885.255313][ T3482] netlink: 'syz.3.8112': attribute type 4 has an invalid length. [ 885.276972][ T3482] netlink: 'syz.3.8112': attribute type 4 has an invalid length. [ 885.357782][T10988] lo speed is unknown, defaulting to 1000 [ 885.371339][T10988] syz2: Port: 1 Link ACTIVE [ 897.107740][ C1] sched: DL replenish lagged too much [ 930.309956][ T3529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.612929][ T9862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 931.226149][ T9862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 931.703731][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.977104][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 932.026445][ T9862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 933.066395][ T9862] Bluetooth: hci4: command 0x1001 tx timeout [ 933.182198][T23347] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 933.415733][T23347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 935.006779][T23347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 935.033054][T23347] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 935.495325][T23347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 935.916798][T23347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 935.968610][ T3527] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 936.697607][T23347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 941.785539][T23347] Bluetooth: hci6: command tx timeout [ 942.735916][T23347] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 943.116998][T23347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 943.503190][T23347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 943.874769][T23347] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 944.040297][T23347] Bluetooth: hci6: command tx timeout [ 944.171917][T23347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 946.080659][ T3529] Bluetooth: hci6: command tx timeout [ 948.275770][T23347] Bluetooth: hci6: command tx timeout [ 949.122075][T23347] Bluetooth: hci7: command tx timeout [ 950.497213][ T3529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.676386][ T3529] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.954323][ T3529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 951.266429][ T3529] Bluetooth: hci7: command tx timeout [ 951.427504][ T3529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 951.775248][ T3529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 953.503529][ T3529] Bluetooth: hci7: command tx timeout [ 955.004490][ T3546] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 955.394557][ T3546] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 955.453703][ T3546] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 955.617644][ T3546] Bluetooth: hci7: command tx timeout [ 955.807636][T23347] Bluetooth: hci4: command tx timeout [ 956.871695][ T3546] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 957.096277][ T3546] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 958.010922][ T3546] Bluetooth: hci4: command tx timeout [ 960.203280][ T3546] Bluetooth: hci4: command tx timeout [ 961.581168][ T3546] Bluetooth: hci8: command tx timeout [ 962.305478][ T3546] Bluetooth: hci4: command tx timeout [ 963.726511][ T3546] Bluetooth: hci8: command tx timeout [ 965.857483][ T3546] Bluetooth: hci8: command tx timeout [ 968.015017][ T3546] Bluetooth: hci8: command tx timeout [ 982.096049][ T3546] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 982.464915][ T3546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.544206][ T3546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 984.200473][ T3551] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 991.990615][ T9862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.890730][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.955687][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.566575][ T9862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 995.352727][ T9862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 996.526299][ T9862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 996.715564][ T9862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1001.726528][ T3546] Bluetooth: hci1: command tx timeout [ 1002.654514][ T9862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1002.733394][ T9862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1002.861672][ T9862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1003.852201][ T9862] Bluetooth: hci1: command tx timeout [ 1004.705983][ T9862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1004.798535][ T9862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1006.001509][ T9862] Bluetooth: hci1: command tx timeout [ 1008.109915][ T9862] Bluetooth: hci0: command tx timeout [ 1008.116381][ T9862] Bluetooth: hci1: command tx timeout [ 1010.267258][ T9862] Bluetooth: hci0: command tx timeout [ 1012.325545][ T3546] Bluetooth: hci0: command tx timeout [ 1012.349623][T23347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1013.584031][T23347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1013.773220][T23347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1014.504875][T23347] Bluetooth: hci0: command tx timeout [ 1014.666551][ T3546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1015.475131][T23347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1022.180079][ T9862] Bluetooth: hci2: command tx timeout [ 1024.252760][ T9862] Bluetooth: hci2: command tx timeout [ 1025.985407][T23347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.312788][T23347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.455779][T23347] Bluetooth: hci2: command tx timeout [ 1026.916618][ T3546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1028.206626][ T3546] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1028.556882][ T3546] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1028.889972][ T9862] Bluetooth: hci2: command tx timeout [ 1032.409890][ T3546] Bluetooth: hci3: command tx timeout [ 1033.084068][ T9862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1034.344464][ T9862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1034.458700][T23347] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1034.539967][T23347] Bluetooth: hci3: command tx timeout [ 1034.787107][ T3565] lo speed is unknown, defaulting to 1000 [ 1034.974046][T23347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1035.303246][T23347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1036.639343][T23347] Bluetooth: hci3: command tx timeout [ 1038.262936][ T3556] lo speed is unknown, defaulting to 1000 [ 1038.820715][T23347] Bluetooth: hci3: command tx timeout [ 1042.110371][ T3561] lo speed is unknown, defaulting to 1000 [ 1044.741616][ T3572] lo speed is unknown, defaulting to 1000 [ 1046.549148][ T9862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1046.685726][ T9862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1046.743968][ T9862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1047.853608][ T9862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1048.093264][ T9862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1049.422735][T23347] Bluetooth: hci5: command tx timeout [ 1050.809957][ T9862] Bluetooth: hci7: command tx timeout [ 1051.875595][T23347] Bluetooth: hci5: command tx timeout [ 1052.895166][T23347] Bluetooth: hci7: command tx timeout [ 1053.913264][T23347] Bluetooth: hci5: command tx timeout [ 1054.621159][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.658676][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1055.654869][T23347] Bluetooth: hci7: command tx timeout [ 1056.351987][T23347] Bluetooth: hci5: command tx timeout [ 1057.830117][T23347] Bluetooth: hci7: command tx timeout [ 1060.979998][ T3578] lo speed is unknown, defaulting to 1000 [ 1061.106219][ T9862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1061.611747][ T9862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1062.012014][ T9862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1062.170076][ T9862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1062.244277][ T9862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1065.691589][ T9862] Bluetooth: hci4: command tx timeout [ 1067.820723][T23347] Bluetooth: hci4: command tx timeout [ 1068.230104][T23347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1068.615489][T23347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1068.711640][T23347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1068.854486][T23347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1069.343318][T23347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1069.943591][ T9862] Bluetooth: hci4: command tx timeout [ 1072.023843][T23347] Bluetooth: hci4: command tx timeout [ 1073.157082][T23347] Bluetooth: hci6: command tx timeout [ 1073.569754][ T3581] lo speed is unknown, defaulting to 1000 [ 1075.214267][T23347] Bluetooth: hci6: command tx timeout [ 1077.555237][T23347] Bluetooth: hci6: command tx timeout [ 1079.605504][T23347] Bluetooth: hci6: command tx timeout [ 1087.568509][ T9862] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1087.646746][ T9862] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1087.950919][ T9862] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1088.284406][ T9862] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1088.394866][ T9862] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1091.635199][T23347] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1091.715049][T23347] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1091.775857][T23347] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1091.851189][T23347] Bluetooth: hci8: command tx timeout [ 1091.940928][T23347] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1092.050542][T23347] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1093.989564][T23347] Bluetooth: hci8: command tx timeout [ 1094.922519][T23347] Bluetooth: hci9: command tx timeout [ 1096.146533][T23347] Bluetooth: hci8: command tx timeout [ 1097.208127][T23347] Bluetooth: hci9: command tx timeout [ 1098.269519][ T9862] Bluetooth: hci8: command tx timeout [ 1099.285081][ T9862] Bluetooth: hci9: command tx timeout [ 1101.388648][ T9862] Bluetooth: hci9: command tx timeout [ 1114.889685][T23347] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1115.244949][T23347] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1115.337047][T23347] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1115.516270][T23347] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1115.659301][T23347] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1115.908259][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.939190][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1120.515822][ T9862] Bluetooth: hci10: command tx timeout [ 1122.466617][ T3546] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1122.566494][ T3546] Bluetooth: hci10: command tx timeout [ 1122.639723][ T3546] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1122.755937][ T3546] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1122.991827][ T3546] Bluetooth: hci1: command 0x0406 tx timeout [ 1123.153752][ T3546] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1123.352908][ T3546] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1126.217184][T23347] Bluetooth: hci10: command tx timeout [ 1128.366920][ T3546] Bluetooth: hci0: command 0x0406 tx timeout [ 1128.390357][ T3546] Bluetooth: hci10: command tx timeout [ 1128.395920][ T3546] Bluetooth: hci11: command tx timeout [ 1130.594626][T23347] Bluetooth: hci11: command tx timeout [ 1131.613180][ T3533] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1131.763441][ T3533] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1131.945753][ T3533] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1132.110177][ T3533] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1132.451564][ T3533] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1132.679271][T23347] Bluetooth: hci11: command tx timeout [ 1134.722827][T23347] Bluetooth: hci11: command tx timeout [ 1134.977338][T23347] Bluetooth: hci12: command tx timeout [ 1137.636004][T23347] Bluetooth: hci12: command tx timeout [ 1139.749923][T23347] Bluetooth: hci12: command tx timeout [ 1141.975613][ T3533] Bluetooth: hci12: command tx timeout [ 1143.762596][ T3533] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.891361][T23347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1148.972148][T23347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1149.080156][T23347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1149.458257][T23347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1149.597814][T23347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1152.633602][ T9862] Bluetooth: hci4: command tx timeout [ 1152.916329][ T9862] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1153.429134][ T9862] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1153.554588][ T9862] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1153.679446][ T9862] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1153.736084][ T9862] Bluetooth: hci3: command 0x0406 tx timeout [ 1153.860938][ T9862] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1154.859004][ T3529] Bluetooth: hci4: command tx timeout [ 1156.903001][T23347] Bluetooth: hci4: command tx timeout [ 1158.964493][T23347] Bluetooth: hci13: command tx timeout [ 1159.051173][T23347] Bluetooth: hci4: command tx timeout [ 1161.132887][T23347] Bluetooth: hci13: command tx timeout [ 1163.417273][T23347] Bluetooth: hci13: command tx timeout [ 1165.610929][T23347] Bluetooth: hci13: command tx timeout [ 1167.294656][ T9862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1167.390617][ T9862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1167.656160][ T9862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1168.236081][ T9862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1168.456038][ T9862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1169.073830][T23347] Bluetooth: hci5: command 0x0406 tx timeout [ 1171.780070][T23347] Bluetooth: hci6: command tx timeout [ 1173.860990][ T3533] Bluetooth: hci6: command tx timeout [ 1174.241289][ T3533] Bluetooth: hci7: command 0x0406 tx timeout [ 1175.686689][ T3533] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1176.070458][ T3533] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1176.095708][ T9862] Bluetooth: hci6: command tx timeout [ 1176.171110][ T3533] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1176.312692][ T3533] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1176.656122][ T3533] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1177.309427][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.347060][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1178.155876][ T3533] Bluetooth: hci6: command tx timeout [ 1182.770537][ T3533] Bluetooth: hci8: command tx timeout [ 1184.835883][ T3533] Bluetooth: hci8: command tx timeout [ 1186.912180][ T3533] Bluetooth: hci8: command tx timeout [ 1189.008942][ T3533] Bluetooth: hci8: command tx timeout [ 1189.665218][T23347] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1190.048837][T23347] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1190.146084][T23347] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1190.306221][T23347] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1190.391744][T23347] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1193.320445][T23347] Bluetooth: hci9: command tx timeout [ 1195.446070][ T3533] Bluetooth: hci9: command tx timeout [ 1197.649898][ T3533] Bluetooth: hci9: command tx timeout [ 1199.689882][ T3533] Bluetooth: hci9: command tx timeout [ 1207.006418][T23347] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1207.084222][T23347] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1207.707383][T23347] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1208.065813][T23347] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1208.209233][T23347] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1211.434394][T23347] Bluetooth: hci14: command tx timeout [ 1211.631709][ T3533] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1211.719643][ T3533] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1211.818683][ T3533] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1211.943794][ T3533] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1212.057175][ T3533] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1213.551477][ T3533] Bluetooth: hci14: command tx timeout [ 1214.984123][ T3533] Bluetooth: hci15: command tx timeout [ 1215.688121][ T3533] Bluetooth: hci14: command tx timeout [ 1217.041640][ T3533] Bluetooth: hci15: command tx timeout [ 1217.793229][ T3533] Bluetooth: hci14: command tx timeout [ 1219.137530][ T3533] Bluetooth: hci15: command tx timeout [ 1221.226402][ T3533] Bluetooth: hci15: command tx timeout [ 1230.175174][T23347] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1230.292802][T23347] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1231.124663][T23347] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1231.854269][T23347] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1232.220461][T23347] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1234.182729][ T31] INFO: task syz-executor:3581 blocked for more than 143 seconds. [ 1234.207312][ T31] Not tainted syzkaller #0 [ 1235.629678][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1235.655105][ T31] task:syz-executor state:D stack:25440 pid:3581 tgid:3581 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1236.373146][T23347] Bluetooth: hci16: command tx timeout [ 1236.890389][ T31] Call Trace: [ 1236.893729][ T31] [ 1236.896674][ T31] __schedule+0x15dd/0x52d0 [ 1237.624373][ T31] ? __pfx_internal_create_group+0x10/0x10 [ 1238.421029][ T31] ? __kmalloc_noprof+0x37d/0x760 [ 1238.426124][ T31] ? __pfx___schedule+0x10/0x10 [ 1238.498489][T23347] Bluetooth: hci16: command tx timeout [ 1238.638032][ T1293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.733668][ T1293] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1239.479236][ T31] ? schedule+0x90/0x360 [ 1239.483563][ T31] schedule+0x164/0x360 [ 1240.174657][ T31] schedule_preempt_disabled+0x13/0x30 [ 1240.197516][ T31] __mutex_lock+0x7fe/0x1300 [ 1240.764964][ T3533] Bluetooth: hci16: command tx timeout [ 1240.811277][ T3533] Bluetooth: hci10: command 0x0406 tx timeout [ 1241.435899][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1241.453939][ T31] ? add_one_compat_dev+0xf0/0x650 [ 1242.044703][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1242.162669][ T31] add_one_compat_dev+0xf0/0x650 [ 1242.195111][ T31] ? down_read+0x272/0x2e0 [ 1242.670035][ T31] rdma_dev_init_net+0x243/0x2f0 [ 1242.675050][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1242.918142][ T9862] Bluetooth: hci16: command tx timeout [ 1243.181783][ T31] ? __kmalloc_noprof+0x37d/0x760 [ 1243.186885][ T31] ops_init+0x35c/0x5c0 [ 1243.386343][ T31] setup_net+0x118/0x340 [ 1243.483807][ T31] ? __pfx_setup_net+0x10/0x10 [ 1243.501939][ T31] ? preinit_net+0x47d/0x780 [ 1243.506595][ T31] copy_net_ns+0x50e/0x730 [ 1243.746702][ T31] create_new_namespaces+0x3e7/0x6a0 [ 1243.894229][ T31] ? security_capable+0x7e/0x2c0 [ 1244.023185][ T31] unshare_nsproxy_namespaces+0x11a/0x160 [ 1244.042090][ T31] ksys_unshare+0x51d/0x930 [ 1244.046660][ T31] ? fput_close_sync+0x11f/0x240