last executing test programs: 12.669733117s ago: executing program 2 (id=6341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000240)=[{0x6, 0x0, 0x6, 0x1}, {0x40, 0x5d, 0x2, 0x190b87f7}, {0x9, 0x1, 0x3b, 0xffff8000}]}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='rxrpc_rx_rwind_change\x00', r4, 0x0, 0x8001}, 0x6d) (async) shutdown(r3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) ppoll(&(0x7f0000000040)=[{r1}, {r1, 0x4402}, {r0, 0x20}], 0x3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, 0x0, 0x2000c094) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) 12.53197414s ago: executing program 2 (id=6344): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/15, 0xf) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x71}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/26, 0x1a}], 0x1}, 0x4}], 0x2, 0x40008140, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)}}], 0x1, 0x2000c000) 7.357987293s ago: executing program 2 (id=6376): bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0xfffffffffffffffe, 0x400403, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0xd, 0x0, 0x7}, 0xfffffff9, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x8}, 0x1) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 7.091150379s ago: executing program 2 (id=6378): r0 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001480)=""/83, 0x53}], 0x2}}], 0x1, 0x40010122, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000002c0)={@tipc=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, {&(0x7f00000001c0)=""/217, 0xd9}, &(0x7f0000000040), 0xa}, 0xa0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000014c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 6.593519961s ago: executing program 2 (id=6380): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000051000200000000000800a001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ae00000085000000c80000049500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0xa}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2d}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x14, 0x40, 0x4, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x19af90f06f4514f1}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=@deltaction={0x1cc, 0x31, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x48be}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff00}}, {0xc, 0x5e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x1cc}}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000002f80)={0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.911556804s ago: executing program 2 (id=6384): unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='fdb_delete\x00', r3}, 0x18) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="318300fbffff0080"], 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x803, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1e8dbb0650ef8644) socket$inet6_udp(0xa, 0x2, 0x0) 5.69150333s ago: executing program 0 (id=6386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="f801000010000100ffffff0700001000fe80000000000000000000000000000c000000000000bf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000003c000000fc01000000000000000060000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000290d00000000000000000000000000000a00010000000000000000004c0012"], 0x1f8}}, 0x0) 5.397563426s ago: executing program 0 (id=6389): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0xfffffffd, 0x3}, {0xfffffffd, 0x4, 0x90009, 0x5}], 0x10, 0xffffdff7}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0xa, 0x73) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r3, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+g\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.737099359s ago: executing program 0 (id=6391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'ip6gretap0\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120003000000140000086034973e02e72f4d0b8d698ac7c938a62fe7079a641a327c180e99387cffd47c04a1de30438450d2e67c"], 0xfdef) 3.938168377s ago: executing program 4 (id=6394): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="aa99e0cf190a8b1fc21646a500c38d23c6be871dce2eed972d42d881527588f18d37f46ab7a1b4fd76884ea282d46de5c480c0998752db22f01a6527b389aa3d9283ea8bb1e03d1e3a28015a5196e65d529563d1e9015d427f059f5be5896b4e010a95fe8a804985412c", 0x6a}, 0x1, 0x0, 0x0, 0x1000}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x3}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) write$cgroup_devices(r5, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r5, 0xec1b3000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r7, 0x0, '\x00', 0x0, r6, 0x0, 0x80}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x3ff, 0x2, &(0x7f0000000100)=""/2, 0x41000, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000140)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[{0x0, 0x1, 0x6, 0x8}, {0x1, 0x1, 0x8, 0x5}, {0x5, 0x4, 0x6, 0x1}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) 3.937497012s ago: executing program 3 (id=6395): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x1, 0x485c) (async) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000880)="a2d557", 0x3}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x1}, 0x10) (async) recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) (async) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000009, 0x11, r1, 0xcf70e000) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="050000000000000002004e24ac14140a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000002004e22ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaeffc5385ee1a088dbd2d365799114b3a28f2752ae345c7d51f77c410a9c4fcbd50e913b4f47418dd86576991b21a06a1059a6c3e509cb3c021dd72869ffa195207932285f2005cedbdd1b7f76cc618a36eae26dc4889ecbf64574ae152f6610c41d7"], 0x290) (async) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000280)={@multicast2, @loopback}, &(0x7f00000003c0)=0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r2, 0x2000) (async) getsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c1400022dbd7000fc010000000000008000000008003d00000000f2d620ef6e000800030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) 3.754318733s ago: executing program 4 (id=6396): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000cbd701004f7ffff04000000080009"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) 3.688006953s ago: executing program 3 (id=6397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000002000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) 3.547715778s ago: executing program 0 (id=6398): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.416249308s ago: executing program 3 (id=6400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000480000000b0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000340003"], 0xf0}}, 0x0) 3.410055462s ago: executing program 0 (id=6401): r0 = socket$netlink(0x10, 0x3, 0xe) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880400280012800b0001000c0004000200000100c28000080005000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xc}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0x48) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="924016c29c99b475a6652c43fa2a2a819e4617b0c7ec8e24e3225e7a042396d9f1e1cdee0d487cd5706e1b702318cc7266672638d02fbd7d94be8996cad76152237ac716ebba90a30017026590e46c2f33af63ac95c2d373670e414288b9b3a9b3486fbfb2cb595b27091cd4e802d7b626608cdac25956ca10d9583c46496174af497a919b0b2343f578c18616b6fec46dd758f0690ddd5f437e", @ANYBLOB="01000000ffffff7f000000000000280017db2c955f26c824683a766c616e30000000140002800800010012100000060003ea"], 0x3c}}, 0xc020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16=r7, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000700)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)="58d77232b2cda64ce8d4e828234f797dc2b27f5d2e500ecab3e16152019adf18c944a69a1e088fc99f1c3f286be691f923c8149879e987f67d7ab68d36743d31ac7c6ba3347876a7e289c7fb60324965ef0c1ab7383ee9a00c79e910902c89cf29eccb42526b7438de683430276b9d71603b207d9c7b2d3e1760c6454d5372bcac0eac8300086259fe6f2fc431d2180bf03b10e267a6e8e1031e2b6688", 0x9d}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000840)="40b7449155162649ca9d3759302d1c94aa4f148e75e67e758d260788b4bfda792375ea93eec7ef24d4d4a059e79a632192b2d64a520c9e61739c7175ec11e8564bb42eb0f42000ffe8dc6c60d9420605280531702de06ba1861128bf20bd857850d07c83a93b1e3f6ae4c63c3e6a045f4b1e2e00cbdaab46c9c90ebb01839daaaa4833923f4bf765ebe8a6194f", 0x8d}, {&(0x7f0000000a40)="ff4489355883eb089344833968e7e695817dd533662ed1381344d03a1c25ebd0c49a8c336c9e409b7115daab5a47a1ff1a68b1e56b8a6d68425eba54569486a90a96ff2b5ea9265f8b8c305ed4d59bf81471ba5b2e834d7b408ef5e2d8b7f6407bda3d335d09ec6b0bd6bdcb99affc2b678e9e94728b4d136bba9871b34c54b1f0cdd642dd7ff72446aa747154f51e904c678802b663736ae19919cff054673466bdad134d9390", 0xa7}, {&(0x7f0000000b00)="3cdd7ae59e66f9f21bbfebc57ea1cdf58a5f2eab795d88e2e4568c1639dd8ce503a594143ca7a231c3ce85f64bbb5ac1c68e0507e3bd62eeaea2d322e620bc649045ee5821312c70465d55401638ec68f491efe7e08f20f1cd93b0ed4e902fb18972ed3c7fbabd033eba7784f2a12adb7f6f4c20f69f50716aa2ea615d8733353492fa115ecdbcd4ab47", 0x8a}], 0x5}, 0x4000) r10 = socket(0xa, 0x2, 0x4) setsockopt$inet_int(r10, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x9, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x2, 0xc, @empty, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4) connect$bt_rfcomm(r4, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa) 3.395455078s ago: executing program 4 (id=6402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000380)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a008000000200080000000004000880"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) 3.225081748s ago: executing program 3 (id=6403): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x64f0106) 2.753928422s ago: executing program 4 (id=6404): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="84010000100001000000000000000000fe88000000000000000000000000010100000000000000000000ffff0000000000000001000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101000000000000000000000000000000000033000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd0000000000000048000200636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff4b001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x184}}, 0x800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r4, &(0x7f0000000440), &(0x7f00000004c0)=""/84}, 0x20) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) 2.732970881s ago: executing program 4 (id=6405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="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", 0x188) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=@newchain={0x2ef4, 0x64, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffef}, {0xffe0, 0x3}, {0x8, 0x9}}, [@f_rsvp6={{0xa}, {0x54, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0x10}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffd, 0x9, 0xe3}, {0x7, 0x4}, 0x6c, 0x0, 0xfe}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp={{0x9}, {0x2e64, 0x2, [@TCA_RSVP_ACT={0x13c, 0x6, [@m_sample={0xd8, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0xa9, 0x6, "0c702fafe8844e11a5accbfbb048ca4568e43d4d49c56b64b2babd712b56f21a4167dcb3254cff7d0e6a6b95002ee69a032267a6c0d90ef9d2b9d7a26528509c971fedd36782015ca458c0165130b418cf3a865b85fa13ac1a8e10edd45ebc6e3603e7d17dd3a8884f9ebecdc19c0c1ebe0b2e3728c0e99c8d78185b719e1ed763719d984583bac2319bb013f6587262581d5ad400a97f0aef8ab483945444ff1152334d9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x60, 0x9, 0x0, 0x0, {{0xa}, {0x4}, {0x31, 0x6, "e7b4bf9e7900bef7265cba22b47fb787c7ac95ee9d5fa741ee9251a60a8ff02e794057a1f6d72648566b3afff3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_ACT={0x2d24, 0x6, [@m_pedit={0xe50, 0x15, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0xcfd8, 0x6, 0x6, 0x9}, 0x4, 0x29}, [{0x1, 0x6, 0x6, 0x2, 0x72, 0x4}, {0x5, 0x100, 0x2, 0x1a, 0x9, 0x9}, {0x7, 0x0, 0x4, 0xffffffff, 0xa, 0x5a5c}, {0x9, 0x2, 0x5, 0x5, 0x1, 0x7fff}, {0x9, 0x8, 0x7, 0x8, 0x1, 0xbf9d}, {0x4, 0xa27, 0x7, 0x4, 0x4, 0x6}, {0x2, 0x7fffffff, 0x5, 0x5, 0x7fff, 0x8}, {0x7f, 0x7, 0x7, 0x1, 0xfffffff2, 0x6}, {0x2, 0xff, 0x9, 0x80000000, 0x8, 0x6}, {0x2, 0x28000, 0x3, 0x2, 0x0, 0x3}, {0x8, 0x1, 0x675d4f4b, 0x8, 0xfffffffc, 0x1}, {0xfffffff5, 0xff, 0x0, 0x4, 0x5d, 0x100}, {0x5, 0xff, 0xe317, 0xfffffffa, 0x8, 0x2}, {0x0, 0x0, 0x4c, 0x5, 0x7, 0x6}, {0xf, 0x7, 0x1, 0x4, 0xe, 0x8}, {0x8, 0x1, 0x8, 0x5, 0xd, 0xde0}, {0x2, 0x2276, 0x7, 0x4, 0x2ac1, 0x80000001}, {0x6, 0x4, 0x5, 0x9, 0x4, 0x5}, {0x80000000, 0x3, 0x5, 0x0, 0x0, 0x57b7}, {0x1, 0x142, 0x80000001, 0x3, 0x101}, {0x4, 0x8001, 0x200, 0x5, 0x81, 0x4a}, {0xe00, 0x8, 0x6, 0x547f, 0x4, 0x20}, {0x4, 0x2, 0x3, 0x7ff, 0x7, 0x7fffffff}, {0x8, 0x7fc8, 0x3, 0x0, 0x200, 0x9}, {0x7f, 0x0, 0xb, 0x8, 0x30000000, 0xe24}, {0x9, 0x3, 0x42, 0x1, 0x7, 0x800}, {0x8001, 0xffffffff, 0x7000000, 0xfffffffc, 0x3, 0x9}, {0x1605, 0x8, 0x4, 0x7, 0x7, 0xf0}, {0xc9f, 0x8, 0x5, 0x7f9f, 0x80000001, 0x3}, {0x2, 0x5d5, 0xfffff801, 0x4, 0x7, 0x8}, {0x2, 0x8, 0x7f, 0x10, 0x0, 0x81}, {0x0, 0x3, 0x76bb4159, 0x5, 0x5, 0x7}, {0x3, 0x9, 0x1, 0xfffffffd, 0x5, 0xb}, {0x8, 0x5, 0x101, 0x6, 0x6}, {0x9, 0x9, 0x0, 0x1c000000, 0xffffff80, 0x3ff}, {0x4759, 0x6, 0x8001, 0x3, 0x1, 0x8}, {0xc00000, 0xffff0000, 0x2, 0x9, 0x2, 0x1000}, {0x31f1, 0x1, 0x3, 0x10001, 0x6, 0x800}, {0xffffffff, 0x80000001, 0x4, 0xc, 0x5, 0x9}, {0x3, 0x7f, 0x0, 0xfd4, 0x3, 0x6}, {0x800, 0x93, 0x1e, 0x0, 0x6, 0x40c}, {0x8, 0x6, 0x0, 0x1, 0x46fd, 0x3}, {0x80000001, 0x5, 0x2a, 0x6, 0x9, 0x81}, {0x100, 0x81, 0x5, 0x7, 0x1000, 0x7ff}, {0x7, 0x5, 0x3, 0x8, 0x2, 0x2}, {0xfff, 0xe, 0x8, 0x3, 0x0, 0x5}, {0x6, 0x357, 0xffff, 0x424, 0x9, 0x6}, {0x2, 0x0, 0xe, 0x80000000, 0x7, 0x6}, {0x8, 0x1ff, 0x6, 0x3, 0x80000001, 0x7}, {0x3e, 0xc, 0x6, 0x9, 0xf, 0x9}, {0x7, 0x7, 0xe, 0x1, 0x9287, 0x9}, {0x5, 0x1000, 0xa, 0x1, 0x1, 0xc25d}, {0xfffffff8, 0x6, 0x8be5, 0x9, 0x8, 0x3}, {0x5, 0xfffffff8, 0xfffffff6, 0x80000000, 0x400, 0x9}, {0x2, 0xffffffff, 0x20, 0x9, 0x2, 0xfffffc89}, {0x10001, 0xffffff99, 0x5, 0x10000, 0x1, 0x9}, {0x7, 0x2, 0x80000001, 0x80000000, 0x7, 0x40}, {0x16, 0x1ff, 0x8, 0xfffffffb, 0x57, 0x76fe9162}, {0x80000001, 0x8000, 0x9, 0x10, 0x2, 0x9}, {0xfffffff8, 0x0, 0xe1d, 0x6, 0x6, 0x9}, {0x348b4586, 0x0, 0x1ff, 0x6, 0xb32, 0x9}, {0x7, 0x2, 0xff, 0x401, 0x0, 0x101}, {0x6, 0x514f93bc, 0x8, 0x3, 0xff, 0xa}, {0x5, 0xff, 0xbf5a, 0x1, 0x400, 0x5}, {0x3, 0x8000, 0x4c9, 0x1, 0x4, 0x5}, {0x6, 0x0, 0xc, 0x8, 0x101, 0x800}, {0x1, 0x7, 0xe034, 0x7f, 0x3, 0x3}, {0x5, 0x1, 0x6, 0x6, 0x5, 0x9e67}, {0x10001, 0x8, 0x7, 0x7f, 0x0, 0x4}, {0x7f, 0x5, 0x5, 0x6, 0x5}, {0x1000, 0x2, 0x8, 0x3, 0x7, 0x20004}, {0xc63, 0x8, 0x9, 0x4, 0x5, 0x8}, {0x330a14ab, 0x7, 0x188, 0x6, 0xfa4f, 0xfffffffb}, {0x9, 0x784, 0xf8, 0x3, 0x3, 0xf}, {0x5, 0x0, 0x7, 0x5, 0x40, 0x2}, {0x2, 0x5, 0x5, 0xb, 0x1}, {0xfffffff8, 0x8000000, 0x8, 0xd, 0x7}, {0x2, 0xc, 0x6, 0x6, 0xd, 0x4}, {0xe62, 0x32f5, 0x1a, 0x0, 0x9, 0x9}, {0x2, 0x6, 0x3, 0x0, 0x2, 0x8}, {0x5, 0x400, 0x5, 0xc8a, 0x6, 0x5}, {0x2, 0xfda2, 0x101, 0x80, 0x4, 0x5}, {0x8000, 0xff, 0x2, 0x40, 0xff, 0x7}, {0x7, 0xffffffff, 0x80000000, 0x9, 0x0, 0x1c2c323a}, {0xaf, 0x9, 0x9, 0xe, 0x445, 0x3ff}, {0x4, 0x7fff, 0xffffff80, 0x5, 0x6}, {0x80000000, 0x80000001, 0x6, 0xc276, 0x101, 0xfe5b}, {0x0, 0xa6, 0xbc4000, 0x5b, 0x101, 0x5}, {0x3, 0x7, 0x1, 0x3}, {0x2, 0x3, 0x74e1, 0xfffffffe, 0x8, 0x2}, {0x226, 0x347e, 0x8, 0x9, 0x4, 0x7f}, {0x3769c867, 0xfffff82e, 0x3, 0x9, 0xe4d, 0x8}, {0xd477, 0x7, 0x8, 0x0, 0xf, 0xaf}, {0x1, 0xffff, 0xd, 0xa, 0x4, 0xffff}, {0xce23, 0x200, 0x1, 0x5, 0x7, 0xfffffff9}, {0x8, 0x4c1a, 0x2, 0x4, 0x1, 0xff}, {0x80000000, 0x9, 0x8, 0x1000, 0x3, 0x81}, {0x5b07, 0x4, 0x100, 0x2f8, 0x6, 0x80000000}, {0x80, 0xe4b, 0x14000000, 0x7, 0x8, 0x1}, {0x80, 0x1, 0x20000ee, 0x3, 0x5, 0x6}, {0x3, 0x3, 0x8, 0x0, 0x0, 0x101}, {0x5, 0x100, 0x8, 0x5, 0xe, 0xa2}, {0xfffffc01, 0xfffffffa, 0xff, 0x8, 0x3, 0x3c610945}, {0x2, 0x4, 0x8, 0x0, 0x401, 0x6}, {0xee3, 0x4, 0xfffffffa, 0xff, 0x5}, {0x4, 0x4, 0x2, 0x4d31, 0xe5, 0x8001}, {0x9, 0x7, 0x37db, 0x7ff, 0x7fff, 0x561b}, {0x4, 0x6, 0x101, 0xffff8000, 0x5, 0x6}, {0x3, 0xb, 0xa4, 0x9, 0x1, 0x5}, {0xa, 0xbf9, 0x3, 0x9, 0x4, 0x101}, {0xf7, 0x7, 0x100, 0x1, 0x10000, 0xf96b}, {0x2, 0xfffffffa, 0x1, 0x6, 0x80000000, 0x2}, {0x9, 0x7, 0x1, 0x2, 0x6, 0x7}, {0x6, 0x9, 0x7bb0c753, 0x1, 0x9, 0x8}, {0x2, 0x4, 0x6, 0xa386, 0x6, 0xfffffbff}, {0x7, 0x7, 0x9000000, 0xfffffffa, 0x4, 0x426f}, {0x0, 0x9, 0xc, 0x4, 0x9, 0xffffe099}, {0x3, 0x40, 0xd822, 0x10, 0x800, 0xdcd}, {0x390, 0x800, 0x8000, 0x7, 0x1, 0x5}, {0xcf, 0x5, 0x0, 0x3, 0x80, 0x10000}, {0x810001, 0x7ff, 0x6, 0x3, 0x1, 0x54e}, {0x7, 0x3d, 0x5, 0x8, 0x0, 0x6}, {0x86, 0xc, 0x200, 0xb, 0xf, 0x1000}, {0xfff, 0x5, 0x1, 0xfffffffe, 0x200, 0x570d}, {0xd381, 0x2, 0x2ddc, 0x35b, 0x1, 0x7}, {0x2, 0x7fffffff, 0x0, 0x10000, 0xadd, 0x8}, {0x5dc, 0x7, 0x0, 0x7000, 0x0, 0x8}, {0x3, 0x9, 0x7f, 0x4, 0x2, 0xa8}], [{0x5}, {0x5}, {0x3}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x6}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x6}, {}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x3}, {0x5}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x7}, {}, {0x1, 0x1}, {}, {0x6}, {0x1, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x26b2ea0890e8dfbe, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x12e958c1447768f6}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2eba0fff896a02c2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0xd}, {0x3}, {0x4}, {0x2}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x1ed0, 0xb, 0x0, 0x0, {{0xb}, {0x1dd4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x3b, 0x0, 0x0, 0x3ff, 0xfffffffc, 0xd, 0x1, 0x0, 0x6, 0x2, 0xffffffff, 0x8, 0x7fff, 0x26, 0x9, 0xb044, 0x6, 0x1, 0x2, 0x100, 0x6, 0x18f4a3d1, 0x42e, 0x8000, 0x40, 0x6, 0xff, 0x8, 0x6, 0x0, 0x9, 0x6, 0xd5c9, 0x0, 0x0, 0x2, 0xeca3, 0x8, 0x4, 0x1, 0x5, 0x5, 0x8, 0x1, 0xb, 0xb759, 0x400, 0x741, 0x2, 0xffff, 0x1, 0x3330, 0xe, 0x99, 0x2, 0x100, 0x7fff, 0x0, 0x10, 0x7, 0x7, 0xfffffff7, 0x9, 0x120000, 0x2, 0xfffffeff, 0x800, 0x9, 0x2, 0x5, 0x1, 0x3, 0x3, 0xd280, 0x8, 0x0, 0x80000001, 0x0, 0x9, 0xffff, 0x4, 0x3, 0x51, 0x8, 0xf0, 0x4a, 0x4, 0x6, 0x80000001, 0x5, 0x7fff, 0x10, 0x1000, 0xff, 0x7, 0x4, 0x7f, 0x8001, 0x1000, 0xffffff81, 0xe, 0x7, 0xffffff8f, 0x0, 0x8000, 0x5, 0x6, 0x3, 0x6, 0x2, 0x4, 0x7, 0x8, 0x7, 0xfffffffd, 0x8, 0x5, 0x2, 0xffff, 0x2, 0x7fff, 0x1ff, 0xfffffff7, 0x7, 0x7, 0x8, 0xa1, 0x7, 0x761d4429, 0x8364, 0x9, 0x8, 0x6, 0x1, 0x5, 0x6, 0xfffffc01, 0x73, 0x6, 0x0, 0x0, 0x8a9, 0x0, 0xfffffffe, 0xb, 0x1, 0x7, 0x7, 0xfffffffc, 0xf105, 0x2, 0x6, 0x6, 0x0, 0x8, 0xc, 0x7, 0xcb35, 0x6, 0x5, 0x9, 0x3ff, 0x8, 0x1, 0x7, 0x7fff, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x0, 0x1, 0x3fda, 0xb, 0x4, 0x0, 0x7, 0x9, 0xfffff000, 0x9a62, 0x2, 0x2, 0x5, 0x8, 0x9, 0x8, 0x89, 0x2, 0x4, 0x80, 0x2, 0x5, 0x4, 0x7, 0x0, 0x5d2, 0x0, 0x5, 0x4, 0xffff, 0x80, 0x4, 0x118, 0x10000, 0xfffffffd, 0x6, 0x10, 0x9, 0x0, 0xffffffff, 0xdc, 0x4f, 0xe, 0x40, 0x3a3, 0x7, 0x4, 0x2, 0xeb4b, 0xc, 0xf, 0x3, 0x800, 0x9, 0x9, 0xc50, 0x7f, 0x3, 0x3, 0x4, 0xad7, 0x6, 0x0, 0x7, 0x10001, 0xff, 0x5, 0x1, 0x7, 0x1000, 0xfffffff7, 0x0, 0x5, 0x3, 0x6, 0x0, 0x5, 0x6, 0xcd, 0x1, 0x1, 0xd9, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfad0, 0x4, 0x6aa5, 0x9, 0x6, {0x80, 0x1, 0x7, 0x5, 0x7, 0x401}, {0x2, 0x0, 0xfff4, 0x1, 0x7, 0x1}, 0x0, 0x8, 0x3}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xad, 0x400, 0x30000000, 0x3, 0xa108, 0x5, 0x8, 0x5, 0x9, 0xa, 0x5, 0x8, 0x7, 0x3, 0x214, 0x4, 0x80000001, 0x8, 0x0, 0x101, 0xb, 0xfffffff8, 0x7, 0x8, 0x3ff, 0x4, 0xf1, 0x400, 0x100, 0x1000, 0x7fffffff, 0x2, 0x1, 0x101, 0x93c, 0x7ff, 0xb, 0x7fff, 0xe, 0x7fffffff, 0x8001, 0x8, 0x5, 0x2, 0x3, 0x6, 0x6, 0x7f, 0x8001, 0x0, 0xc, 0x400, 0x7, 0x7, 0x5, 0x3, 0x9, 0x8, 0x6, 0x87, 0x6, 0x6c7b, 0x6, 0x8, 0xd2, 0xf3, 0xeb, 0xd, 0x39aabc06, 0x1, 0x1, 0x100, 0x7, 0x9, 0x6, 0x2, 0xff, 0x2, 0x6, 0x6, 0x10000, 0x6, 0x74, 0x10001, 0x3, 0xfff, 0xffff7fff, 0x3, 0xdd7, 0x7, 0xe, 0x40, 0x10001, 0xfffffffa, 0x6, 0x9, 0x2, 0x1, 0x9, 0xfff, 0x1, 0xda, 0x6f46961b, 0x0, 0x1, 0x6, 0x74, 0xca3c326, 0x2, 0xecab, 0x0, 0x6c7f, 0x4, 0x8, 0x7, 0x1, 0x3, 0x4, 0x1, 0x0, 0x4, 0x6, 0x2, 0x0, 0x7, 0x8, 0x2, 0xfffffffb, 0x1, 0x9, 0xfffffff7, 0x20000, 0x6, 0x80000000, 0x7ff, 0x2, 0x3, 0xfffffffc, 0x40, 0xa3, 0x3, 0x200, 0x8, 0x4, 0x10, 0xfffffffd, 0x200, 0x6, 0x12, 0x191a, 0x0, 0x10001, 0x20000000, 0x2, 0x7, 0x2, 0x81, 0x8, 0xffffff81, 0x0, 0x7, 0x3, 0x7, 0x53fb, 0x0, 0x8, 0x8, 0x81, 0x2, 0x5, 0x3, 0x8001, 0x9b6c, 0x5, 0x612, 0x0, 0x1ff, 0x8, 0x6, 0x539e044e, 0x434, 0xffffffff, 0x6, 0xf102, 0x3, 0x72d0, 0xcb, 0x4, 0x3, 0x4, 0x4, 0x1, 0x7, 0x2a3, 0x5, 0x20000000, 0x8, 0x3, 0x7ff, 0x5, 0x0, 0xfffffffc, 0x3, 0x6, 0x5, 0x9, 0x30, 0xfffffff8, 0x7, 0xfffffff9, 0x18, 0x4, 0x2, 0x3d, 0x6, 0x5, 0xfffffe01, 0x22, 0x2, 0xc4, 0xef12, 0xcdfa, 0x8, 0x5, 0xf05, 0x755, 0x0, 0x8, 0x745d45c2, 0x5, 0x9, 0x10000, 0x0, 0x8, 0x8, 0x0, 0x9, 0x7, 0x8, 0xe6, 0x64d8c8e0, 0x6, 0x1, 0x7, 0x12f73d4, 0x669, 0x100, 0x2, 0x5, 0x2, 0x9, 0xb, 0x200, 0x5, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe97, 0x200, 0x0, 0x63c, 0xbfd, 0x3, 0xd, 0x2, 0x8001, 0x6, 0x3, 0x3, 0x2, 0x5, 0x7, 0xfffffff8, 0x10001, 0x7, 0x531, 0x5, 0x8, 0x9, 0x7fff, 0x9, 0x5b6f, 0x2199, 0x7, 0x2, 0x5, 0x1000, 0x20000000, 0x1, 0xffffff8d, 0x8, 0x9, 0xffff, 0x9, 0x80, 0xdc45, 0x9, 0x0, 0x2, 0x3, 0x7, 0x1000, 0x5, 0xfffffbff, 0x7f, 0x2, 0x10000, 0x2, 0x7, 0x3, 0x3, 0x6, 0x0, 0xfffffffb, 0x1, 0x4, 0x5, 0xf7, 0xfffffff8, 0x8, 0x7, 0x0, 0x1, 0x3, 0x2, 0x7, 0x0, 0x1, 0x9, 0xe8bb, 0x8, 0x9, 0x6e, 0x9c4, 0x5, 0x8, 0x7, 0xe9, 0x75d, 0x2c06eb55, 0x6, 0x3ff, 0x9, 0x5, 0x1ff, 0x3, 0x9, 0x8001, 0x2, 0x2, 0x5, 0xfffffffb, 0x7, 0x4, 0x8, 0x400, 0x126, 0x5, 0x3, 0xffff, 0xc, 0x3, 0x2, 0x6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x8, 0x1, 0x8, 0x2, 0x0, 0x88, 0x0, 0x0, 0x1, 0x101, 0x7, 0x7, 0x81, 0x1, 0x1, 0x3, 0x1f, 0x6, 0x6, 0x5, 0x6, 0xa, 0x2, 0x1, 0x6, 0x93, 0x2, 0x4772d87, 0x7ff, 0x0, 0x1000, 0x9, 0x4, 0xb7, 0x38a, 0x40, 0x8, 0x1ff, 0x8000, 0x7, 0x4d, 0x7, 0xb, 0x88b, 0x7, 0x6e, 0x5400, 0x9, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x709c, 0x800, 0x8, 0x6, 0x3, 0x4, 0x2, 0xd, 0x7, 0x7, 0x9, 0x7, 0xffff, 0xffff, 0x8, 0xf2, 0x7, 0x5, 0x7fffffff, 0x3, 0x6, 0x3c78ea2e, 0xfe14, 0x5, 0x1, 0xba, 0x97900000, 0x0, 0x81, 0x6a6d, 0x5, 0x5, 0x25f, 0xfffffffe, 0x6, 0x7a82, 0x9, 0xa, 0x1000, 0x6, 0x5, 0x2, 0x8a, 0xfffffffa, 0x8, 0xffff291d, 0x101, 0x8, 0x3, 0x1, 0xffffff00, 0x9, 0x3, 0x3ff, 0x6, 0x3, 0x5, 0x8001, 0x2, 0x6, 0x5, 0xc, 0x9, 0x2d98, 0x0, 0x7, 0x35b, 0xfd, 0x9, 0x8001, 0x2, 0x4, 0x80000000, 0x5, 0x7, 0xffffffa3, 0x3ff, 0x1, 0x7, 0xb, 0x8, 0xfffffffc, 0x1, 0x5, 0x4e, 0x2, 0x3, 0xfffffffd, 0x24, 0x66f7, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8b, 0x40, 0x2b2a1f24, 0x3fc000, 0x8, 0x2, 0x5f3, 0x10, 0x1, 0x2, 0x10000, 0xcf36, 0x3ff, 0x401, 0x8, 0x10000, 0x4, 0x5, 0x3, 0xfffffffd, 0x2, 0x0, 0x24000000, 0x8, 0x2, 0x10001, 0x3, 0x894, 0x9, 0x4, 0x9, 0x1, 0x2, 0x2, 0x8, 0xe, 0x4, 0x89, 0x6, 0x8, 0x8, 0x0, 0xffff, 0x1, 0x70, 0x8, 0x3, 0x8000, 0x400, 0x9, 0x9, 0xffffffff, 0x3, 0xfffffffe, 0x31, 0x0, 0xa, 0x0, 0x0, 0xe, 0x6a2, 0x1, 0x3, 0x0, 0x3, 0xf7000, 0xffff, 0x9, 0x400, 0x6, 0xf, 0x81, 0x0, 0x2, 0x4, 0x0, 0x5ca, 0x1, 0x7ff, 0x80000000, 0x5, 0xae2, 0x3, 0xfffffc00, 0x2e, 0x3, 0x5, 0x4, 0x2, 0x8, 0x63e7cc70, 0x5, 0x2, 0x6, 0x1, 0xa90c, 0xff, 0x7, 0x4, 0x8, 0x6d, 0x1ff, 0x8000, 0x8001, 0xffff, 0x7, 0x7, 0x3, 0x4, 0x7, 0x7, 0x3730, 0x1, 0x5, 0x6, 0xfffffe00, 0xc, 0x0, 0x1f8, 0xfff, 0x0, 0xffffffff, 0x8, 0x1, 0x6, 0x5f9, 0x6, 0x9, 0x2, 0x72, 0x401, 0x9, 0x101, 0x4f77, 0x6, 0x81, 0x8, 0x78, 0xe, 0x6, 0xd, 0x2, 0xbc, 0x4, 0x2, 0x10, 0x8599, 0xd550, 0x7fff, 0x3, 0x2, 0x6, 0x7, 0x400, 0x8, 0x1, 0x0, 0x0, 0x14f, 0xff, 0x1000, 0x4, 0xfffffff7, 0x3, 0x6, 0x1f, 0x7, 0x0, 0x7, 0x8, 0x80, 0x7fff, 0x9, 0x2, 0x2, 0x1, 0x1ff, 0x23, 0xe, 0x8, 0xb6a1, 0xffff0000, 0x4, 0x4, 0x7, 0x3, 0x2, 0x8, 0xc, 0xa30b, 0xfffffffd, 0x6, 0x4, 0xfff, 0x40, 0xe, 0x8, 0x3, 0x3, 0x6, 0x6, 0x3, 0x7a8, 0x65, 0x8ed, 0xcc, 0x4, 0x8e8, 0x2, 0x6, 0x69e, 0x7, 0x7ff, 0x9, 0x3, 0x862, 0x4, 0xfff, 0x9, 0xac, 0xffff, 0x5, 0x8, 0x9, 0x2, 0x9, 0x3, 0x4, 0xb, 0xcb1, 0x7f, 0x2, 0x4, 0xa, 0xe1e, 0x4, 0x40, 0x1000, 0x7, 0x76, 0x2, 0x1, 0x0, 0x7, 0xfffffa1c, 0x400, 0x6, 0xffffffff, 0x8, 0x6, 0x7, 0x4, 0x5, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdf, 0xa814fd0f63375ce9, 0x4, 0x1000, 0xb, {0x0, 0x1, 0x923e, 0x81, 0x0, 0x3}, {0x4, 0x1, 0x0, 0x1ff, 0xfd, 0x8}, 0x1, 0x0, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8c, 0x8001, 0x0, 0x3, 0x8000, 0x4, 0x0, 0x6, 0x4, 0x1, 0x743, 0xb, 0x1, 0x6, 0x30d8, 0x8001, 0x1ff, 0x5, 0x8, 0x6, 0x3, 0xd, 0x44d, 0xc, 0x3, 0x9, 0x8, 0x4, 0x0, 0xf, 0x97b5a73, 0x4, 0x7, 0x9, 0x800, 0xe33c, 0x9, 0x9, 0x5, 0xe4, 0x1, 0x0, 0x0, 0x5, 0x2, 0x80a, 0x0, 0x758, 0x8, 0x7f, 0x2, 0x5, 0x5, 0x8c8, 0x1, 0x7, 0x72, 0x3, 0x3, 0x5, 0x9, 0xa585, 0x8, 0x6, 0x7, 0xf48, 0x7, 0x4152, 0xe, 0xc5b, 0x9, 0x8b, 0xc, 0x5, 0x3, 0x6, 0x5, 0xfffff7dc, 0x47e, 0x80, 0x6, 0x4, 0x1, 0x0, 0x8, 0x70000000, 0x15f8, 0x6, 0x89, 0xfffffffd, 0xffffff70, 0x1, 0x3, 0x3, 0x8, 0x2, 0x9, 0xb37, 0x615, 0x1, 0x5, 0x400, 0x7, 0x6, 0x5, 0x2, 0xc, 0x9, 0x400, 0x3, 0x7a5, 0xfd, 0x80, 0x2, 0x200, 0x5, 0x9, 0x2, 0x3ff, 0xfff, 0x1146, 0xec74, 0x80, 0x1, 0x8, 0x6, 0x954, 0x3, 0x3, 0x48, 0x10000, 0x6, 0x0, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0x10000, 0x1, 0x9, 0x8, 0x4, 0xa, 0x8, 0xfff, 0x9, 0x3, 0x4, 0x1, 0xf, 0x7, 0x6, 0x38e, 0x10, 0x0, 0x8a59, 0xffff, 0xb4e, 0x7ea, 0xe57, 0xf64, 0xfffffffd, 0x0, 0x3, 0x6, 0x9, 0x1f, 0x3, 0xffffffff, 0xfffffffc, 0x2, 0x8, 0x2, 0x2, 0x7f, 0xab, 0x81, 0x5, 0x9030, 0x4, 0x32, 0x6, 0x2, 0x8, 0xff04, 0x2, 0x2, 0xc536, 0x8, 0xf, 0x99, 0x8, 0x8001, 0x5, 0x5, 0x2, 0x0, 0x2b09, 0x3, 0xd6, 0x1, 0x8, 0x8, 0x3, 0x3d5e0000, 0x51, 0x0, 0xfffffff9, 0x80000000, 0x200, 0x100000, 0x5, 0x4, 0xfffffffe, 0x6, 0xfffffffa, 0x80, 0x8, 0x4, 0x0, 0xd7, 0xeb9, 0x8, 0x20, 0x1, 0x1, 0x40, 0xffff0001, 0x3, 0x4, 0x10, 0x0, 0x6, 0x3, 0x100, 0xb6f, 0x7, 0x1, 0x7, 0x2, 0x26, 0x1000, 0x1, 0x8, 0xb, 0x0, 0x1000, 0x5, 0x4, 0x10000, 0x2, 0x40, 0x10000, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xd, 0x0, 0x891, 0x9, 0x4, 0x80000001, 0x0, 0x7fff, 0x3ff, 0x0, 0x4, 0x38d1, 0x2, 0x80000001, 0x10001, 0x6, 0x100000, 0x5d1, 0xc3f, 0xc00000, 0x4, 0x3, 0x8, 0x0, 0x81, 0x8000, 0x5, 0x7, 0xf7c0, 0x8, 0x2, 0x560, 0xfffffffe, 0x0, 0x4, 0x6, 0xfffffff3, 0x4, 0x83b, 0x200, 0x3, 0xc7, 0x0, 0x1ff, 0x7, 0x5, 0x578, 0x8, 0x100, 0x8, 0x6, 0xc, 0x401, 0x3, 0x9, 0x2, 0x3, 0x1, 0xc18e, 0x10001, 0x1, 0x1, 0x6, 0x5, 0x7, 0x3, 0x8, 0x2, 0x6f73, 0x7fff, 0xb, 0x7, 0xa, 0x3, 0x1, 0x6, 0x401, 0x6, 0x9, 0x5, 0x5, 0x1, 0x4, 0x5, 0x0, 0x992, 0x4, 0x1, 0x4, 0xfffffffe, 0x6, 0xc, 0x10000, 0x6, 0x4, 0xffffffff, 0xff, 0x3, 0x5, 0x6, 0x28, 0x0, 0xbd, 0x10f9, 0x361a, 0xffffffff, 0xfffffbff, 0x9, 0x1, 0xb, 0x8, 0x45ae, 0x0, 0x8897, 0x188e, 0x9, 0x4, 0x9, 0xdb, 0xd, 0x4, 0x100, 0x9, 0x2, 0x6, 0x6, 0x7fff, 0xc9, 0x7498, 0x9, 0x56, 0xf, 0x4, 0x9, 0xfffffffc, 0x4, 0x3, 0xcdc0, 0x8001, 0x8001, 0x4, 0x4, 0x0, 0x78a8, 0x8, 0xe7, 0x5, 0x45f2, 0x0, 0x10000, 0x5, 0x9, 0xd, 0x4, 0xc, 0xbf7, 0x2, 0x571, 0x163, 0x16, 0x4, 0xfff, 0x80000000, 0x8, 0x5, 0xff, 0x3, 0x1, 0x3, 0x6, 0x401, 0x6, 0x9, 0x6, 0xb, 0x9, 0x5, 0x1cce, 0x9, 0xfffffffa, 0x2, 0x6, 0x296665c, 0xbc0, 0x4, 0x1, 0x5, 0x8, 0x800, 0x9, 0x0, 0x7, 0x7fff, 0x1000, 0x6, 0x2, 0x2, 0x5, 0x2, 0x8, 0x5, 0x5, 0x8, 0x80000000, 0x80000001, 0x8001, 0xc, 0x80000000, 0x6, 0x9, 0x2, 0x3, 0x1ff, 0x8, 0x9fe, 0x7, 0x6, 0x200, 0x1, 0x8360, 0x9, 0x0, 0x10001, 0xd46, 0x4ec6, 0x9, 0x5, 0x8, 0x3, 0xeb8, 0x100, 0x7f, 0x1, 0x4, 0x8d8, 0x9, 0x37, 0x2, 0x8, 0xffff, 0x84d, 0x5, 0x2, 0x7f, 0x3, 0xdd3d, 0x7, 0x7, 0x3, 0x8, 0x1, 0x7fffffff, 0x3, 0x8, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x4, 0x9, 0x3, 0x0, 0xe6, 0x6, 0x0, 0x9, 0xfffffffe, 0x1, 0xffffffff, 0x0, 0xb8e, 0x0, 0x4, 0x5, 0xaeb2, 0x3, 0x9, 0xa106, 0x5, 0x3fc22a3e, 0x80000000, 0x5, 0x9, 0x9, 0x2, 0x6, 0x6, 0x7ff, 0x4000, 0x101, 0x9, 0x401, 0xf, 0x10001, 0x3, 0x6, 0x8, 0x10, 0xa3, 0x7, 0x9, 0x3, 0x80, 0x1, 0x5, 0x9, 0x1000, 0x4, 0x800, 0xebd, 0x5, 0x80000, 0x1, 0x1ff, 0x29, 0x81, 0x2, 0x2, 0x1, 0x2, 0x3, 0x3, 0x9, 0x2, 0x80000001, 0x3, 0x81, 0x31, 0x0, 0x5, 0x9, 0x3, 0x9, 0x1, 0x4, 0xe3, 0x887c0d69, 0x6, 0x4, 0x7d42, 0xb3, 0x5, 0x1, 0x6, 0x800, 0x0, 0xfff, 0x0, 0x5, 0x5, 0x7ff, 0x80000000, 0xfffffffa, 0x8, 0x7, 0x9, 0x5, 0x2, 0x3, 0x0, 0x4, 0x80000000, 0x3, 0x6, 0x800, 0x4, 0xa, 0xf, 0x77a, 0x8000, 0x2, 0x4f6a, 0x8000, 0x2, 0x4, 0x0, 0x1, 0x5, 0x0, 0x2b, 0xfffffffe, 0x4, 0x6, 0x2, 0x5, 0xe2d, 0x0, 0xfffffff9, 0xfffffffc, 0x1, 0x9, 0x7fffffff, 0xffffffff, 0x7, 0x2, 0x1, 0x8, 0xd7, 0x1ff, 0x6c66, 0x80000001, 0xffffff81, 0xff, 0x2, 0x1000, 0x5, 0x140, 0x7, 0x7, 0x2, 0x2, 0x3, 0xb, 0x7, 0x6, 0x7, 0x7, 0x6, 0x4c0f, 0x9, 0xe1af, 0x3, 0x4, 0x5, 0x7, 0x5, 0x3, 0xc2, 0x2, 0x1, 0x81, 0xb, 0xfff, 0x6, 0x7f, 0x8, 0xb, 0x5, 0x3, 0x1, 0x5, 0xfffffffb, 0x7, 0x9, 0x40, 0x401, 0x81, 0x3, 0x1, 0x0, 0x8, 0x671, 0xc, 0x8000, 0x7, 0x200000, 0x8c3, 0xa5b5, 0x5, 0x6, 0x5, 0x7, 0xd, 0x7a, 0x8eda, 0x9, 0x7, 0x9, 0xfffffeff, 0x20000000, 0x7, 0x40, 0x88, 0x5, 0x2, 0xfffffffa, 0x3, 0x8001, 0x833a, 0x1, 0xfffffeff, 0xe, 0x7, 0x7, 0x5, 0x8, 0x6, 0x10001, 0x2, 0x9, 0x7, 0x2, 0x34b46353, 0x3, 0x6, 0x9, 0x8, 0x6, 0xe, 0x9, 0x800, 0x4c3, 0xfffffffc, 0x88, 0x0, 0x8, 0x8d, 0x6, 0xfffffffb, 0x1000, 0x3, 0x2c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6e}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x2, 0x3, 0x4, {0xa5, 0x2, 0x7, 0x7, 0xfffc, 0x2}, {0x7d, 0x0, 0xff, 0x525, 0xffff, 0x9}, 0xd, 0x2, 0x800}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0xa0, 0x1000, 0xf, {0xeb, 0x1, 0x4400, 0x7, 0x9, 0x6}, {0xc, 0x2, 0xf, 0x9, 0xb450, 0x8}, 0xe, 0x6, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xe6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x4, 0x5, 0x0, {0xe1, 0x1, 0x7, 0x1000, 0x3, 0x1}, {0x9, 0x2, 0x8, 0x8000, 0xb68, 0x2}, 0xfffffff9, 0xd501, 0xfff}}]]}, {0xd2, 0x6, "a2a4570caebf6248273013c20e2c4e482d52716eab5e521748aec5b89caf693877492fc900000a39828e01e9106852ea8c53d2b45967d8aae27a0d16a00c5c1fed5da2013225c73e4ee7f8e1bd9598911332f3f92375fd56019940687b289ca5ced60560247075ffb5d8f23842aaffcd60dcc4580eb863859e4838e3e9c4901ea2db470a022abce6c072e2add83b1589cfc3526efb0d5a9cfbd18a82582bb9a87a7477d767e1e393bfe2e2e254586e67847e09b9616525a40f77e31e4de8c5fef4b1155193768e01cefcf0a09fb1"}, {0xc, 0x7, {0xcd86839e2d90f4cf, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2ef4}}, 0x4000000) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000040)=""/51, 0x33}], 0x2}, 0x8}], 0x1, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) 2.539494908s ago: executing program 3 (id=6406): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x40, 0x200, 0xffffffff, 0x4}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) (async) unshare(0x2c020400) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 2.429881511s ago: executing program 0 (id=6407): syz_emit_ethernet(0xcc, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000001024680800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000020301"], 0x28}}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c045) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 2.206490866s ago: executing program 4 (id=6409): unshare(0x400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x2, 0x80010, r0, 0xcf36b000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1, r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0xb, 0x10000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000480)=0x2) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x6004, 0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xfffffffffffffc5d, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000274e9421553e349f90008000a40fffffffc08000340000000144800000076745ccb959fed9f000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018000000280000003400000000400000340000000040700064043b20100008500000000000100000a000000000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000100)={0x90000011}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) pwrite64(r0, &(0x7f0000000140)="7906", 0x2, 0x9) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, 0x0) 1.471972872s ago: executing program 1 (id=6411): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.441402553s ago: executing program 1 (id=6412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000008400000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) 1.355652438s ago: executing program 1 (id=6413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080008"], 0x64}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x1, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080008"], 0x64}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x8, 0x3000000000002}, 0x844) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x1, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) 1.257967716s ago: executing program 1 (id=6414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r3, 0x100}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffffff4f}}, 0x9, 0x3}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000480000000b0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000340003"], 0xf0}}, 0x0) 412.781275ms ago: executing program 1 (id=6415): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@RTM_GETNSID={0x2c, 0x5a, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r2}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000084) 120.891786ms ago: executing program 3 (id=6416): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300000004000000040000000a2b", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$phonet_pipe(r4, &(0x7f0000000280)={0x23, 0x8, 0x3, 0x6}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c010000190001002dbd7000000000000a0101000000000000000000000000000a01010100000000000000000000000000000001000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x8000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 0s ago: executing program 1 (id=6417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="1500030000000000000100009b209279017df26102000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090) r6 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$netlink(r1, &(0x7f00000020c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)=[{&(0x7f0000000280)={0x2c, 0x36, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x132, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@empty}]}, 0x2c}, {&(0x7f0000000500)={0x3dc, 0x3b, 0x300, 0x70bd28, 0x25dfdbfe, "", [@nested={0x2c5, 0x51, 0x0, 0x1, [@generic="265072c7f3aaa09e229875fb9b247754c3ef421ed99487db395d1ac61b08600dea931d2ab51c1f617408686bc9ab80ae6e4b9800d535310dc5b24249a6f1344b35245eb552b51d39085abe619ce8e59c187fabc169ad79be877d7fc916d8e341f599896d35321faac496f63924e8a06c6bacad16ed8a79c1fa6f4a7daac3eef2b71c4fc613c29f4ed7174ccc62d2267acaf020f175c530a16b0bfe23429124d8a160a0", @typed={0x8, 0xa7, 0x0, 0x0, @u32=0x7fffffff}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x200}, @generic="caa9415dabdf6f2456d73b29c1cebe1a5e4d7ae78f6c2b4ceeb44fe64dc0c9f9933276e673be69f671b7c00a2b9c08174ff5d3ec4411e5344962a749f3e964facc53", @nested={0x4, 0xcc}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@private0}, @generic="9b512754a41906c0c1ca597ce1", @typed={0xab, 0xc9, 0x0, 0x0, @binary="e9d8a68aeceecef2373df6f6034ea8a74169d732a0e3090a9d55b0ec4f908ea5860144a4928218a8be83add81844d45d05df1f9385e2399257d05c7515336976222b510ac552a217e61b6bd2f3978f931b68f7dc54dba9ae65ef4ef72613a66df7ae09d28990ffbb382a80525011b797c5c112f6c4716b6e623df9876b285f0fbd483abe080a5565afbed42fdfea130528913ab8c46a0c85a94ed0aa82663b1ba7c248d2b70025"}, @generic="ef71b2c0830e7bd3b03720dc3a9f56d6676e562856e065cef98e7f41919693144a2bcb139be292e34be635f8aae868faddbd7302eadfc6e75a88f22d804ed5be2916ef5ee845606454f16330f194efe9f5342f03f1c4a9ed8ca7ee14938540a8ab133c4a10291951e0996f905ad66cf29e721ffc05591a517a7890e6d7b3cbb36a99eeb3709562cf479f380a328b1543e2f0550b732ab7935a176b9f1c829ebebc249dc2574fb0bf1707bf50ef752a338f7f743034e7a29ebe88226dec6ccec03ceb89afed47923fbec21f66fcc1768c74f95704316dbf0cb2fce42f5cac430516ec4d02756589841bccf4b487d620", @typed={0x8, 0x20, 0x0, 0x0, @uid=r5}]}, @generic="4ea5dbaad57e86803a02b9ce0089dda9c7ede2d3b51d3b1ec179d67ea3952aef5338ec618cf85441f57b51dd0b4c6a532d7a2f81ac395545caf130b19f272b1ec7c67593a38079e4376f414d5c2682", @nested={0xac, 0x134, 0x0, 0x1, [@generic="354a87e41adaca218f8b", @nested={0x4, 0x148}, @nested={0x4, 0xa3}, @generic="ca8f60ae6d95e4826c85a3452725f62e4d63885a6923718989b8c267dd1a7065cd1257507e5b2881ea8fdfe0fd7c19921f629c34138caf73ad337a8947d6ba2f40c1e284b7b52eb8853444aef3f37085611d7e323e0a54d2a74816bff4290b59f9804f8849fc71fec8704f48fe6b6242a7e6a8973084822a6e3525d38f2f63065014bb2800743d5528a5061adc68df9483cd784ca43b"]}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r6}]}, 0x3dc}, {&(0x7f0000000900)={0x1b0, 0x3d, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@generic="1f6bc6989c361de4309814bcfb52be94d55da23755f5cabb6d482f50af7051de4251156be8b7b4d09dad8a1032cbd0d473397b32fc32dc6ebf22068e67536383598a72cd95d248e81e5cc205447659bbaadae434663f2e19651ba38d308f93b1c9464a28cac44ff67f583c9f5613536c53b6edf056a7d07200eb0e52f6418172cba27834946ed3b91f29d82b22582dee857f30994a4c05fe34cee002eef6fc54d691e421dbc0bf7c18f37e0dd1232bbc15c491767d69c28be51785c02b919b2dc18b24af6d9cdaaada155938f2f07cb07faeb3d9727792b0a4c25b20a44d8a93b6443c467860e10c606146121cbc2439ac27f3", @generic="b0679c44ee99dba0cd015cd6c90744c37455c6f4dca17ef0f1cd99fa159c1622b657e7ea671445d8fc8581b830575491138b3543c6d2e5da5fa5162fb2a2643df8a94bee8b965c9d1ffd4ea3bb286b5277a660efd4a6b593722a49cf1e154d0fb7805760a91e2cc6f161456d6908f0922ac6a4fc25d9d7b774ae8c9468dab3406ee46e082420b344d6ba264c16bbe030b7a83b1fe2496f8c0b11d3790f0e1917da585c6551fd2151a590"]}, 0x1b0}, {&(0x7f0000000ac0)={0x2d4, 0x15, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1b, 0x12e, 0x0, 0x1, [@nested={0x4, 0xde}, @generic="ef89084ca97852992eb2edbd2d451f", @nested={0x4, 0x17}]}, @typed={0x4, 0x16}, @nested={0x1ae, 0x34, 0x0, 0x1, [@generic="9aeb1a5ce1d044811374bf45e69e51ed760582d0c7d8eebff6f27533609eeaf448c37b814436537b1e1c98eaa05a265fe4833c1123c30ca02a33415eefece637ac5bd847b9", @typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@loopback}, @generic="a471ea5bc7bee8a5bffeba4d980ed44cd5492995b6ffa2ff51916810", @generic="1856eb83194af3a17e13edbc9e76cb42ad4a9dd210659c4546a4e062fff8b41f6a95747a0d4f6a5c144f9338ed3bd86429dc8b06068d54f64fdb049a542aa89898470e7bd09543463a2ec6f66317e114c1559efccd9dff897ad747b1de4138c8b42aa5d667d7195e4b3809324353a8a867a57a27521d9cc66069f977f34144d9b630d5a01b79cf73bad5e21350fffc1230ffb0990fb26ee13444da2045c52fb519c235fdc4f36ef8bf11c87f26aa442be77c3c4989a9ba70a6164bd65523dcc856520f9f58c9c0dd6ef4d1104b2081ffbd9fad6e2b8f1728f731a9ac0222cc235abc1d3a02208cabac7edc02c2dbd18080617d6d6fdd7fef", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @typed={0x8, 0x137, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x14b}, @generic="bdd0031b737ec233ccb84c8ce535f6e25a011b5e7e9f9f36c45d30e2a90da0160e"]}, @typed={0x4, 0x8}, @generic="ef03ef55a4dafa3e35fe44ac06abc7a4c64f3a35d4de94172d74c4a792e0c6f909566e5c6fab5a82f620f8b1ba1269fc2f344e3702c23a8797f3a65bb6ec56e85aee0efaaf137b83546ce849a95d8e7427b0cc3b79cbb173aa3a0d1756beb9eaf6d890551eba819e51e815ee663dcb94c65f039d68dbcf91f947062bfc99f4e28493a3a96e405870e2a33e1ed93442148dc8c711282250cc41b84d40d7a44712c72280bd2930a0274ce058da950097c13daab8a3cc309863a192699c74a6ffa87ffcc37503af81b72c9b3a629463be2e550d6783d3872a2ab5b435200f616b", @generic="bb4c23a4d0a5302997606defd7fdf56a"]}, 0x2d4}, {&(0x7f0000000dc0)={0x11e8, 0x24, 0x2, 0x70bd26, 0x25dfdbfc, "", [@nested={0x6c, 0xd4, 0x0, 0x1, [@typed={0x68, 0x55, 0x0, 0x0, @binary="ad71baffd559d72911eb6a2fb20da7271ff6a9728802c3483e67fd0261a798a25fb052f194bf1f993c039676a02a3bcea1f13349b3a2d582b66c8a836c4f6bcced79aec7ec38d109eaf3ebc155cf549150bfc94932415d105af5151c5f9dd894856740c5"}]}, @nested={0x3d, 0x121, 0x0, 0x1, [@generic="240a98386a901d6438c2a8950196bc35a8b4933348223d5dd79eccb664084f0b3eac99e30acd135fe96b9a842e3d161b51a8c28450", @nested={0x4, 0x53}]}, @typed={0x8, 0xc9, 0x0, 0x0, @pid=r8}, @generic="d2543afc5b09ca47eb0a004c446340f2670fd846741d98a87aa12ddc57a5a0cf32038c8d52c6a419c52e9694ed48c496a37ec4dd023ba01f08c98f5a8fcbbc1a33d776c948afc76094b7b4", @typed={0x4, 0x13}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x4}, @generic="e59d3af47a479bd2f1a15f6100679940b22040a8b332db5f584f5a6cb0514bb14970845b9c3e8c45a92c17df9a256f872bc3f6b292ad73099bc36e9ea22ede4e02e6bc43c399314904a60ae815ac6de2a219ec7aef93ab6bc39e41f8de75efb4cb536e8dd6d373f8e6a736ee2f7a64e28a5939af0f342c5527faeb832ff1ff94d2ca64ae9ffa03cd78430b31044f71b124db3e1ecbb0b2a00936587a623efb3166f96d62e29492e4b4ffd6fbdf4fab93b6e1d8e6f1108ed409e921482a31cec816ba39048e61589af5d69a2c", @generic="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"]}, 0x11e8}, {&(0x7f0000001fc0)={0x60, 0x32, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="b5a8452dcba26c496dd76a917086891cf77375a2da2b526df8853596482eddf2", @typed={0xc, 0x74, 0x0, 0x0, @u64}, @nested={0x24, 0x9b, 0x0, 0x1, [@typed={0x15, 0x80, 0x0, 0x0, @binary="2e317cae062b81481499c7f41e6b935771"}, @typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}]}]}, 0x60}], 0x6, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0x4}, 0x8000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f0000000180)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8) (async) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="1500030000000000000100009b209279017df26102000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090) (async) gettid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendmsg$netlink(r1, &(0x7f00000020c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)=[{&(0x7f0000000280)={0x2c, 0x36, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x132, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@empty}]}, 0x2c}, {&(0x7f0000000500)={0x3dc, 0x3b, 0x300, 0x70bd28, 0x25dfdbfe, "", [@nested={0x2c5, 0x51, 0x0, 0x1, [@generic="265072c7f3aaa09e229875fb9b247754c3ef421ed99487db395d1ac61b08600dea931d2ab51c1f617408686bc9ab80ae6e4b9800d535310dc5b24249a6f1344b35245eb552b51d39085abe619ce8e59c187fabc169ad79be877d7fc916d8e341f599896d35321faac496f63924e8a06c6bacad16ed8a79c1fa6f4a7daac3eef2b71c4fc613c29f4ed7174ccc62d2267acaf020f175c530a16b0bfe23429124d8a160a0", @typed={0x8, 0xa7, 0x0, 0x0, @u32=0x7fffffff}, @typed={0xc, 0x108, 0x0, 0x0, @u64=0x200}, @generic="caa9415dabdf6f2456d73b29c1cebe1a5e4d7ae78f6c2b4ceeb44fe64dc0c9f9933276e673be69f671b7c00a2b9c08174ff5d3ec4411e5344962a749f3e964facc53", @nested={0x4, 0xcc}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@private0}, @generic="9b512754a41906c0c1ca597ce1", @typed={0xab, 0xc9, 0x0, 0x0, @binary="e9d8a68aeceecef2373df6f6034ea8a74169d732a0e3090a9d55b0ec4f908ea5860144a4928218a8be83add81844d45d05df1f9385e2399257d05c7515336976222b510ac552a217e61b6bd2f3978f931b68f7dc54dba9ae65ef4ef72613a66df7ae09d28990ffbb382a80525011b797c5c112f6c4716b6e623df9876b285f0fbd483abe080a5565afbed42fdfea130528913ab8c46a0c85a94ed0aa82663b1ba7c248d2b70025"}, @generic="ef71b2c0830e7bd3b03720dc3a9f56d6676e562856e065cef98e7f41919693144a2bcb139be292e34be635f8aae868faddbd7302eadfc6e75a88f22d804ed5be2916ef5ee845606454f16330f194efe9f5342f03f1c4a9ed8ca7ee14938540a8ab133c4a10291951e0996f905ad66cf29e721ffc05591a517a7890e6d7b3cbb36a99eeb3709562cf479f380a328b1543e2f0550b732ab7935a176b9f1c829ebebc249dc2574fb0bf1707bf50ef752a338f7f743034e7a29ebe88226dec6ccec03ceb89afed47923fbec21f66fcc1768c74f95704316dbf0cb2fce42f5cac430516ec4d02756589841bccf4b487d620", @typed={0x8, 0x20, 0x0, 0x0, @uid=r5}]}, @generic="4ea5dbaad57e86803a02b9ce0089dda9c7ede2d3b51d3b1ec179d67ea3952aef5338ec618cf85441f57b51dd0b4c6a532d7a2f81ac395545caf130b19f272b1ec7c67593a38079e4376f414d5c2682", @nested={0xac, 0x134, 0x0, 0x1, [@generic="354a87e41adaca218f8b", @nested={0x4, 0x148}, @nested={0x4, 0xa3}, @generic="ca8f60ae6d95e4826c85a3452725f62e4d63885a6923718989b8c267dd1a7065cd1257507e5b2881ea8fdfe0fd7c19921f629c34138caf73ad337a8947d6ba2f40c1e284b7b52eb8853444aef3f37085611d7e323e0a54d2a74816bff4290b59f9804f8849fc71fec8704f48fe6b6242a7e6a8973084822a6e3525d38f2f63065014bb2800743d5528a5061adc68df9483cd784ca43b"]}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r6}]}, 0x3dc}, {&(0x7f0000000900)={0x1b0, 0x3d, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@generic="1f6bc6989c361de4309814bcfb52be94d55da23755f5cabb6d482f50af7051de4251156be8b7b4d09dad8a1032cbd0d473397b32fc32dc6ebf22068e67536383598a72cd95d248e81e5cc205447659bbaadae434663f2e19651ba38d308f93b1c9464a28cac44ff67f583c9f5613536c53b6edf056a7d07200eb0e52f6418172cba27834946ed3b91f29d82b22582dee857f30994a4c05fe34cee002eef6fc54d691e421dbc0bf7c18f37e0dd1232bbc15c491767d69c28be51785c02b919b2dc18b24af6d9cdaaada155938f2f07cb07faeb3d9727792b0a4c25b20a44d8a93b6443c467860e10c606146121cbc2439ac27f3", @generic="b0679c44ee99dba0cd015cd6c90744c37455c6f4dca17ef0f1cd99fa159c1622b657e7ea671445d8fc8581b830575491138b3543c6d2e5da5fa5162fb2a2643df8a94bee8b965c9d1ffd4ea3bb286b5277a660efd4a6b593722a49cf1e154d0fb7805760a91e2cc6f161456d6908f0922ac6a4fc25d9d7b774ae8c9468dab3406ee46e082420b344d6ba264c16bbe030b7a83b1fe2496f8c0b11d3790f0e1917da585c6551fd2151a590"]}, 0x1b0}, {&(0x7f0000000ac0)={0x2d4, 0x15, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1b, 0x12e, 0x0, 0x1, [@nested={0x4, 0xde}, @generic="ef89084ca97852992eb2edbd2d451f", @nested={0x4, 0x17}]}, @typed={0x4, 0x16}, @nested={0x1ae, 0x34, 0x0, 0x1, [@generic="9aeb1a5ce1d044811374bf45e69e51ed760582d0c7d8eebff6f27533609eeaf448c37b814436537b1e1c98eaa05a265fe4833c1123c30ca02a33415eefece637ac5bd847b9", @typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@loopback}, @generic="a471ea5bc7bee8a5bffeba4d980ed44cd5492995b6ffa2ff51916810", @generic="1856eb83194af3a17e13edbc9e76cb42ad4a9dd210659c4546a4e062fff8b41f6a95747a0d4f6a5c144f9338ed3bd86429dc8b06068d54f64fdb049a542aa89898470e7bd09543463a2ec6f66317e114c1559efccd9dff897ad747b1de4138c8b42aa5d667d7195e4b3809324353a8a867a57a27521d9cc66069f977f34144d9b630d5a01b79cf73bad5e21350fffc1230ffb0990fb26ee13444da2045c52fb519c235fdc4f36ef8bf11c87f26aa442be77c3c4989a9ba70a6164bd65523dcc856520f9f58c9c0dd6ef4d1104b2081ffbd9fad6e2b8f1728f731a9ac0222cc235abc1d3a02208cabac7edc02c2dbd18080617d6d6fdd7fef", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @typed={0x8, 0x137, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x14b}, @generic="bdd0031b737ec233ccb84c8ce535f6e25a011b5e7e9f9f36c45d30e2a90da0160e"]}, @typed={0x4, 0x8}, @generic="ef03ef55a4dafa3e35fe44ac06abc7a4c64f3a35d4de94172d74c4a792e0c6f909566e5c6fab5a82f620f8b1ba1269fc2f344e3702c23a8797f3a65bb6ec56e85aee0efaaf137b83546ce849a95d8e7427b0cc3b79cbb173aa3a0d1756beb9eaf6d890551eba819e51e815ee663dcb94c65f039d68dbcf91f947062bfc99f4e28493a3a96e405870e2a33e1ed93442148dc8c711282250cc41b84d40d7a44712c72280bd2930a0274ce058da950097c13daab8a3cc309863a192699c74a6ffa87ffcc37503af81b72c9b3a629463be2e550d6783d3872a2ab5b435200f616b", @generic="bb4c23a4d0a5302997606defd7fdf56a"]}, 0x2d4}, {&(0x7f0000000dc0)={0x11e8, 0x24, 0x2, 0x70bd26, 0x25dfdbfc, "", [@nested={0x6c, 0xd4, 0x0, 0x1, [@typed={0x68, 0x55, 0x0, 0x0, @binary="ad71baffd559d72911eb6a2fb20da7271ff6a9728802c3483e67fd0261a798a25fb052f194bf1f993c039676a02a3bcea1f13349b3a2d582b66c8a836c4f6bcced79aec7ec38d109eaf3ebc155cf549150bfc94932415d105af5151c5f9dd894856740c5"}]}, @nested={0x3d, 0x121, 0x0, 0x1, [@generic="240a98386a901d6438c2a8950196bc35a8b4933348223d5dd79eccb664084f0b3eac99e30acd135fe96b9a842e3d161b51a8c28450", @nested={0x4, 0x53}]}, @typed={0x8, 0xc9, 0x0, 0x0, @pid=r8}, @generic="d2543afc5b09ca47eb0a004c446340f2670fd846741d98a87aa12ddc57a5a0cf32038c8d52c6a419c52e9694ed48c496a37ec4dd023ba01f08c98f5a8fcbbc1a33d776c948afc76094b7b4", @typed={0x4, 0x13}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x4}, @generic="e59d3af47a479bd2f1a15f6100679940b22040a8b332db5f584f5a6cb0514bb14970845b9c3e8c45a92c17df9a256f872bc3f6b292ad73099bc36e9ea22ede4e02e6bc43c399314904a60ae815ac6de2a219ec7aef93ab6bc39e41f8de75efb4cb536e8dd6d373f8e6a736ee2f7a64e28a5939af0f342c5527faeb832ff1ff94d2ca64ae9ffa03cd78430b31044f71b124db3e1ecbb0b2a00936587a623efb3166f96d62e29492e4b4ffd6fbdf4fab93b6e1d8e6f1108ed409e921482a31cec816ba39048e61589af5d69a2c", @generic="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"]}, 0x11e8}, {&(0x7f0000001fc0)={0x60, 0x32, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="b5a8452dcba26c496dd76a917086891cf77375a2da2b526df8853596482eddf2", @typed={0xc, 0x74, 0x0, 0x0, @u64}, @nested={0x24, 0x9b, 0x0, 0x1, [@typed={0x15, 0x80, 0x0, 0x0, @binary="2e317cae062b81481499c7f41e6b935771"}, @typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}]}]}, 0x60}], 0x6, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18, 0x4}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f0000000180)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) kernel console output (not intermixed with test programs): uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5180" name="memory.events" dev="tmpfs" ino=1750 res=0 errno=0 [ 764.916317][T21825] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.943924][T21825] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.970777][T21825] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.337439][T23674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5191'. [ 765.671906][T23683] FAULT_INJECTION: forcing a failure. [ 765.671906][T23683] name failslab, interval 1, probability 0, space 0, times 0 [ 765.693086][T23683] CPU: 1 UID: 0 PID: 23683 Comm: syz.2.5193 Not tainted syzkaller #0 PREEMPT(full) [ 765.693117][T23683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.693129][T23683] Call Trace: [ 765.693137][T23683] [ 765.693146][T23683] dump_stack_lvl+0x189/0x250 [ 765.693175][T23683] ? __pfx____ratelimit+0x10/0x10 [ 765.693196][T23683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.693220][T23683] ? __pfx__printk+0x10/0x10 [ 765.693253][T23683] ? __pfx___might_resched+0x10/0x10 [ 765.693272][T23683] ? fs_reclaim_acquire+0x7d/0x100 [ 765.693306][T23683] should_fail_ex+0x414/0x560 [ 765.693339][T23683] should_failslab+0xa8/0x100 [ 765.693377][T23683] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 765.693405][T23683] ? __alloc_skb+0x112/0x2d0 [ 765.693431][T23683] __alloc_skb+0x112/0x2d0 [ 765.693456][T23683] netlink_ack+0x146/0xa50 [ 765.693474][T23683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.693519][T23683] netlink_rcv_skb+0x28c/0x470 [ 765.693537][T23683] ? __lock_acquire+0xab9/0xd20 [ 765.693566][T23683] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.693592][T23683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.693634][T23683] ? down_read+0x1ad/0x2e0 [ 765.693661][T23683] genl_rcv+0x28/0x40 [ 765.693683][T23683] netlink_unicast+0x82f/0x9e0 [ 765.693720][T23683] ? __pfx_netlink_unicast+0x10/0x10 [ 765.693748][T23683] ? netlink_sendmsg+0x642/0xb30 [ 765.693762][T23683] ? skb_put+0x11b/0x210 [ 765.693784][T23683] netlink_sendmsg+0x805/0xb30 [ 765.693814][T23683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.693837][T23683] ? aa_sock_msg_perm+0xf1/0x1d0 [ 765.693858][T23683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 765.693888][T23683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.693910][T23683] __sock_sendmsg+0x219/0x270 [ 765.693937][T23683] ____sys_sendmsg+0x505/0x830 [ 765.693964][T23683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.693993][T23683] ? import_iovec+0x74/0xa0 [ 765.694026][T23683] ___sys_sendmsg+0x21f/0x2a0 [ 765.694051][T23683] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.694115][T23683] ? __fget_files+0x2a/0x420 [ 765.694131][T23683] ? __fget_files+0x3a0/0x420 [ 765.694158][T23683] __x64_sys_sendmsg+0x19b/0x260 [ 765.694184][T23683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 765.694218][T23683] ? __pfx_ksys_write+0x10/0x10 [ 765.694252][T23683] ? do_syscall_64+0xbe/0x3b0 [ 765.694277][T23683] do_syscall_64+0xfa/0x3b0 [ 765.694300][T23683] ? lockdep_hardirqs_on+0x9c/0x150 [ 765.694318][T23683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.694336][T23683] ? clear_bhb_loop+0x60/0xb0 [ 765.694358][T23683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.694377][T23683] RIP: 0033:0x7f7c3918ebe9 [ 765.694395][T23683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.694412][T23683] RSP: 002b:00007f7c39fa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.694434][T23683] RAX: ffffffffffffffda RBX: 00007f7c393c5fa0 RCX: 00007f7c3918ebe9 [ 765.694448][T23683] RDX: 0000000004004054 RSI: 0000200000000140 RDI: 0000000000000004 [ 765.694461][T23683] RBP: 00007f7c39fa0090 R08: 0000000000000000 R09: 0000000000000000 [ 765.694473][T23683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.694484][T23683] R13: 00007f7c393c6038 R14: 00007f7c393c5fa0 R15: 00007ffeb856a048 [ 765.694519][T23683] [ 766.375837][T23695] openvswitch: netlink: IP tunnel dst address not specified [ 766.401820][T23698] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5202'. [ 766.482096][T23703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5204'. [ 766.627756][T23709] bond0: Caught tx_queue_len zero misconfig [ 766.735835][T23715] lo: Caught tx_queue_len zero misconfig [ 766.988895][T23726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.038765][T23726] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.132713][T23726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 767.170386][T23724] ip6tnl2: entered promiscuous mode [ 767.228582][T23744] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5215'. [ 767.426971][T23754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5218'. [ 767.439149][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5218'. [ 767.641273][T23766] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5225'. [ 767.809410][T23776] ip6tnl2: entered promiscuous mode [ 768.093488][T23788] xfrm0: Caught tx_queue_len zero misconfig [ 768.294083][ T30] audit: type=1800 audit(1756858057.261:101): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5225" name="memory.events" dev="tmpfs" ino=2473 res=0 errno=0 [ 769.354192][T23832] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5249'. [ 769.676744][T23850] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5256'. [ 770.164231][T23871] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 770.182595][T23873] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5264'. [ 770.367495][T23879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5268'. [ 770.447432][T23874] ip6tnl3: entered promiscuous mode [ 770.527567][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5270'. [ 770.715367][T23892] syzkaller0: entered promiscuous mode [ 770.738771][T23892] syzkaller0: entered allmulticast mode [ 770.764281][T23897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5274'. [ 770.975161][ T30] audit: type=1800 audit(1756858060.061:102): pid=23879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5268" name="memory.events" dev="tmpfs" ino=1826 res=0 errno=0 [ 771.207916][T23917] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5282'. [ 771.304967][T23919] ip6tnl2: entered promiscuous mode [ 771.341816][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5284'. [ 771.765859][T23943] macsec1: entered promiscuous mode [ 771.789328][T23943] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 771.815073][T23943] macsec1: entered allmulticast mode [ 771.825882][T23943] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 771.879914][T23944] macsec2: entered promiscuous mode [ 771.898641][T23944] macsec2: entered allmulticast mode [ 771.961544][T23955] syzkaller0: entered promiscuous mode [ 771.996297][T23955] syzkaller0: entered allmulticast mode [ 772.009595][T23957] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5297'. [ 772.104996][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5298'. [ 772.350781][T23969] netlink: 'syz.2.5300': attribute type 10 has an invalid length. [ 772.417600][T23969] team0: Port device netdevsim0 added [ 772.482970][ T30] audit: type=1800 audit(1756858061.551:103): pid=23962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5297" name="memory.events" dev="tmpfs" ino=2292 res=0 errno=0 [ 772.870817][T23984] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 772.894556][T23984] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 773.082556][T23997] sctp: [Deprecated]: syz.3.5313 (pid 23997) Use of int in maxseg socket option. [ 773.082556][T23997] Use struct sctp_assoc_value instead [ 773.622200][T24025] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 774.380257][T24059] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 774.450824][T24063] __nla_validate_parse: 5 callbacks suppressed [ 774.450848][T24063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5338'. [ 774.588786][T24063] bridge0: port 1(veth5) entered blocking state [ 774.612191][T24063] bridge0: port 1(veth5) entered disabled state [ 774.618420][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5339'. [ 774.632460][T24063] veth5: entered allmulticast mode [ 774.674201][T24063] veth5: entered promiscuous mode [ 774.706069][T24072] bridge0: port 2(veth0_to_bond) entered blocking state [ 774.736525][T24072] bridge0: port 2(veth0_to_bond) entered disabled state [ 774.770314][T24072] veth0_to_bond: entered allmulticast mode [ 774.847797][T24072] veth0_to_bond: entered promiscuous mode [ 775.194979][T24100] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5350'. [ 775.504017][T24122] netlink: 'syz.3.5357': attribute type 1 has an invalid length. [ 775.526652][T24122] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5357'. [ 775.541303][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5355'. [ 775.847663][T24123] veth0_to_bond: left allmulticast mode [ 775.861212][T24123] veth0_to_bond: left promiscuous mode [ 775.870566][T24123] bridge0: port 2(veth0_to_bond) entered disabled state [ 775.886206][T24123] veth5: left allmulticast mode [ 775.898182][T24123] veth5: left promiscuous mode [ 775.907858][T24123] bridge0: port 1(veth5) entered disabled state [ 776.226218][T24142] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 776.420668][T24156] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5367'. [ 776.433024][T24148] syzkaller0: entered promiscuous mode [ 776.439483][T24148] syzkaller0: entered allmulticast mode [ 776.579587][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5372'. [ 776.600435][T24164] netlink: 'syz.4.5372': attribute type 1 has an invalid length. [ 776.739511][T24164] 8021q: adding VLAN 0 to HW filter on device bond7 [ 776.791208][T24169] bond7: (slave geneve2): making interface the new active one [ 776.801073][T24169] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 776.823321][T24175] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 776.842090][T21826] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.858526][T24173] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 776.868197][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5377'. [ 776.900552][T24179] netlink: 'syz.3.5377': attribute type 30 has an invalid length. [ 776.918289][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5377'. [ 777.073785][T24190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 777.124793][T24190] netlink: 'syz.0.5380': attribute type 5 has an invalid length. [ 777.437501][T21826] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.453653][T21826] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.017909][T24190] geneve3: entered promiscuous mode [ 778.023521][T24190] geneve3: entered allmulticast mode [ 778.034706][T21826] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.049187][T21826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 778.112282][T21826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 778.143295][T21826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 778.181167][T21826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 778.411100][T24216] syzkaller0: entered promiscuous mode [ 778.443523][T24216] syzkaller0: entered allmulticast mode [ 778.972925][T24230] bond6: (slave erspan0): Releasing active interface [ 779.012921][T24230] bond3: (slave ip6gretap1): Removing an active aggregator [ 779.047443][T24230] bond3: (slave ip6gretap1): Releasing backup interface [ 779.108623][T24230] team0: Failed to send port change of device bond5 via netlink (err -105) [ 779.143137][T24230] team0: Port device bond5 removed [ 779.169009][T24230] bond7: (slave geneve2): Releasing active interface [ 779.265238][T24231] team0: Failed to send options change via netlink (err -105) [ 779.272782][T24231] team0: Mode changed to "loadbalance" [ 779.347430][T21835] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.372670][T21835] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.397581][T21835] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.425242][T21835] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.543725][T24246] __nla_validate_parse: 5 callbacks suppressed [ 779.543746][T24246] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5399'. [ 779.927565][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5403'. [ 780.046404][T24259] bridge0: port 1(veth9) entered blocking state [ 780.053038][T24259] bridge0: port 1(veth9) entered disabled state [ 780.068155][T24259] veth9: entered allmulticast mode [ 780.128392][T24259] veth9: entered promiscuous mode [ 780.365239][T24264] bridge0: port 2(veth0_to_bond) entered blocking state [ 780.378399][T24264] bridge0: port 2(veth0_to_bond) entered disabled state [ 780.411751][T24264] veth0_to_bond: entered allmulticast mode [ 780.458952][T24264] veth0_to_bond: entered promiscuous mode [ 780.535877][ T30] audit: type=1800 audit(1756858069.621:104): pid=24246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5399" name="memory.events" dev="tmpfs" ino=2618 res=0 errno=0 [ 780.706395][T24275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5408'. [ 781.243940][T24286] FAULT_INJECTION: forcing a failure. [ 781.243940][T24286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.283340][T24286] CPU: 0 UID: 0 PID: 24286 Comm: syz.4.5413 Not tainted syzkaller #0 PREEMPT(full) [ 781.283369][T24286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.283381][T24286] Call Trace: [ 781.283389][T24286] [ 781.283398][T24286] dump_stack_lvl+0x189/0x250 [ 781.283427][T24286] ? __pfx____ratelimit+0x10/0x10 [ 781.283448][T24286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.283470][T24286] ? __pfx__printk+0x10/0x10 [ 781.283496][T24286] ? __might_fault+0xb0/0x130 [ 781.283534][T24286] should_fail_ex+0x414/0x560 [ 781.283566][T24286] _copy_from_user+0x2d/0xb0 [ 781.283590][T24286] ___sys_sendmsg+0x158/0x2a0 [ 781.283617][T24286] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.283681][T24286] ? __fget_files+0x2a/0x420 [ 781.283698][T24286] ? __fget_files+0x3a0/0x420 [ 781.283728][T24286] __sys_sendmmsg+0x227/0x430 [ 781.283757][T24286] ? __pfx___sys_sendmmsg+0x10/0x10 [ 781.283777][T24286] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 781.283842][T24286] ? ksys_write+0x22a/0x250 [ 781.283871][T24286] ? __pfx_ksys_write+0x10/0x10 [ 781.283902][T24286] __x64_sys_sendmmsg+0xa0/0xc0 [ 781.283927][T24286] do_syscall_64+0xfa/0x3b0 [ 781.283948][T24286] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.283967][T24286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.283987][T24286] ? clear_bhb_loop+0x60/0xb0 [ 781.284011][T24286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.284029][T24286] RIP: 0033:0x7ff34298ebe9 [ 781.284047][T24286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.284065][T24286] RSP: 002b:00007ff343876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 781.284087][T24286] RAX: ffffffffffffffda RBX: 00007ff342bc5fa0 RCX: 00007ff34298ebe9 [ 781.284102][T24286] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 781.284114][T24286] RBP: 00007ff343876090 R08: 0000000000000000 R09: 0000000000000000 [ 781.284127][T24286] R10: 0000000020000044 R11: 0000000000000246 R12: 0000000000000001 [ 781.284139][T24286] R13: 00007ff342bc6038 R14: 00007ff342bc5fa0 R15: 00007fffc030f3e8 [ 781.284171][T24286] [ 781.800557][T24296] syzkaller0: entered promiscuous mode [ 781.824965][T24296] syzkaller0: entered allmulticast mode [ 782.068602][T24308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5422'. [ 782.539942][T24324] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5428'. [ 782.639966][T24326] veth3: entered promiscuous mode [ 782.663519][T24328] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 782.701144][T24332] FAULT_INJECTION: forcing a failure. [ 782.701144][T24332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.813560][T24332] CPU: 0 UID: 0 PID: 24332 Comm: syz.1.5431 Not tainted syzkaller #0 PREEMPT(full) [ 782.813590][T24332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.813603][T24332] Call Trace: [ 782.813612][T24332] [ 782.813621][T24332] dump_stack_lvl+0x189/0x250 [ 782.813650][T24332] ? __pfx____ratelimit+0x10/0x10 [ 782.813671][T24332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.813695][T24332] ? __pfx__printk+0x10/0x10 [ 782.813733][T24332] ? __might_fault+0xb0/0x130 [ 782.813774][T24332] should_fail_ex+0x414/0x560 [ 782.813806][T24332] _copy_from_user+0x2d/0xb0 [ 782.813829][T24332] ____sys_sendmsg+0x2fe/0x830 [ 782.813859][T24332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.813892][T24332] ? import_iovec+0x74/0xa0 [ 782.813919][T24332] ___sys_sendmsg+0x21f/0x2a0 [ 782.813944][T24332] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.814009][T24332] ? __fget_files+0x2a/0x420 [ 782.814027][T24332] ? __fget_files+0x3a0/0x420 [ 782.814058][T24332] __sys_sendmmsg+0x227/0x430 [ 782.814089][T24332] ? __pfx___sys_sendmmsg+0x10/0x10 [ 782.814109][T24332] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 782.814162][T24332] ? ksys_write+0x22a/0x250 [ 782.814192][T24332] ? __pfx_ksys_write+0x10/0x10 [ 782.814215][T24332] ? rcu_is_watching+0x15/0xb0 [ 782.814243][T24332] __x64_sys_sendmmsg+0xa0/0xc0 [ 782.814270][T24332] do_syscall_64+0xfa/0x3b0 [ 782.814295][T24332] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.814314][T24332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.814332][T24332] ? clear_bhb_loop+0x60/0xb0 [ 782.814354][T24332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.814372][T24332] RIP: 0033:0x7f963f18ebe9 [ 782.814391][T24332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.814408][T24332] RSP: 002b:00007f9640024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.814430][T24332] RAX: ffffffffffffffda RBX: 00007f963f3c5fa0 RCX: 00007f963f18ebe9 [ 782.814445][T24332] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 782.814458][T24332] RBP: 00007f9640024090 R08: 0000000000000000 R09: 0000000000000000 [ 782.814470][T24332] R10: 0000000020000044 R11: 0000000000000246 R12: 0000000000000001 [ 782.814481][T24332] R13: 00007f963f3c6038 R14: 00007f963f3c5fa0 R15: 00007fff73f96ba8 [ 782.814516][T24332] [ 783.184821][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5432'. [ 783.193890][T24334] netlink: 'syz.2.5432': attribute type 5 has an invalid length. [ 783.201871][T24334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5432'. [ 783.220126][T24334] geneve0: entered promiscuous mode [ 783.225554][T24334] geneve0: entered allmulticast mode [ 783.247324][T21835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 783.313849][T21835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 783.366909][T21835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 783.385808][T21837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 783.427777][T24336] syzkaller0: entered promiscuous mode [ 783.442316][T24336] syzkaller0: entered allmulticast mode [ 783.630746][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5436'. [ 783.964495][T24363] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5443'. [ 784.043150][T24366] FAULT_INJECTION: forcing a failure. [ 784.043150][T24366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.088675][T24366] CPU: 1 UID: 0 PID: 24366 Comm: syz.1.5445 Not tainted syzkaller #0 PREEMPT(full) [ 784.088707][T24366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.088719][T24366] Call Trace: [ 784.088728][T24366] [ 784.088737][T24366] dump_stack_lvl+0x189/0x250 [ 784.088768][T24366] ? __pfx____ratelimit+0x10/0x10 [ 784.088789][T24366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.088812][T24366] ? __pfx__printk+0x10/0x10 [ 784.088855][T24366] should_fail_ex+0x414/0x560 [ 784.088887][T24366] _copy_to_user+0x31/0xb0 [ 784.088913][T24366] simple_read_from_buffer+0xe1/0x170 [ 784.088949][T24366] proc_fail_nth_read+0x1b3/0x220 [ 784.088975][T24366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.089002][T24366] ? rw_verify_area+0x2a6/0x4d0 [ 784.089025][T24366] ? __lock_acquire+0xab9/0xd20 [ 784.089051][T24366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.089076][T24366] vfs_read+0x1fd/0xa30 [ 784.089100][T24366] ? fdget_pos+0x247/0x320 [ 784.089123][T24366] ? __pfx___mutex_lock+0x10/0x10 [ 784.089152][T24366] ? __pfx_vfs_read+0x10/0x10 [ 784.089179][T24366] ? __fget_files+0x2a/0x420 [ 784.089202][T24366] ? __fget_files+0x3a0/0x420 [ 784.089219][T24366] ? __fget_files+0x2a/0x420 [ 784.089247][T24366] ksys_read+0x145/0x250 [ 784.089276][T24366] ? __pfx_ksys_read+0x10/0x10 [ 784.089298][T24366] ? rcu_is_watching+0x15/0xb0 [ 784.089324][T24366] ? do_syscall_64+0xbe/0x3b0 [ 784.089350][T24366] do_syscall_64+0xfa/0x3b0 [ 784.089369][T24366] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.089388][T24366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.089408][T24366] ? clear_bhb_loop+0x60/0xb0 [ 784.089440][T24366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.089459][T24366] RIP: 0033:0x7f963f18d5fc [ 784.089478][T24366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 784.089495][T24366] RSP: 002b:00007f9640024030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 784.089518][T24366] RAX: ffffffffffffffda RBX: 00007f963f3c5fa0 RCX: 00007f963f18d5fc [ 784.089532][T24366] RDX: 000000000000000f RSI: 00007f96400240a0 RDI: 0000000000000004 [ 784.089545][T24366] RBP: 00007f9640024090 R08: 0000000000000000 R09: 0000000000000000 [ 784.089557][T24366] R10: 0000000020000044 R11: 0000000000000246 R12: 0000000000000001 [ 784.089570][T24366] R13: 00007f963f3c6038 R14: 00007f963f3c5fa0 R15: 00007fff73f96ba8 [ 784.089604][T24366] [ 784.783352][T24385] syzkaller0: entered promiscuous mode [ 784.794905][T24385] syzkaller0: entered allmulticast mode [ 784.810129][T24388] netlink: 'syz.0.5454': attribute type 1 has an invalid length. [ 784.878752][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5455'. [ 785.154496][T24396] veth0_to_bond: left allmulticast mode [ 785.160126][T24396] veth0_to_bond: left promiscuous mode [ 785.175995][T24396] bridge0: port 2(veth0_to_bond) entered disabled state [ 785.493066][T24396] veth9: left allmulticast mode [ 785.498532][T24396] veth9: left promiscuous mode [ 785.503852][T24396] bridge0: port 1(veth9) entered disabled state [ 785.763108][T24405] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 785.882856][T21826] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 785.915989][T21826] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 785.962966][T21826] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 785.986143][T24428] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5467'. [ 786.023587][T21826] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 786.080875][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5469'. [ 786.123141][T24434] netlink: 'syz.3.5469': attribute type 30 has an invalid length. [ 786.152010][T24434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5469'. [ 786.562610][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'. [ 786.737351][T24445] netlink: 'syz.2.5471': attribute type 21 has an invalid length. [ 786.748575][T24445] netlink: 'syz.2.5471': attribute type 22 has an invalid length. [ 786.772464][T24445] netlink: 'syz.2.5471': attribute type 23 has an invalid length. [ 786.828275][T24445] netlink: 'syz.2.5471': attribute type 25 has an invalid length. [ 786.836510][T24445] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5471'. [ 787.423075][T24472] syz_tun: entered allmulticast mode [ 787.462124][T24472] pimreg: entered allmulticast mode [ 787.767663][T24485] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 788.063154][T24492] syzkaller0: entered promiscuous mode [ 788.083381][T24492] syzkaller0: entered allmulticast mode [ 788.283975][T24471] syz_tun: left allmulticast mode [ 788.331176][T24471] pimreg: left allmulticast mode [ 788.834720][T18331] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 788.841416][T18331] Bluetooth: hci2: command 0x0401 tx timeout [ 789.128555][T24520] syzkaller0: entered promiscuous mode [ 789.147052][T24520] syzkaller0: entered allmulticast mode [ 789.520796][T24523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 789.853575][T24523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 789.962921][T24543] tipc: Enabling of bearer rejected, failed to enable media [ 790.171308][T24523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 790.197612][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5513'. [ 790.261144][T24553] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5514'. [ 790.433102][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5516'. [ 790.669448][T24523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 791.090080][T21837] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 791.217242][T24576] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 791.285259][T21837] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 791.293546][T21837] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 791.318810][T24586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5528'. [ 791.351527][T24584] syzkaller0: entered promiscuous mode [ 791.371092][T24584] syzkaller0: entered allmulticast mode [ 791.383471][T21836] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 791.388597][T24586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5528'. [ 791.501040][T24586] team0: No ports can be present during mode change [ 791.757051][T24596] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5532'. [ 792.005576][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5534'. [ 793.060312][T24618] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 793.547716][T24628] syzkaller0: entered promiscuous mode [ 793.583902][T24628] syzkaller0: entered allmulticast mode [ 793.863954][T24638] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5547'. [ 793.923953][T24642] netlink: 'syz.4.5549': attribute type 5 has an invalid length. [ 793.981863][ T5926] IPVS: starting estimator thread 0... [ 794.045439][T24647] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 794.060989][T24649] FAULT_INJECTION: forcing a failure. [ 794.060989][T24649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.084766][T24644] IPVS: using max 22 ests per chain, 52800 per kthread [ 794.094504][T24649] CPU: 1 UID: 0 PID: 24649 Comm: syz.4.5551 Not tainted syzkaller #0 PREEMPT(full) [ 794.094539][T24649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.094551][T24649] Call Trace: [ 794.094560][T24649] [ 794.094568][T24649] dump_stack_lvl+0x189/0x250 [ 794.094597][T24649] ? __pfx____ratelimit+0x10/0x10 [ 794.094618][T24649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.094641][T24649] ? __pfx__printk+0x10/0x10 [ 794.094684][T24649] should_fail_ex+0x414/0x560 [ 794.094716][T24649] _copy_from_user+0x2d/0xb0 [ 794.094740][T24649] bpf_test_init+0xf8/0x170 [ 794.094765][T24649] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 794.094801][T24649] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 794.094826][T24649] ? __fget_files+0x2a/0x420 [ 794.094848][T24649] ? __fget_files+0x2a/0x420 [ 794.094864][T24649] ? __fget_files+0x3a0/0x420 [ 794.094879][T24649] ? __fget_files+0x2a/0x420 [ 794.094901][T24649] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 794.094925][T24649] bpf_prog_test_run+0x2c7/0x340 [ 794.094957][T24649] __sys_bpf+0x581/0x870 [ 794.094985][T24649] ? __pfx___sys_bpf+0x10/0x10 [ 794.095026][T24649] ? ksys_write+0x22a/0x250 [ 794.095054][T24649] ? __pfx_ksys_write+0x10/0x10 [ 794.095076][T24649] ? rcu_is_watching+0x15/0xb0 [ 794.095104][T24649] __x64_sys_bpf+0x7c/0x90 [ 794.095128][T24649] do_syscall_64+0xfa/0x3b0 [ 794.095147][T24649] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.095167][T24649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.095187][T24649] ? clear_bhb_loop+0x60/0xb0 [ 794.095211][T24649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.095230][T24649] RIP: 0033:0x7ff34298ebe9 [ 794.095249][T24649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.095266][T24649] RSP: 002b:00007ff343876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.095288][T24649] RAX: ffffffffffffffda RBX: 00007ff342bc5fa0 RCX: 00007ff34298ebe9 [ 794.095303][T24649] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 794.095316][T24649] RBP: 00007ff343876090 R08: 0000000000000000 R09: 0000000000000000 [ 794.095328][T24649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.095348][T24649] R13: 00007ff342bc6038 R14: 00007ff342bc5fa0 R15: 00007fffc030f3e8 [ 794.095383][T24649] [ 794.507664][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5555'. [ 794.517576][T24657] netlink: 'syz.2.5555': attribute type 30 has an invalid length. [ 794.525666][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5555'. [ 795.523669][T24666] syzkaller1: entered promiscuous mode [ 795.559877][T24666] syzkaller1: entered allmulticast mode [ 795.592774][T24665] syzkaller0: entered promiscuous mode [ 795.605441][T24665] syzkaller0: entered allmulticast mode [ 796.032010][T24672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5558'. [ 796.459932][T24687] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 796.950552][T24705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5567'. [ 796.968280][T24704] syzkaller0: entered promiscuous mode [ 796.994977][T24704] syzkaller0: entered allmulticast mode [ 797.355648][T24714] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5571'. [ 797.574641][T24720] batadv_slave_1: entered promiscuous mode [ 797.591137][T24719] batadv_slave_1: left promiscuous mode [ 797.623918][T24722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5573'. [ 797.930883][T24736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.999527][T24735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.144433][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5580'. [ 798.305050][T24746] FAULT_INJECTION: forcing a failure. [ 798.305050][T24746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.334178][T24746] CPU: 1 UID: 0 PID: 24746 Comm: syz.1.5581 Not tainted syzkaller #0 PREEMPT(full) [ 798.334209][T24746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.334222][T24746] Call Trace: [ 798.334230][T24746] [ 798.334240][T24746] dump_stack_lvl+0x189/0x250 [ 798.334271][T24746] ? __pfx____ratelimit+0x10/0x10 [ 798.334296][T24746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.334316][T24746] ? __pfx__printk+0x10/0x10 [ 798.334354][T24746] should_fail_ex+0x414/0x560 [ 798.334385][T24746] _copy_from_user+0x2d/0xb0 [ 798.334410][T24746] bpf_test_init+0xf8/0x170 [ 798.334435][T24746] bpf_prog_test_run_xdp+0x37c/0x1000 [ 798.334473][T24746] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 798.334499][T24746] ? __fget_files+0x2a/0x420 [ 798.334525][T24746] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 798.334555][T24746] bpf_prog_test_run+0x2c7/0x340 [ 798.334587][T24746] __sys_bpf+0x581/0x870 [ 798.334616][T24746] ? __pfx___sys_bpf+0x10/0x10 [ 798.334657][T24746] ? ksys_write+0x22a/0x250 [ 798.334686][T24746] ? __pfx_ksys_write+0x10/0x10 [ 798.334708][T24746] ? rcu_is_watching+0x15/0xb0 [ 798.334737][T24746] __x64_sys_bpf+0x7c/0x90 [ 798.334762][T24746] do_syscall_64+0xfa/0x3b0 [ 798.334780][T24746] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.334800][T24746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.334820][T24746] ? clear_bhb_loop+0x60/0xb0 [ 798.334844][T24746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.334863][T24746] RIP: 0033:0x7f963f18ebe9 [ 798.334882][T24746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.334899][T24746] RSP: 002b:00007f9640024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.334921][T24746] RAX: ffffffffffffffda RBX: 00007f963f3c5fa0 RCX: 00007f963f18ebe9 [ 798.334936][T24746] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 798.334949][T24746] RBP: 00007f9640024090 R08: 0000000000000000 R09: 0000000000000000 [ 798.334962][T24746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.334973][T24746] R13: 00007f963f3c6038 R14: 00007f963f3c5fa0 R15: 00007fff73f96ba8 [ 798.335007][T24746] [ 798.732769][T24748] syzkaller0: entered promiscuous mode [ 798.769127][T24748] syzkaller0: entered allmulticast mode [ 798.788890][T24726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5576'. [ 799.148219][T24761] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 799.380149][T24770] FAULT_INJECTION: forcing a failure. [ 799.380149][T24770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.397901][T24770] CPU: 0 UID: 0 PID: 24770 Comm: syz.1.5590 Not tainted syzkaller #0 PREEMPT(full) [ 799.397932][T24770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 799.397944][T24770] Call Trace: [ 799.397953][T24770] [ 799.397962][T24770] dump_stack_lvl+0x189/0x250 [ 799.397992][T24770] ? __pfx____ratelimit+0x10/0x10 [ 799.398014][T24770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.398038][T24770] ? __pfx__printk+0x10/0x10 [ 799.398066][T24770] ? __might_fault+0xb0/0x130 [ 799.398107][T24770] should_fail_ex+0x414/0x560 [ 799.398139][T24770] _copy_from_user+0x2d/0xb0 [ 799.398164][T24770] do_tcp_setsockopt+0x47d/0x1f20 [ 799.398185][T24770] ? vfs_write+0x956/0xb30 [ 799.398212][T24770] ? smc_setsockopt+0x181/0xab0 [ 799.398232][T24770] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 799.398253][T24770] ? __pfx___mutex_lock+0x10/0x10 [ 799.398283][T24770] ? __lock_acquire+0xab9/0xd20 [ 799.398325][T24770] ? sock_common_setsockopt+0x36/0xc0 [ 799.398352][T24770] ? tcp_setsockopt+0x3d/0xe0 [ 799.398370][T24770] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 799.398401][T24770] smc_setsockopt+0x22f/0xab0 [ 799.398429][T24770] ? __pfx_smc_setsockopt+0x10/0x10 [ 799.398445][T24770] ? aa_sock_opt_perm+0xff/0x1b0 [ 799.398470][T24770] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 799.398491][T24770] ? __pfx_smc_setsockopt+0x10/0x10 [ 799.398512][T24770] do_sock_setsockopt+0x17c/0x1b0 [ 799.398541][T24770] __x64_sys_setsockopt+0x13f/0x1b0 [ 799.398569][T24770] do_syscall_64+0xfa/0x3b0 [ 799.398588][T24770] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.398608][T24770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.398627][T24770] ? clear_bhb_loop+0x60/0xb0 [ 799.398651][T24770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.398670][T24770] RIP: 0033:0x7f963f18ebe9 [ 799.398689][T24770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.398706][T24770] RSP: 002b:00007f9640024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 799.398728][T24770] RAX: ffffffffffffffda RBX: 00007f963f3c5fa0 RCX: 00007f963f18ebe9 [ 799.398742][T24770] RDX: 0000000000000022 RSI: 0000000000000006 RDI: 0000000000000007 [ 799.398754][T24770] RBP: 00007f9640024090 R08: 0000000000000004 R09: 0000000000000000 [ 799.398766][T24770] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 799.398778][T24770] R13: 00007f963f3c6038 R14: 00007f963f3c5fa0 R15: 00007fff73f96ba8 [ 799.398813][T24770] [ 799.773391][T24772] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 799.840451][T24776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5592'. [ 800.422649][T24790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5596'. [ 800.485214][T24790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5596'. [ 800.907210][T24805] FAULT_INJECTION: forcing a failure. [ 800.907210][T24805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.925556][T24805] CPU: 1 UID: 0 PID: 24805 Comm: syz.1.5599 Not tainted syzkaller #0 PREEMPT(full) [ 800.925585][T24805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 800.925597][T24805] Call Trace: [ 800.925606][T24805] [ 800.925615][T24805] dump_stack_lvl+0x189/0x250 [ 800.925645][T24805] ? __pfx____ratelimit+0x10/0x10 [ 800.925666][T24805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.925690][T24805] ? __pfx__printk+0x10/0x10 [ 800.925734][T24805] should_fail_ex+0x414/0x560 [ 800.925767][T24805] _copy_from_user+0x2d/0xb0 [ 800.925791][T24805] bpf_test_init+0xf8/0x170 [ 800.925816][T24805] bpf_prog_test_run_xdp+0x37c/0x1000 [ 800.925854][T24805] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 800.925881][T24805] ? __fget_files+0x2a/0x420 [ 800.925905][T24805] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 800.925927][T24805] bpf_prog_test_run+0x2c7/0x340 [ 800.925959][T24805] __sys_bpf+0x581/0x870 [ 800.925987][T24805] ? __pfx___sys_bpf+0x10/0x10 [ 800.926035][T24805] ? rcu_is_watching+0x15/0xb0 [ 800.926063][T24805] __x64_sys_bpf+0x7c/0x90 [ 800.926087][T24805] do_syscall_64+0xfa/0x3b0 [ 800.926107][T24805] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.926127][T24805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.926146][T24805] ? clear_bhb_loop+0x60/0xb0 [ 800.926170][T24805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.926188][T24805] RIP: 0033:0x7f963f18ebe9 [ 800.926206][T24805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.926223][T24805] RSP: 002b:00007f9640024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 800.926245][T24805] RAX: ffffffffffffffda RBX: 00007f963f3c5fa0 RCX: 00007f963f18ebe9 [ 800.926260][T24805] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 800.926271][T24805] RBP: 00007f9640024090 R08: 0000000000000000 R09: 0000000000000000 [ 800.926283][T24805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.926294][T24805] R13: 00007f963f3c6038 R14: 00007f963f3c5fa0 R15: 00007fff73f96ba8 [ 800.926334][T24805] [ 801.243468][T24806] syzkaller0: entered promiscuous mode [ 801.252708][T24806] syzkaller0: entered allmulticast mode [ 801.514139][T24810] netlink: 'syz.1.5600': attribute type 1 has an invalid length. [ 801.672243][T24797] netlink: 'syz.4.5595': attribute type 6 has an invalid length. [ 801.856126][T24815] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5602'. [ 802.587554][T24828] netlink: 'syz.1.5607': attribute type 1 has an invalid length. [ 802.595944][T24831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5607'. [ 802.647571][T24828] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 803.212672][T24835] siw: device registration error -23 [ 803.610977][T24853] sctp: [Deprecated]: syz.2.5614 (pid 24853) Use of int in max_burst socket option. [ 803.610977][T24853] Use struct sctp_assoc_value instead [ 803.721528][T24857] netlink: 'syz.1.5615': attribute type 7 has an invalid length. [ 803.742448][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5615'. [ 804.143812][T24874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5620'. [ 804.184505][T24874] netlink: 'syz.3.5620': attribute type 30 has an invalid length. [ 804.201416][T24874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5620'. [ 804.255692][T24881] netlink: 'syz.2.5622': attribute type 5 has an invalid length. [ 806.233049][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'. [ 806.239412][T24895] sctp: [Deprecated]: syz.1.5626 (pid 24895) Use of int in maxseg socket option. [ 806.239412][T24895] Use struct sctp_assoc_value instead [ 806.740924][T24902] vlan0: entered allmulticast mode [ 806.758438][T24902] bridge_slave_0: entered allmulticast mode [ 807.368169][T24928] tipc: Enabling of bearer rejected, failed to enable media [ 807.661157][T24941] syzkaller1: entered promiscuous mode [ 807.670834][T24941] syzkaller1: entered allmulticast mode [ 807.699515][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5639'. [ 807.923155][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5640'. [ 808.538839][T24966] netlink: 'syz.0.5646': attribute type 21 has an invalid length. [ 808.579069][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 808.770800][T24967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5646'. [ 809.018472][T21836] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 809.053052][T21836] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 809.067271][T24974] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 809.216146][T24978] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5650'. [ 809.286320][T21836] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 809.314537][T21828] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 809.677513][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 810.288253][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5659'. [ 810.367895][T25002] macvtap1: entered promiscuous mode [ 810.386730][T25002] team0: entered promiscuous mode [ 810.400588][T25002] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 810.427327][T25002] macvtap1: entered allmulticast mode [ 810.444468][T25002] team0: entered allmulticast mode [ 810.461083][T25002] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 810.487145][T25002] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 810.510494][T25006] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 811.304803][T25026] syzkaller0: entered promiscuous mode [ 811.310334][T25026] syzkaller0: entered allmulticast mode [ 811.453683][T25033] syz_tun: entered allmulticast mode [ 811.485476][T25030] dvmrp1: entered allmulticast mode [ 811.502586][T25028] syz_tun: left allmulticast mode [ 811.738430][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5669'. [ 811.800527][T25042] macsec3: entered promiscuous mode [ 811.820142][T25042] macsec3: entered allmulticast mode [ 812.013244][T25056] syzkaller0: entered promiscuous mode [ 812.031543][T25056] syzkaller0: entered allmulticast mode [ 812.178442][T25064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5676'. [ 812.238660][T25064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5676'. [ 812.404071][T25076] bond0: Caught tx_queue_len zero misconfig [ 812.630494][T25082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.703019][T25082] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 812.797605][T25093] syzkaller0: entered promiscuous mode [ 812.803435][T25093] syzkaller0: entered allmulticast mode [ 812.907482][T25097] FAULT_INJECTION: forcing a failure. [ 812.907482][T25097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.931488][T25097] CPU: 0 UID: 0 PID: 25097 Comm: syz.3.5690 Not tainted syzkaller #0 PREEMPT(full) [ 812.931519][T25097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 812.931532][T25097] Call Trace: [ 812.931540][T25097] [ 812.931549][T25097] dump_stack_lvl+0x189/0x250 [ 812.931579][T25097] ? __pfx____ratelimit+0x10/0x10 [ 812.931600][T25097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.931623][T25097] ? __pfx__printk+0x10/0x10 [ 812.931665][T25097] should_fail_ex+0x414/0x560 [ 812.931697][T25097] _copy_to_user+0x31/0xb0 [ 812.931723][T25097] bpf_test_finish+0x56f/0x700 [ 812.931752][T25097] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 812.931774][T25097] ? __pfx_bpf_test_finish+0x10/0x10 [ 812.931802][T25097] ? bpf_test_init+0x133/0x170 [ 812.931825][T25097] bpf_prog_test_run_xdp+0x79a/0x1000 [ 812.931865][T25097] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 812.931891][T25097] ? __fget_files+0x2a/0x420 [ 812.931918][T25097] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 812.931939][T25097] bpf_prog_test_run+0x2c7/0x340 [ 812.931971][T25097] __sys_bpf+0x581/0x870 [ 812.931999][T25097] ? __pfx___sys_bpf+0x10/0x10 [ 812.932040][T25097] ? ksys_write+0x22a/0x250 [ 812.932069][T25097] ? __pfx_ksys_write+0x10/0x10 [ 812.932092][T25097] ? rcu_is_watching+0x15/0xb0 [ 812.932121][T25097] __x64_sys_bpf+0x7c/0x90 [ 812.932145][T25097] do_syscall_64+0xfa/0x3b0 [ 812.932165][T25097] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.932185][T25097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.932204][T25097] ? clear_bhb_loop+0x60/0xb0 [ 812.932226][T25097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.932245][T25097] RIP: 0033:0x7f7b8fb8ebe9 [ 812.932264][T25097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.932281][T25097] RSP: 002b:00007f7b90990038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.932303][T25097] RAX: ffffffffffffffda RBX: 00007f7b8fdc5fa0 RCX: 00007f7b8fb8ebe9 [ 812.932317][T25097] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 812.932330][T25097] RBP: 00007f7b90990090 R08: 0000000000000000 R09: 0000000000000000 [ 812.932342][T25097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.932355][T25097] R13: 00007f7b8fdc6038 R14: 00007f7b8fdc5fa0 R15: 00007ffe310859c8 [ 812.932388][T25097] [ 813.235666][T25104] __nla_validate_parse: 1 callbacks suppressed [ 813.235688][T25104] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5693'. [ 813.533581][T25113] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5694'. [ 813.605772][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 813.978722][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5700'. [ 814.066135][ T30] audit: type=1800 audit(1756858103.151:105): pid=25122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5694" name="memory.events" dev="tmpfs" ino=2985 res=0 errno=0 [ 814.454986][T25158] sit0: Caught tx_queue_len zero misconfig [ 814.648598][T25165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5709'. [ 814.930537][T25172] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.951837][T25172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 815.220291][T25179] netlink: zone id is out of range [ 815.223468][T25184] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5716'. [ 815.235667][T25181] netlink: zone id is out of range [ 815.244017][T25181] netlink: zone id is out of range [ 815.286854][T25179] netlink: zone id is out of range [ 815.292310][T25181] netlink: zone id is out of range [ 815.313454][T25179] netlink: zone id is out of range [ 815.324111][T25181] netlink: zone id is out of range [ 815.329612][T25179] netlink: zone id is out of range [ 815.597714][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5723'. [ 815.698932][T25212] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5724'. [ 815.915623][T25225] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5730'. [ 815.939244][T25224] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5728'. [ 816.078223][T25186] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 816.422299][ T30] audit: type=1800 audit(1756858105.501:106): pid=25231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5728" name="memory.events" dev="tmpfs" ino=2910 res=0 errno=0 [ 816.886496][T25255] tipc: Enabled bearer , priority 0 [ 816.906993][T25256] syz2: rxe_newlink: already configured on bond_slave_0 [ 816.961615][T25253] tipc: Disabling bearer [ 817.315219][T18331] Bluetooth: hci1: command 0x0405 tx timeout [ 817.774225][T25289] IPv6: sit3: Disabled Multicast RS [ 817.936355][T25304] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 818.389544][T25319] __nla_validate_parse: 3 callbacks suppressed [ 818.389565][T25319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5758'. [ 818.828837][T25333] net_ratelimit: 34 callbacks suppressed [ 818.828859][T25333] openvswitch: netlink: Flow actions attr not present in new flow. [ 818.853290][T25334] netlink: 87 bytes leftover after parsing attributes in process `syz.1.5760'. [ 818.991226][T25338] batadv1: entered allmulticast mode [ 819.036866][T25338] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 819.546837][T25366] syzkaller0: entered promiscuous mode [ 819.561492][T25366] syzkaller0: entered allmulticast mode [ 819.825149][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5774'. [ 820.219236][T25390] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 820.340462][T25398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5783'. [ 820.388903][T25398] netlink: 'syz.1.5783': attribute type 1 has an invalid length. [ 820.394265][T25396] tipc: Enabled bearer , priority 0 [ 820.455984][T25406] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 820.559461][T25404] bond2: entered promiscuous mode [ 820.579530][T25404] bond2: entered allmulticast mode [ 820.587227][T25404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 820.596102][T25396] syzkaller0: entered promiscuous mode [ 820.601665][T25396] syzkaller0: entered allmulticast mode [ 820.627280][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5787'. [ 820.637261][T25413] netlink: 'syz.2.5787': attribute type 30 has an invalid length. [ 820.645377][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5787'. [ 820.664109][T25409] bridge0: entered promiscuous mode [ 820.669998][T25409] bridge0: entered allmulticast mode [ 820.677674][T21837] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 820.691232][T25409] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 820.795428][T21826] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 820.869666][T25423] Bluetooth: MGMT ver 1.23 [ 821.095839][T25411] syzkaller0: entered promiscuous mode [ 821.101473][T25411] syzkaller0: entered allmulticast mode [ 821.141340][T25396] tipc: Resetting bearer [ 821.239119][T25396] tipc: Disabling bearer [ 821.449591][T25440] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5794'. [ 822.207455][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5800'. [ 822.235414][T25459] netlink: 'syz.1.5800': attribute type 30 has an invalid length. [ 822.259616][ T30] audit: type=1800 audit(1756858111.341:107): pid=25440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5794" name="memory.events" dev="tmpfs" ino=2713 res=0 errno=0 [ 822.288419][T25461] netlink: 'syz.2.5801': attribute type 1 has an invalid length. [ 822.296634][T25459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5800'. [ 822.427362][T25461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 822.518619][T25467] bond4: (slave geneve2): making interface the new active one [ 822.551942][T25467] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 822.573487][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 822.589524][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 822.598738][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 822.608538][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 822.616881][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.773103][T25461] bond4: entered promiscuous mode [ 822.779973][T25461] geneve2: entered promiscuous mode [ 822.793899][T21828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.818786][T21828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.942657][T21828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.959052][T21828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.004894][T25482] ip6tnl0: Caught tx_queue_len zero misconfig [ 823.354617][T25495] FAULT_INJECTION: forcing a failure. [ 823.354617][T25495] name failslab, interval 1, probability 0, space 0, times 0 [ 823.401829][T25495] CPU: 0 UID: 0 PID: 25495 Comm: syz.1.5809 Not tainted syzkaller #0 PREEMPT(full) [ 823.401860][T25495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 823.401871][T25495] Call Trace: [ 823.401880][T25495] [ 823.401889][T25495] dump_stack_lvl+0x189/0x250 [ 823.401917][T25495] ? __pfx____ratelimit+0x10/0x10 [ 823.401938][T25495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.401961][T25495] ? __pfx__printk+0x10/0x10 [ 823.401995][T25495] ? __pfx___might_resched+0x10/0x10 [ 823.402019][T25495] should_fail_ex+0x414/0x560 [ 823.402051][T25495] should_failslab+0xa8/0x100 [ 823.402091][T25495] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 823.402118][T25495] ? __alloc_skb+0x112/0x2d0 [ 823.402143][T25495] __alloc_skb+0x112/0x2d0 [ 823.402168][T25495] netlink_sendmsg+0x5c6/0xb30 [ 823.402200][T25495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.402224][T25495] ? aa_sock_msg_perm+0xf1/0x1d0 [ 823.402246][T25495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.402267][T25495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.402288][T25495] __sock_sendmsg+0x219/0x270 [ 823.402320][T25495] ____sys_sendmsg+0x505/0x830 [ 823.402348][T25495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.402381][T25495] ? import_iovec+0x74/0xa0 [ 823.402409][T25495] ___sys_sendmsg+0x21f/0x2a0 [ 823.402435][T25495] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.402500][T25495] ? __fget_files+0x2a/0x420 [ 823.402517][T25495] ? __fget_files+0x3a0/0x420 [ 823.402546][T25495] __x64_sys_sendmsg+0x19b/0x260 [ 823.402573][T25495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.402607][T25495] ? __pfx_ksys_write+0x10/0x10 [ 823.402628][T25495] ? rcu_is_watching+0x15/0xb0 [ 823.402654][T25495] ? do_syscall_64+0xbe/0x3b0 [ 823.402678][T25495] do_syscall_64+0xfa/0x3b0 [ 823.402697][T25495] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.402715][T25495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.402735][T25495] ? clear_bhb_loop+0x60/0xb0 [ 823.402759][T25495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.402778][T25495] RIP: 0033:0x7f963f18ebe9 [ 823.402797][T25495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.402814][T25495] RSP: 002b:00007f9640024038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.402836][T25495] RAX: ffffffffffffffda RBX: 00007f963f3c5fa0 RCX: 00007f963f18ebe9 [ 823.402851][T25495] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 823.402863][T25495] RBP: 00007f9640024090 R08: 0000000000000000 R09: 0000000000000000 [ 823.402876][T25495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.402888][T25495] R13: 00007f963f3c6038 R14: 00007f963f3c5fa0 R15: 00007fff73f96ba8 [ 823.402922][T25495] [ 823.681421][T25499] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 823.770508][T25499] team0: left allmulticast mode [ 823.784638][T25499] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 823.791826][T25499] team0: left promiscuous mode [ 823.831991][T25499] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 823.911120][T25502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5812'. [ 824.040244][T21837] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.067700][T21837] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.175730][T21837] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.328300][T21837] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.362194][T25517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5815'. [ 824.679997][ T51] Bluetooth: hci2: command tx timeout [ 825.551047][T21826] bond0 (unregistering): Released all slaves [ 825.565059][T21826] bond1 (unregistering): Released all slaves [ 825.580159][T21826] bond2 (unregistering): Released all slaves [ 825.757063][T21826] bond3 (unregistering): Released all slaves [ 825.773636][T21826] bond4 (unregistering): Released all slaves [ 825.955208][T21826] bond5 (unregistering): Released all slaves [ 826.133103][T21826] bond6 (unregistering): Released all slaves [ 826.319057][T21826] bond7 (unregistering): Released all slaves [ 826.712385][T21826] tipc: Left network mode [ 826.755775][ T51] Bluetooth: hci2: command tx timeout [ 827.171526][T25469] chnl_net:caif_netlink_parms(): no params data found [ 827.814011][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5827'. [ 827.836891][T25562] netlink: 'syz.2.5827': attribute type 30 has an invalid length. [ 827.873259][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 828.076493][T25469] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.089833][T25469] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.112379][T25469] bridge_slave_0: entered allmulticast mode [ 828.121213][T25469] bridge_slave_0: entered promiscuous mode [ 828.131425][T25469] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.139200][T25469] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.146821][T25469] bridge_slave_1: entered allmulticast mode [ 828.155328][T25469] bridge_slave_1: entered promiscuous mode [ 828.255567][T25469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.271020][T25469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.496323][T25469] team0: Port device team_slave_0 added [ 828.548693][T25469] team0: Port device team_slave_1 added [ 828.835459][ T51] Bluetooth: hci2: command tx timeout [ 828.917950][T25469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.926151][T25469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.954079][T25469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.023080][T25469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.031472][T25469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.069833][T25469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.361940][T25572] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 829.649902][T25469] hsr_slave_0: entered promiscuous mode [ 829.693007][T25469] hsr_slave_1: entered promiscuous mode [ 829.728389][T25469] debugfs: 'hsr0' already exists in 'hsr' [ 829.751120][T25469] Cannot create hsr debugfs directory [ 830.012586][T25590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5833'. [ 830.013019][T21826] hsr_slave_0: left promiscuous mode [ 830.055870][T21826] hsr_slave_1: left promiscuous mode [ 830.379696][T25597] netlink: 'syz.2.5833': attribute type 10 has an invalid length. [ 830.914448][ T51] Bluetooth: hci2: command tx timeout [ 831.431716][T25599] netlink: 'syz.2.5834': attribute type 1 has an invalid length. [ 831.535612][T25599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 831.823080][T25601] bond5: (slave veth5): Enslaving as an active interface with a down link [ 831.871935][T25599] gretap2: entered promiscuous mode [ 831.893290][T25599] bond5: (slave gretap2): making interface the new active one [ 831.907716][T25599] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 831.982240][T25602] macvlan3: entered promiscuous mode [ 832.026244][T25602] macvlan3: entered allmulticast mode [ 832.037505][T25602] bond5: entered promiscuous mode [ 832.048123][T25602] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 832.064987][T25602] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 832.082787][T25602] bond5: left promiscuous mode [ 832.177853][T21826] IPVS: stop unused estimator thread 0... [ 832.469625][T25615] dvmrp8: entered allmulticast mode [ 832.541487][T25621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5838'. [ 832.639923][T25622] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5841'. [ 832.899648][T25631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5842'. [ 833.367996][T25469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 833.441033][T25469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 833.503341][T25469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 833.571307][T25469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 833.604666][ T30] audit: type=1800 audit(1756858122.681:108): pid=25629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5841" name="memory.events" dev="tmpfs" ino=3079 res=0 errno=0 [ 833.658170][T25639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5845'. [ 833.958726][T25469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.076154][T25469] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.160134][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.167502][ T9739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.272946][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.280227][ T9739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.358754][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5848'. [ 834.369871][T25469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.761254][T25663] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 835.013932][T25669] netlink: 'syz.0.5852': attribute type 1 has an invalid length. [ 835.030562][T25669] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5852'. [ 835.126795][T25669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5852'. [ 835.488814][T25469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.780802][T25680] netlink: 'syz.0.5854': attribute type 1 has an invalid length. [ 835.802322][T25680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.170194][T25693] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 836.526711][T25703] netlink: 'syz.2.5859': attribute type 2 has an invalid length. [ 836.590201][T25703] k›*·]‘: entered promiscuous mode [ 836.633039][T25469] veth0_vlan: entered promiscuous mode [ 836.678665][T25709] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5861'. [ 836.722459][T25705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.733236][T25705] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.788686][T25705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 836.825587][T25709] batadv1: entered promiscuous mode [ 836.831456][T25709] batadv1: entered allmulticast mode [ 836.901277][T25469] veth1_vlan: entered promiscuous mode [ 836.933894][T25703] veth0_to_team: entered promiscuous mode [ 836.941287][T25703] veth0_to_team: entered allmulticast mode [ 837.011141][T25469] veth0_macvtap: entered promiscuous mode [ 837.030318][T25469] veth1_macvtap: entered promiscuous mode [ 837.079500][T25469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.151178][T25469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.183049][T25728] netlink: 'syz.2.5865': attribute type 4 has an invalid length. [ 837.191175][T25725] syzkaller0: entered promiscuous mode [ 837.191199][T25725] syzkaller0: entered allmulticast mode [ 837.313502][T21828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.333070][T21828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.368221][T21828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.400406][T25738] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5868'. [ 837.411365][T25737] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5868'. [ 837.442568][T21828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.773952][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5875'. [ 837.807975][T25764] : renamed from veth0_to_bond [ 837.879464][T21837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.901411][T21837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.014098][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.027845][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.091915][T25772] netlink: 428 bytes leftover after parsing attributes in process `syz.3.5878'. [ 838.114164][T25772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5878'. [ 838.473933][T25778] syzkaller0: entered promiscuous mode [ 838.494482][T25778] syzkaller0: entered allmulticast mode [ 839.647392][T25796] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5885'. [ 839.870328][T18331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 839.880826][T18331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 839.894533][T18331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 839.902858][T18331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 839.911446][T18331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 841.117865][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'. [ 841.808203][T21835] dvmrp1 (unregistering): left allmulticast mode [ 841.881285][T21835] team0: Port device geneve0 removed [ 841.954779][T18331] Bluetooth: hci1: command tx timeout [ 842.348983][T21835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.362534][T21835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.373275][T21835] bond0 (unregistering): Released all slaves [ 842.704680][T25854] netlink: 'syz.4.5901': attribute type 2 has an invalid length. [ 843.642893][T25871] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5907'. [ 843.713532][T25871] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 843.720157][T25873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5907'. [ 843.743284][T25801] chnl_net:caif_netlink_parms(): no params data found [ 843.745208][T25871] openvswitch: netlink: Message has 1 unknown bytes. [ 843.814666][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5907'. [ 843.971489][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5908'. [ 844.035235][T18331] Bluetooth: hci1: command tx timeout [ 844.193382][T21835] tipc: Disabling bearer [ 844.205964][T21835] tipc: Disabling bearer [ 844.244655][T21835] tipc: Left network mode [ 844.374693][T25801] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.394566][T25801] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.401917][T25801] bridge_slave_0: entered allmulticast mode [ 844.502613][T25801] bridge_slave_0: entered promiscuous mode [ 844.536391][T25801] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.564125][T25801] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.598149][T25801] bridge_slave_1: entered allmulticast mode [ 844.606400][T25801] bridge_slave_1: entered promiscuous mode [ 844.858223][T25801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.928504][T25801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.059510][T25920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5917'. [ 845.289622][T25801] team0: Port device team_slave_0 added [ 845.302455][T25801] team0: Port device team_slave_1 added [ 845.473370][T25801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.493031][T25801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.574649][T25801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.606121][T25801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.626262][T25801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.653893][T25801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.665555][T25935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5921'. [ 845.855923][T25801] hsr_slave_0: entered promiscuous mode [ 845.866916][T25801] hsr_slave_1: entered promiscuous mode [ 845.895327][T25801] debugfs: 'hsr0' already exists in 'hsr' [ 845.901683][T25801] Cannot create hsr debugfs directory [ 846.115176][ T51] Bluetooth: hci1: command tx timeout [ 846.270044][T25948] netlink: 'syz.4.5926': attribute type 21 has an invalid length. [ 846.377434][T25945] netlink: 'syz.2.5925': attribute type 12 has an invalid length. [ 846.416114][T25945] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5925'. [ 846.638928][T25954] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5928'. [ 846.683325][T25954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5928'. [ 846.949784][T25960] netlink: 'syz.2.5930': attribute type 1 has an invalid length. [ 847.438442][T25970] sctp: [Deprecated]: syz.4.5934 (pid 25970) Use of int in max_burst socket option deprecated. [ 847.438442][T25970] Use struct sctp_assoc_value instead [ 847.509203][T25970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5934'. [ 847.773060][T25976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.037324][T25960] team0: Port device netdevsim0 removed [ 848.194773][ T51] Bluetooth: hci1: command tx timeout [ 848.509488][T21835] hsr_slave_0: left promiscuous mode [ 848.548749][T21835] hsr_slave_1: left promiscuous mode [ 848.585627][T21835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.649173][T21835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.350277][T21835] team0 (unregistering): Port device team_slave_1 removed [ 849.408706][T21835] team0 (unregistering): Port device team_slave_0 removed [ 849.517881][T21826] smc: removing ib device syz2 [ 851.025290][T25999] syzkaller0: entered promiscuous mode [ 851.047817][T25999] syzkaller0: entered allmulticast mode [ 851.678527][T25801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 851.782361][T25801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 851.826272][T25801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 851.911698][T25801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 852.050952][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5951'. [ 852.082949][T26029] openvswitch: netlink: Flow actions attr not present in new flow. [ 852.246002][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5952'. [ 852.290498][T26024] veth7: entered promiscuous mode [ 852.596436][T26033] veth7: entered promiscuous mode [ 853.071625][T25801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.181591][T25801] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.248639][T21836] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.255948][T21836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.333561][T21836] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.340837][T21836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.417593][T21835] IPVS: stop unused estimator thread 0... [ 854.176640][T26088] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5965'. [ 854.187512][T25801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.241454][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.284419][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.432424][T25801] veth0_vlan: entered promiscuous mode [ 854.480145][T25801] veth1_vlan: entered promiscuous mode [ 855.021245][T26110] IPv6: NLM_F_CREATE should be specified when creating new route [ 855.095696][T26114] netlink: 'syz.1.5973': attribute type 32 has an invalid length. [ 855.109430][T26114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5973'. [ 855.112552][T26106] syzkaller1: entered allmulticast mode [ 855.138659][T25801] veth0_macvtap: entered promiscuous mode [ 855.357295][T25801] veth1_macvtap: entered promiscuous mode [ 855.719249][T25801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.761782][T25801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.822668][T21826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.857828][T21826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.869592][T21826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.907798][T21826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.952971][T26138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5975'. [ 856.031769][T26140] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5976'. [ 856.259534][T21827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.275348][T21827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.300367][T26142] syzkaller0: entered promiscuous mode [ 856.306695][T26142] syzkaller0: entered allmulticast mode [ 856.439510][T26147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5979'. [ 856.472788][T21828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.493533][T21828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.006175][T18331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 858.017908][T18331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 858.026618][T18331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.038281][T18331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.053204][T26163] syzkaller0: entered promiscuous mode [ 858.064639][T18331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.070360][T26163] syzkaller0: entered allmulticast mode [ 858.398811][T26169] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5986'. [ 858.530047][T26177] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 858.573793][T26177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 858.824063][T26183] ip6tnl4: entered promiscuous mode [ 858.833031][T26183] ip6tnl4: entered allmulticast mode [ 858.873778][T26183] team0: Device ip6tnl4 is up. Set it down before adding it as a team port [ 859.274078][T26197] netlink: 'syz.0.5994': attribute type 10 has an invalid length. [ 859.288412][T26197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5994'. [ 859.351590][T26197] team0: Port device geneve0 added [ 859.533895][T26208] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5997'. [ 859.560652][T26213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5998'. [ 859.569003][T26166] chnl_net:caif_netlink_parms(): no params data found [ 859.597003][T26213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5998'. [ 859.709524][T26211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5997'. [ 859.939084][T26211] team0: Port device team_slave_0 removed [ 860.195337][ T51] Bluetooth: hci0: command tx timeout [ 860.451017][T26166] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.469664][T26239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6006'. [ 860.469816][T26166] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.512340][T26166] bridge_slave_0: entered allmulticast mode [ 860.533961][T26166] bridge_slave_0: entered promiscuous mode [ 860.575627][T26166] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.582846][T26166] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.635049][T26166] bridge_slave_1: entered allmulticast mode [ 860.671947][T26166] bridge_slave_1: entered promiscuous mode [ 860.845549][T26252] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6008'. [ 860.889890][T26247] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.899059][T26247] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.030702][T26166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.071147][T26166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.368640][T26166] team0: Port device team_slave_0 added [ 861.397596][T26166] team0: Port device team_slave_1 added [ 861.620060][T26166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.642622][T26166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.700403][T26166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.732557][T26166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.757166][T26166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.863068][T26166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.120084][T26166] hsr_slave_0: entered promiscuous mode [ 862.144803][T26166] hsr_slave_1: entered promiscuous mode [ 862.168427][T26166] debugfs: 'hsr0' already exists in 'hsr' [ 862.187626][T26166] Cannot create hsr debugfs directory [ 862.196744][T26289] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 862.275216][ T51] Bluetooth: hci0: command tx timeout [ 862.518379][T26294] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6018'. [ 862.604232][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6017'. [ 863.446343][T26330] bond0: entered promiscuous mode [ 863.456326][T26330] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 863.471569][T26330] bond0: entered allmulticast mode [ 863.483389][T26330] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 863.493709][T26330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.547682][T26334] ip6tnl2: entered promiscuous mode [ 863.675213][T26343] FAULT_INJECTION: forcing a failure. [ 863.675213][T26343] name failslab, interval 1, probability 0, space 0, times 0 [ 863.688027][T26343] CPU: 1 UID: 0 PID: 26343 Comm: syz.4.6029 Not tainted syzkaller #0 PREEMPT(full) [ 863.688056][T26343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 863.688068][T26343] Call Trace: [ 863.688079][T26343] [ 863.688088][T26343] dump_stack_lvl+0x189/0x250 [ 863.688116][T26343] ? __pfx____ratelimit+0x10/0x10 [ 863.688136][T26343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.688156][T26343] ? __pfx__printk+0x10/0x10 [ 863.688184][T26343] ? __lock_acquire+0xab9/0xd20 [ 863.688213][T26343] should_fail_ex+0x414/0x560 [ 863.688242][T26343] should_failslab+0xa8/0x100 [ 863.688268][T26343] kmem_cache_alloc_noprof+0x73/0x3c0 [ 863.688289][T26343] ? skb_clone+0x212/0x3a0 [ 863.688309][T26343] ? run_filter+0x23/0x270 [ 863.688337][T26343] skb_clone+0x212/0x3a0 [ 863.688357][T26343] ? packet_rcv+0x567/0x1730 [ 863.688381][T26343] packet_rcv+0x65b/0x1730 [ 863.688426][T26343] ? __pfx_packet_rcv+0x10/0x10 [ 863.688447][T26343] __netif_receive_skb_core+0xe08/0x4020 [ 863.688485][T26343] ? kernel_text_address+0xa5/0xe0 [ 863.688514][T26343] ? __kernel_text_address+0xd/0x40 [ 863.688541][T26343] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 863.688565][T26343] ? arch_stack_walk+0xfc/0x150 [ 863.688595][T26343] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 863.688640][T26343] ? stack_trace_save+0x9c/0xe0 [ 863.688680][T26343] ? kasan_save_track+0x4f/0x80 [ 863.688701][T26343] ? kasan_save_track+0x3e/0x80 [ 863.688722][T26343] ? __kasan_slab_alloc+0x6c/0x80 [ 863.688746][T26343] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 863.688774][T26343] __netif_receive_skb_list_core+0x23f/0x800 [ 863.688819][T26343] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 863.688859][T26343] netif_receive_skb_list_internal+0x96f/0xcb0 [ 863.688894][T26343] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 863.688924][T26343] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 863.688961][T26343] ? __phys_addr+0xd3/0x180 [ 863.688986][T26343] ? build_skb_around+0x133/0x280 [ 863.689010][T26343] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 863.689042][T26343] netif_receive_skb_list+0x54/0x450 [ 863.689073][T26343] bpf_test_run_xdp_live+0x1786/0x1b10 [ 863.689108][T26343] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 863.689142][T26343] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 863.689161][T26343] ? bpf_dispatcher_xdp+0x800/0x1000 [ 863.689182][T26343] ? bpf_dispatcher_xdp+0x800/0x1000 [ 863.689258][T26343] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 863.689289][T26343] ? _copy_from_user+0x94/0xb0 [ 863.689312][T26343] ? bpf_test_init+0x133/0x170 [ 863.689329][T26343] ? xdp_convert_md_to_buff+0x5b/0x330 [ 863.689352][T26343] bpf_prog_test_run_xdp+0x713/0x1000 [ 863.689392][T26343] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 863.689418][T26343] ? __fget_files+0x2a/0x420 [ 863.689444][T26343] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 863.689465][T26343] bpf_prog_test_run+0x2c7/0x340 [ 863.689498][T26343] __sys_bpf+0x581/0x870 [ 863.689526][T26343] ? __pfx___sys_bpf+0x10/0x10 [ 863.689567][T26343] ? ksys_write+0x22a/0x250 [ 863.689592][T26343] ? __pfx_ksys_write+0x10/0x10 [ 863.689620][T26343] ? rcu_is_watching+0x15/0xb0 [ 863.689647][T26343] __x64_sys_bpf+0x7c/0x90 [ 863.689673][T26343] do_syscall_64+0xfa/0x3b0 [ 863.689693][T26343] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.689712][T26343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.689733][T26343] ? clear_bhb_loop+0x60/0xb0 [ 863.689758][T26343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.689777][T26343] RIP: 0033:0x7f9d9038ebe9 [ 863.689796][T26343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.689813][T26343] RSP: 002b:00007f9d91206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.689837][T26343] RAX: ffffffffffffffda RBX: 00007f9d905c5fa0 RCX: 00007f9d9038ebe9 [ 863.689851][T26343] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 863.689863][T26343] RBP: 00007f9d91206090 R08: 0000000000000000 R09: 0000000000000000 [ 863.689875][T26343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.689887][T26343] R13: 00007f9d905c6038 R14: 00007f9d905c5fa0 R15: 00007ffe188387e8 [ 863.689921][T26343] [ 864.148790][T26345] __nla_validate_parse: 3 callbacks suppressed [ 864.148813][T26345] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6030'. [ 864.355435][ T51] Bluetooth: hci0: command tx timeout [ 864.532732][T26354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6033'. [ 864.545074][T26354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6033'. [ 864.772615][T26369] ip6tnl1: entered promiscuous mode [ 864.877779][T26375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6038'. [ 865.506142][T26368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.891097][T26393] sctp: [Deprecated]: syz.4.6044 (pid 26393) Use of int in max_burst socket option. [ 865.891097][T26393] Use struct sctp_assoc_value instead [ 865.930245][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 865.957403][T26166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 865.974893][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 865.997426][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 866.007224][T26166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 866.035087][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 866.084020][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 866.107195][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 866.150811][T26166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 866.171089][T26166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 866.414901][T26424] FAULT_INJECTION: forcing a failure. [ 866.414901][T26424] name failslab, interval 1, probability 0, space 0, times 0 [ 866.427821][T26424] CPU: 1 UID: 0 PID: 26424 Comm: syz.0.6053 Not tainted syzkaller #0 PREEMPT(full) [ 866.427856][T26424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 866.427868][T26424] Call Trace: [ 866.427878][T26424] [ 866.427887][T26424] dump_stack_lvl+0x189/0x250 [ 866.427915][T26424] ? __pfx____ratelimit+0x10/0x10 [ 866.427935][T26424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.427955][T26424] ? __pfx__printk+0x10/0x10 [ 866.427984][T26424] ? __lock_acquire+0xab9/0xd20 [ 866.428015][T26424] should_fail_ex+0x414/0x560 [ 866.428045][T26424] should_failslab+0xa8/0x100 [ 866.428070][T26424] kmem_cache_alloc_noprof+0x73/0x3c0 [ 866.428092][T26424] ? skb_clone+0x212/0x3a0 [ 866.428111][T26424] ? run_filter+0x23/0x270 [ 866.428138][T26424] skb_clone+0x212/0x3a0 [ 866.428156][T26424] ? packet_rcv+0x567/0x1730 [ 866.428181][T26424] packet_rcv+0x65b/0x1730 [ 866.428213][T26424] ? __pfx_packet_rcv+0x10/0x10 [ 866.428234][T26424] __netif_receive_skb_core+0xe08/0x4020 [ 866.428270][T26424] ? kernel_text_address+0xa5/0xe0 [ 866.428294][T26424] ? __kernel_text_address+0xd/0x40 [ 866.428318][T26424] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 866.428338][T26424] ? arch_stack_walk+0xfc/0x150 [ 866.428365][T26424] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 866.428394][T26424] ? stack_trace_save+0x9c/0xe0 [ 866.428430][T26424] ? kasan_save_track+0x4f/0x80 [ 866.428449][T26424] ? kasan_save_track+0x3e/0x80 [ 866.428466][T26424] ? __kasan_slab_alloc+0x6c/0x80 [ 866.428487][T26424] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 866.428513][T26424] __netif_receive_skb_list_core+0x23f/0x800 [ 866.428554][T26424] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 866.428591][T26424] netif_receive_skb_list_internal+0x96f/0xcb0 [ 866.428622][T26424] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 866.428647][T26424] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 866.428672][T26424] ? __phys_addr+0xd3/0x180 [ 866.428694][T26424] ? build_skb_around+0x133/0x280 [ 866.428716][T26424] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 866.428745][T26424] netif_receive_skb_list+0x54/0x450 [ 866.428771][T26424] bpf_test_run_xdp_live+0x1786/0x1b10 [ 866.428803][T26424] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 866.428834][T26424] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 866.428860][T26424] ? bpf_dispatcher_xdp+0x800/0x1000 [ 866.428880][T26424] ? bpf_dispatcher_xdp+0x800/0x1000 [ 866.428952][T26424] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 866.428979][T26424] ? _copy_from_user+0x94/0xb0 [ 866.429001][T26424] ? bpf_test_init+0x133/0x170 [ 866.429016][T26424] ? xdp_convert_md_to_buff+0x5b/0x330 [ 866.429038][T26424] bpf_prog_test_run_xdp+0x713/0x1000 [ 866.429076][T26424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 866.429100][T26424] ? __fget_files+0x2a/0x420 [ 866.429123][T26424] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 866.429142][T26424] bpf_prog_test_run+0x2c7/0x340 [ 866.429171][T26424] __sys_bpf+0x581/0x870 [ 866.429197][T26424] ? __pfx___sys_bpf+0x10/0x10 [ 866.429234][T26424] ? ksys_write+0x22a/0x250 [ 866.429259][T26424] ? __pfx_ksys_write+0x10/0x10 [ 866.429279][T26424] ? rcu_is_watching+0x15/0xb0 [ 866.429306][T26424] __x64_sys_bpf+0x7c/0x90 [ 866.429328][T26424] do_syscall_64+0xfa/0x3b0 [ 866.429346][T26424] ? lockdep_hardirqs_on+0x9c/0x150 [ 866.429364][T26424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.429382][T26424] ? clear_bhb_loop+0x60/0xb0 [ 866.429405][T26424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.429423][T26424] RIP: 0033:0x7f0c0018ebe9 [ 866.429442][T26424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.429458][T26424] RSP: 002b:00007f0c0105a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.429479][T26424] RAX: ffffffffffffffda RBX: 00007f0c003c5fa0 RCX: 00007f0c0018ebe9 [ 866.429492][T26424] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 866.429505][T26424] RBP: 00007f0c0105a090 R08: 0000000000000000 R09: 0000000000000000 [ 866.429516][T26424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 866.429527][T26424] R13: 00007f0c003c6038 R14: 00007f0c003c5fa0 R15: 00007ffd328a3b08 [ 866.429560][T26424] [ 866.436694][T18331] Bluetooth: hci0: command tx timeout [ 867.218299][T26166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.283785][T26166] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.336624][T21836] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.343793][T21836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.408452][T21836] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.415785][T21836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.436587][T26443] syzkaller0: entered promiscuous mode [ 867.442417][T26443] syzkaller0: entered allmulticast mode [ 867.550954][T26446] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 868.239413][T26166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.510226][T26166] veth0_vlan: entered promiscuous mode [ 868.573470][T26166] veth1_vlan: entered promiscuous mode [ 868.712131][T26166] veth0_macvtap: entered promiscuous mode [ 868.749617][T26166] veth1_macvtap: entered promiscuous mode [ 868.875710][T26469] netlink: 'syz.4.6067': attribute type 3 has an invalid length. [ 868.915879][T18331] Bluetooth: hci0: command 0x0405 tx timeout [ 868.939647][T26166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.970970][T26166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.042610][T21827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.087447][T21827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.148928][T21827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.168325][T21827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.203346][T26480] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 869.269456][T26484] __nla_validate_parse: 29 callbacks suppressed [ 869.269479][T26484] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6073'. [ 869.414911][T26489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6075'. [ 869.522744][T26492] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6076'. [ 869.558604][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.584085][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.700843][T21827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.734305][T21827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.740962][T26499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6079'. [ 869.904072][T26501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 870.134110][T26513] netlink: 'syz.1.6086': attribute type 31 has an invalid length. [ 870.339875][T26519] sctp: [Deprecated]: syz.2.6081 (pid 26519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 870.339875][T26519] Use struct sctp_sack_info instead [ 870.515268][T26528] netlink: 'syz.2.6081': attribute type 10 has an invalid length. [ 870.838177][T26537] netlink: 'syz.1.6091': attribute type 10 has an invalid length. [ 870.903863][T26537] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.952953][T26537] bond0: (slave team0): Enslaving as an active interface with an up link [ 870.994885][T18331] Bluetooth: hci0: command 0x0405 tx timeout [ 871.376151][T18331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 871.385984][T18331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 871.395151][T18331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 871.409861][T18331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 871.436743][T18331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 872.353179][T26563] pim6reg: entered allmulticast mode [ 872.555327][T26563] pim6reg: left allmulticast mode [ 872.593765][T26575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'. [ 872.612958][T26574] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6104'. [ 872.623660][T26575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6103'. [ 872.782275][T26578] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 872.902292][T26580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6106'. [ 872.998324][T26589] IPVS: Scheduler module ip_vs_ not found [ 873.077606][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.085495][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.254180][T26578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.281382][T26578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.569203][ T51] Bluetooth: hci4: command tx timeout [ 873.584037][T26609] netlink: 'syz.0.6112': attribute type 1 has an invalid length. [ 873.623664][T26609] netlink: 'syz.0.6112': attribute type 2 has an invalid length. [ 873.645924][T26609] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.6112'. [ 873.771777][ T1115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.798212][ T1115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.131679][T26616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.142809][T26616] bond0: (slave bond1): Enslaving as an active interface with an up link [ 874.229466][T21835] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.286391][T21835] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.407988][T26631] netlink: 'syz.2.6116': attribute type 1 has an invalid length. [ 874.572978][T26631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 874.861866][T26645] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6120'. [ 874.972622][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6122'. [ 875.572537][ T30] audit: type=1800 audit(1756858164.651:109): pid=26654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6124" name="memory.events" dev="tmpfs" ino=250 res=0 errno=0 [ 875.643053][ T51] Bluetooth: hci4: command tx timeout [ 875.893796][T21823] bond0 (unregistering): Released all slaves [ 875.909293][T21823] bond1 (unregistering): Released all slaves [ 875.932798][T26648] veth0_to_hsr: entered promiscuous mode [ 875.944362][T26648] veth0_to_hsr: entered allmulticast mode [ 875.996838][T26658] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 876.183626][T26660] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.191590][T26660] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.322943][T26673] netlink: 'syz.2.6127': attribute type 3 has an invalid length. [ 876.343797][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6127'. [ 876.462496][T26660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.495660][T26660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.707793][T21823] tipc: Left network mode [ 876.731520][T26540] chnl_net:caif_netlink_parms(): no params data found [ 876.748284][T21823] IPVS: stopping backup sync thread 22636 ... [ 876.768150][T26671] syzkaller1: entered promiscuous mode [ 876.778019][T26671] syzkaller1: entered allmulticast mode [ 876.795400][T21827] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.812518][T21827] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.832500][T21827] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.853232][T21827] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.186371][T26702] netlink: 'syz.2.6137': attribute type 28 has an invalid length. [ 877.542548][T26717] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6142'. [ 877.616926][T26540] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.642394][T26540] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.660959][T26540] bridge_slave_0: entered allmulticast mode [ 877.679933][T26540] bridge_slave_0: entered promiscuous mode [ 877.711521][T26540] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.711775][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6143'. [ 877.728814][ T51] Bluetooth: hci4: command tx timeout [ 877.733348][T26540] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.746929][T26540] bridge_slave_1: entered allmulticast mode [ 877.757372][T26540] bridge_slave_1: entered promiscuous mode [ 877.870677][T26540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.919308][T26540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.028220][T26540] team0: Port device team_slave_0 added [ 878.049574][T26734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6146'. [ 878.118232][T26540] team0: Port device team_slave_1 added [ 878.241943][T26739] netlink: 'syz.1.6148': attribute type 1 has an invalid length. [ 878.280128][T26739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.447331][T26540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.465447][T26540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.537772][T26540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.767541][T26540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.776666][T26540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.803526][T26540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.879624][T21823] hsr_slave_0: left promiscuous mode [ 878.899363][T21823] hsr_slave_1: left promiscuous mode [ 878.981096][T21823] pimreg (unregistering): left allmulticast mode [ 879.794896][ T51] Bluetooth: hci4: command tx timeout [ 880.072958][T21823] team0 (unregistering): left allmulticast mode [ 880.681693][T26763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.699942][T26763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.853897][T26763] ip6tnl2: left promiscuous mode [ 880.871778][T26540] hsr_slave_0: entered promiscuous mode [ 880.882226][T26540] hsr_slave_1: entered promiscuous mode [ 880.966197][T21827] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.982057][T21827] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.116943][T26767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6155'. [ 881.127090][T21827] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.142975][T21827] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.396593][T26771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6157'. [ 881.610539][T21823] IPVS: stop unused estimator thread 0... [ 881.616909][T26775] batadv0: entered promiscuous mode [ 881.651872][T26775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.025449][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6162'. [ 882.029831][T26785] netlink: 'syz.2.6161': attribute type 10 has an invalid length. [ 882.042804][T26785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6161'. [ 882.077774][T26785] dummy0: entered promiscuous mode [ 882.097815][T26785] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 882.426787][T26797] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6166'. [ 882.673337][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6169'. [ 882.756672][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6169'. [ 882.774878][T21836] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.799358][T21836] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.841199][T21836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.876730][T21836] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.910303][T26540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 882.935629][T26540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 882.958417][T26540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 882.989430][T26540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 883.005339][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6174'. [ 883.032558][T26819] netlink: 'syz.0.6174': attribute type 30 has an invalid length. [ 883.051944][T26819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6174'. [ 883.177523][T26835] netlink: 'syz.1.6176': attribute type 1 has an invalid length. [ 883.183025][T26834] syzkaller1: entered promiscuous mode [ 883.191232][T26835] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6176'. [ 883.205571][T26834] syzkaller1: entered allmulticast mode [ 883.330127][T26540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.373306][T26540] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.571657][T21823] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.578952][T21823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.711691][T21823] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.718987][T21823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.880682][T26843] nbd: must specify a size in bytes for the device [ 884.562613][T26540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.700478][T26540] veth0_vlan: entered promiscuous mode [ 884.743041][T26540] veth1_vlan: entered promiscuous mode [ 884.843058][T26540] veth0_macvtap: entered promiscuous mode [ 884.876486][T26540] veth1_macvtap: entered promiscuous mode [ 884.939148][T26540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.003913][T26540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.041012][T21836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.069658][T21836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.106573][T21836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.127177][T21836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.391383][T21826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.414903][T21826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.711875][T21828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.745606][T21828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.781367][T26891] tipc: Started in network mode [ 885.799764][T26891] tipc: Node identity e22035185d64, cluster identity 4711 [ 885.832020][T26891] tipc: Enabled bearer , priority 0 [ 885.863268][T26893] syzkaller0: entered promiscuous mode [ 885.901188][T26893] syzkaller0: entered allmulticast mode [ 886.038704][T26893] tipc: Resetting bearer [ 886.190692][T26891] tipc: Resetting bearer [ 886.315830][T26891] tipc: Disabling bearer [ 886.625952][T26911] __nla_validate_parse: 2 callbacks suppressed [ 886.625974][T26911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6198'. [ 886.812180][T26911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6198'. [ 887.158764][T26930] netlink: 'syz.1.6202': attribute type 1 has an invalid length. [ 887.198892][T26932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6203'. [ 887.201703][T26930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6202'. [ 887.224579][T26932] netlink: 'syz.3.6203': attribute type 2 has an invalid length. [ 887.233332][T26932] netlink: 'syz.3.6203': attribute type 1 has an invalid length. [ 887.272551][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'. [ 887.363277][T26940] netlink: 'syz.4.6206': attribute type 10 has an invalid length. [ 887.383818][T26940] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.416987][T26940] bond0: (slave team0): Enslaving as an active interface with an up link [ 887.831693][T21828] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 888.445514][T26984] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 888.457672][T26983] netlink: 'syz.2.6219': attribute type 10 has an invalid length. [ 888.505890][T26983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.523179][T26954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.569359][T26983] batadv0: entered promiscuous mode [ 888.583557][T26983] batadv0: entered allmulticast mode [ 888.592543][T26983] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 888.614756][T26983] syz.2.6219 (26983) used greatest stack depth: 17784 bytes left [ 888.909282][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6221'. [ 888.925630][T26993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6221'. [ 889.081915][T26999] netlink: 'syz.1.6224': attribute type 13 has an invalid length. [ 889.102132][T26999] netlink: 'syz.1.6224': attribute type 17 has an invalid length. [ 889.305968][T27011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.391896][T26998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.529430][T26999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.576045][T26999] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.618858][T26999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 889.652060][T27017] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 889.662874][T27017] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 889.942376][T27027] syzkaller1: entered promiscuous mode [ 889.969645][T27027] syzkaller1: entered allmulticast mode [ 890.381673][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6238'. [ 890.455053][T27042] netlink: 'syz.4.6237': attribute type 9 has an invalid length. [ 890.532520][T27044] bond1 (unregistering): Released all slaves [ 890.550500][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6238'. [ 890.666258][T27048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6239'. [ 890.867215][T27046] hsr_slave_0 (unregistering): left promiscuous mode [ 890.909800][T27049] dummy0: left promiscuous mode [ 890.950860][T27051] tipc: Started in network mode [ 890.965860][T27051] tipc: Node identity , cluster identity 4711 [ 890.972236][T27051] tipc: Failed to obtain node identity [ 890.988665][T27051] tipc: Enabling of bearer rejected, failed to enable media [ 892.168011][T27088] __nla_validate_parse: 5 callbacks suppressed [ 892.168034][T27088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6251'. [ 892.430775][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6254'. [ 892.758306][T27103] syzkaller0: entered promiscuous mode [ 892.767876][T27103] syzkaller0: entered allmulticast mode [ 893.335367][T27119] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6258'. [ 893.384754][T27119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6258'. [ 893.405245][T27119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6258'. [ 896.075910][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 896.082271][T27139] netlink: 'syz.1.6262': attribute type 1 has an invalid length. [ 896.103198][T27139] netlink: 'syz.1.6262': attribute type 3 has an invalid length. [ 896.111451][T27139] netlink: 'syz.1.6262': attribute type 1 has an invalid length. [ 896.124409][T27139] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6262'. [ 896.164404][T27139] NCSI netlink: No device for ifindex 0 [ 896.681762][T27169] netlink: 34 bytes leftover after parsing attributes in process `syz.1.6272'. [ 896.903019][T27175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6274'. [ 897.129909][T27183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6277'. [ 897.174723][T27183] netlink: 'syz.3.6277': attribute type 1 has an invalid length. [ 897.489448][T27189] sctp: [Deprecated]: syz.4.6278 (pid 27189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.489448][T27189] Use struct sctp_sack_info instead [ 897.509783][T27192] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 897.822074][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6282'. [ 897.873546][T27204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6282'. [ 897.934053][T27209] syzkaller0: entered promiscuous mode [ 897.962933][T27209] syzkaller0: entered allmulticast mode [ 898.592993][T27225] tipc: Started in network mode [ 898.598544][T27225] tipc: Node identity 72ebdfdc8fd2, cluster identity 4711 [ 898.606601][T27225] tipc: Enabled bearer , priority 0 [ 899.138170][T27239] netlink: 'syz.4.6292': attribute type 1 has an invalid length. [ 899.290463][T27239] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 899.645268][T27257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 899.660870][T27257] IPv6: NLM_F_CREATE should be set when creating new route [ 899.668188][T27257] IPv6: NLM_F_CREATE should be set when creating new route [ 899.675576][T27257] IPv6: NLM_F_CREATE should be set when creating new route [ 899.728112][T15010] tipc: Node number set to 4248428508 [ 900.043964][T27266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6298'. [ 900.081755][T27266] netlink: 'syz.4.6298': attribute type 1 has an invalid length. [ 900.133773][T27266] netlink: 'syz.4.6298': attribute type 2 has an invalid length. [ 900.833531][T27298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6308'. [ 900.963027][T27309] netlink: 'syz.0.6313': attribute type 1 has an invalid length. [ 900.987545][T27309] netlink: 'syz.0.6313': attribute type 1 has an invalid length. [ 901.044003][T27309] netlink: 'syz.0.6313': attribute type 1 has an invalid length. [ 901.107554][T27309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 901.159473][T27315] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 901.260437][T27324] geneve0: entered allmulticast mode [ 901.357711][T27309] vlan2: entered allmulticast mode [ 901.366416][T27309] veth1: entered allmulticast mode [ 901.372515][T27309] bond1: (slave vlan2): Opening slave failed [ 902.159744][T27352] bridge_slave_0: left allmulticast mode [ 902.175820][T27352] bridge_slave_0: left promiscuous mode [ 902.191913][T27352] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.212677][T27361] netlink: 'syz.0.6324': attribute type 10 has an invalid length. [ 902.250316][T27352] bridge_slave_1: left allmulticast mode [ 902.282172][T27352] bridge_slave_1: left promiscuous mode [ 902.306047][T27352] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.332244][T27366] netlink: 'syz.4.6329': attribute type 10 has an invalid length. [ 902.343330][T27352] bond0: (slave bond_slave_0): Releasing backup interface [ 902.353790][T27352] bond0: (slave bond_slave_1): Releasing backup interface [ 902.393184][T27352] team0: Port device team_slave_0 removed [ 902.419459][T27352] team0: Port device team_slave_1 removed [ 902.426858][T27352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.442198][T27352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.461223][T27352] team0: Port device geneve0 removed [ 902.474093][T27352] bond1: (slave wlan0): Releasing active interface [ 902.501506][T27360] ÿÿÿÿÿÿ: renamed from vlan1 [ 902.528926][T27361] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 902.642043][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'. [ 902.718078][T27373] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6332'. [ 902.908154][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6334'. [ 902.933884][T27378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6334'. [ 903.010306][T27378] gretap3: entered promiscuous mode [ 903.030810][T27388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6336'. [ 903.508821][T27405] Bluetooth: MGMT ver 1.23 [ 903.819909][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6343'. [ 903.962159][T27422] pim6reg: entered allmulticast mode [ 904.100324][T27422] pim6reg: left allmulticast mode [ 904.196195][T27432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6347'. [ 904.230541][T27432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6347'. [ 905.411419][T27450] ip6tnl3: entered promiscuous mode [ 905.718729][T27458] Bluetooth: MGMT ver 1.23 [ 906.118565][T27466] netlink: 'syz.1.6357': attribute type 10 has an invalid length. [ 906.256389][T27467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.328620][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6358'. [ 906.466828][T27471] bond_slave_0: entered promiscuous mode [ 906.472903][T27471] bond_slave_1: entered promiscuous mode [ 906.490891][T27471] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 906.527322][T27471] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 906.596223][T27467] bridge_slave_0: left allmulticast mode [ 906.602480][T27467] bridge_slave_0: left promiscuous mode [ 906.609243][T27467] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.633031][T27467] bridge_slave_1: left allmulticast mode [ 906.647934][T27467] bridge_slave_1: left promiscuous mode [ 906.667368][T27467] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.692986][T27467] bond0: (slave bond_slave_0): Releasing backup interface [ 906.702221][T27467] bond_slave_0: left promiscuous mode [ 906.732799][T27467] bond0: (slave bond_slave_1): Releasing backup interface [ 906.752618][T27467] bond_slave_1: left promiscuous mode [ 906.785835][T27467] team0: Port device team_slave_0 removed [ 906.810096][T27467] team0: Port device team_slave_1 removed [ 906.828109][T27467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.842932][T27467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.862393][T27467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.870527][T27467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.870767][T27485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6362'. [ 906.925875][T27467] bond1: (slave macvlan2): Removing an active aggregator [ 906.934084][T27467] bond1: (slave macvlan2): Releasing backup interface [ 907.327893][T27495] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 907.522538][T18270] IPVS: starting estimator thread 0... [ 907.523451][T27501] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 907.591352][T27499] batadv1: entered promiscuous mode [ 907.624884][T27505] IPVS: using max 26 ests per chain, 62400 per kthread [ 907.795719][T18331] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 907.803956][T18331] Bluetooth: hci2: command 0x0401 tx timeout [ 907.851592][T27512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6367'. [ 907.871845][T27517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6368'. [ 908.116771][T21836] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.215022][T21836] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.223962][T21836] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.286563][T21836] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.966313][T27544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 909.087649][T27551] __nla_validate_parse: 2 callbacks suppressed [ 909.087671][T27551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6377'. [ 910.187717][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6383'. [ 910.205235][T27573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6383'. [ 910.225238][T27573] tipc: Invalid UDP bearer configuration [ 910.225305][T27573] tipc: Enabling of bearer rejected, failed to enable media [ 910.433571][T27578] netlink: 'syz.3.6385': attribute type 1 has an invalid length. [ 910.552083][T27583] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6386'. [ 910.827771][T27588] netlink: 208128 bytes leftover after parsing attributes in process `syz.0.6389'. [ 910.867867][T27589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.888093][T27588] openvswitch: netlink: Message has 4 unknown bytes. [ 910.914006][T27586] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590) [ 910.945419][T27586] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 911.900709][ T1115] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.971859][T27613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 911.982055][T27613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 911.992188][T27613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 912.007208][T27613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 912.031902][T27613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 912.037000][T27614] veth0_vlan: entered allmulticast mode [ 912.162634][ T1115] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.238481][T27617] IPVS: Error connecting to the multicast addr [ 912.277094][ T1115] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.395319][ T1115] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.802271][T21836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.838315][T27635] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 912.876209][T21836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.900972][T27636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6401'. [ 912.995598][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 913.015009][T21827] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.522797][T27652] "syz.4.6405" (27652) uses obsolete ecb(arc4) skcipher [ 913.710256][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6407'. [ 913.722989][T27663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6407'. [ 913.773694][T21828] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.954228][T27664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6407'. [ 914.114498][ T51] Bluetooth: hci3: command tx timeout [ 914.480912][ T1115] bond5 (unregistering): (slave gretap2): Releasing active interface [ 914.605996][ T1115] dvmrp8 (unregistering): left allmulticast mode [ 914.632530][ T1115] bond4 (unregistering): (slave geneve2): Releasing active interface [ 914.651584][ T1115] geneve2 (unregistering): left promiscuous mode [ 914.883483][T27689] sctp: [Deprecated]: syz.1.6414 (pid 27689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 914.883483][T27689] Use struct sctp_sack_info instead [ 914.993320][ T1115] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 915.002287][ T1115] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 915.009827][ T1115] mac80211_hwsim hwsim45 wlan1: left allmulticast mode [ 915.019598][ T1115] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 915.028576][ T1115] batadv0: left promiscuous mode [ 915.033646][ T1115] batadv0: left allmulticast mode [ 915.046270][ T1115] bond0 (unregistering): Released all slaves [ 915.080256][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 915.207959][ T1115] bond1 (unregistering): Released all slaves [ 915.356988][ T1115] bond2 (unregistering): Released all slaves [ 915.375666][ T1115] bond3 (unregistering): Released all slaves [ 915.531888][ T1115] bond4 (unregistering): Released all slaves [ 915.724001][ T1115] bond5 (unregistering): (slave veth5): Releasing active interface [ 915.737488][ T1115] bond5 (unregistering): Released all slaves [ 915.890192][ T1115] bond6 (unregistering): Released all slaves [ 916.057027][ T1115] k›*·]‘: left promiscuous mode [ 916.115945][T15010] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 916.127899][T15010] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 916.136364][T15010] CPU: 0 UID: 0 PID: 15010 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 916.145923][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 916.155981][T15010] Workqueue: events l2cap_info_timeout [ 916.161450][T15010] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 916.167354][T15010] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 24 5a 09 cc 66 66 66 66 66 66 2e [ 916.186964][T15010] RSP: 0018:ffffc9000b0c77a8 EFLAGS: 00010202 [ 916.193033][T15010] RAX: dffffc0000000000 RBX: ffffffff895a54a8 RCX: 0487a631b8268400 [ 916.201097][T15010] RDX: 0000000000000000 RSI: ffffffff895a54a8 RDI: 000000000000004c [ 916.209074][T15010] RBP: ffffffff8a83ec05 R08: 0000000000000001 R09: 0000000000000000 [ 916.217066][T15010] R10: dffffc0000000000 R11: ffffffff8a83ebc0 R12: 0000000000000000 [ 916.225039][T15010] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 916.233010][T15010] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 916.241957][T15010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.248550][T15010] CR2: 00007ff3a1005000 CR3: 000000002233e000 CR4: 00000000003526f0 [ 916.256545][T15010] Call Trace: [ 916.259840][T15010] [ 916.263214][T15010] __kasan_check_byte+0x12/0x40 [ 916.268083][T15010] lock_acquire+0x8d/0x360 [ 916.272507][T15010] ? lockdep_hardirqs_on+0x9c/0x150 [ 916.277713][T15010] ? __cancel_work+0x254/0x2e0 [ 916.282481][T15010] lock_sock_nested+0x48/0x100 [ 916.287340][T15010] ? l2cap_sock_ready_cb+0x45/0x140 [ 916.292629][T15010] l2cap_sock_ready_cb+0x45/0x140 [ 916.297674][T15010] l2cap_conn_start+0x76d/0xe50 [ 916.302527][T15010] ? __pfx_l2cap_conn_start+0x10/0x10 [ 916.307912][T15010] ? __lock_acquire+0xab9/0xd20 [ 916.312785][T15010] ? __pfx___mutex_lock+0x10/0x10 [ 916.317828][T15010] ? process_scheduled_works+0x9ef/0x17b0 [ 916.323558][T15010] l2cap_info_timeout+0x68/0xa0 [ 916.328436][T15010] ? process_scheduled_works+0x9ef/0x17b0 [ 916.334186][T15010] process_scheduled_works+0xae1/0x17b0 [ 916.339765][T15010] ? __pfx_process_scheduled_works+0x10/0x10 [ 916.345752][T15010] worker_thread+0x8a0/0xda0 [ 916.350362][T15010] kthread+0x70e/0x8a0 [ 916.354529][T15010] ? __pfx_worker_thread+0x10/0x10 [ 916.359647][T15010] ? __pfx_kthread+0x10/0x10 [ 916.364504][T15010] ? _raw_spin_unlock_irq+0x23/0x50 [ 916.369708][T15010] ? lockdep_hardirqs_on+0x9c/0x150 [ 916.374903][T15010] ? __pfx_kthread+0x10/0x10 [ 916.379498][T15010] ret_from_fork+0x3f9/0x770 [ 916.384107][T15010] ? __pfx_ret_from_fork+0x10/0x10 [ 916.389221][T15010] ? __switch_to_asm+0x39/0x70 [ 916.394167][T15010] ? __switch_to_asm+0x33/0x70 [ 916.398934][T15010] ? __pfx_kthread+0x10/0x10 [ 916.403612][T15010] ret_from_fork_asm+0x1a/0x30 [ 916.408387][T15010] [ 916.411403][T15010] Modules linked in: [ 916.416554][T15010] ---[ end trace 0000000000000000 ]--- [ 916.435022][T15010] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 916.445733][T15010] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 24 5a 09 cc 66 66 66 66 66 66 2e [ 916.448674][ T51] Bluetooth: hci3: command tx timeout [ 916.488448][T15010] RSP: 0018:ffffc9000b0c77a8 EFLAGS: 00010202 [ 916.495218][T15010] RAX: dffffc0000000000 RBX: ffffffff895a54a8 RCX: 0487a631b8268400 [ 916.503571][T15010] RDX: 0000000000000000 RSI: ffffffff895a54a8 RDI: 000000000000004c [ 916.512652][ T1115] tipc: Disabling bearer [ 916.539774][T27693] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6416'. [ 916.544825][ T1115] tipc: Disabling bearer [ 916.562959][ T1115] tipc: Left network mode [ 916.570241][T15010] RBP: ffffffff8a83ec05 R08: 0000000000000001 R09: 0000000000000000 [ 916.579265][T15010] R10: dffffc0000000000 R11: ffffffff8a83ebc0 R12: 0000000000000000 [ 916.589692][T15010] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 916.619472][T15010] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 916.629774][T15010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 916.637446][T15010] CR2: 000055555b0245c8 CR3: 0000000048644000 CR4: 00000000003526f0 [ 916.647408][T15010] Kernel panic - not syncing: Fatal exception [ 916.653872][T15010] Kernel Offset: disabled [ 916.658377][T15010] Rebooting in 86400 seconds..