last executing test programs: 1m51.823205895s ago: executing program 3 (id=2771): r0 = epoll_create1(0x80000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{}, 0x9, 0x8, 0x5}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x3) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010042ffffffff000000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000"], 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2200, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000c80)={'veth0_macvtap\x00', 0x2}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYRES32=r3, @ANYRES32, @ANYBLOB="30000e0080000000ffffffffffff08021100000008"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x0, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m50.08423475s ago: executing program 2 (id=2778): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1m50.052660471s ago: executing program 2 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000087"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000440)=""/53}, 0x20) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @initdev}}) unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) pipe(&(0x7f0000000200)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r7], 0x38}}, 0x50) 1m49.174592357s ago: executing program 3 (id=2782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040008000000000001e8389e4e", @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x500, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) 1m48.915430492s ago: executing program 3 (id=2786): socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, {0x1, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0x9aa7, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xfffffffc, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x3, 0x3, 0x5, 0x3, 0x40, 0x8}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x5, &(0x7f00000001c0)=""/5, 0x40f00, 0x40, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000240)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x0, 0x2, 0x9}, {0x1, 0x4, 0x1, 0x4}], 0x10, 0xc9}, 0x94) recvmmsg(r3, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 1m46.745524352s ago: executing program 0 (id=2794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000810) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800800050001000000050025000100", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x6}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) socket$inet6(0xa, 0x3, 0x3c) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r10}, 0x18) sendmmsg(r8, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 1m45.736278995s ago: executing program 0 (id=2797): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000000c00000008000000000000070000000000000000000000090300000008000000000000"], 0x0, 0x48}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) unshare(0x4000400) socket$packet(0x11, 0xa, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 1m45.455593248s ago: executing program 2 (id=2799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="18000000100a010125bd05000000df250700000525100000"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x44) r1 = socket(0x1f, 0x3, 0x9) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="99742dbd6600fbdbdf2515000000140001800d3d9492472d062384def7e78ff9792302000001007154569c5cb0130001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) connect$pptp(r4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) unshare(0x42010200) socket$rxrpc(0x21, 0x2, 0x2) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, 0x0) 1m45.401000681s ago: executing program 0 (id=2800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "182b71", 0x5, 0xff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00'], 0x1c}}, 0x8040040) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000300)) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x7, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000280)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="793f0100000000000800dd6d5a6a48567d61fdffffff00000000"], 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES64=r3, @ANYRESHEX=r7, @ANYBLOB='\x00'/11, @ANYRESOCT, @ANYRES32=r3, @ANYRES64], 0x20) 1m44.824253656s ago: executing program 2 (id=2802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/81, 0x51}], 0x1}, 0x0) close(r1) 1m44.589424285s ago: executing program 2 (id=2803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x7, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0xe81, 0x0, 0x1}, 0x0, 0x0) unshare(0x10000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) 1m44.552036076s ago: executing program 3 (id=2804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r4, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="b26e", 0x2}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x4445) recvmsg$unix(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001080)=""/49, 0x31}], 0x1}, 0x4000a043) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m44.0140986s ago: executing program 0 (id=2807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4) (fail_nth: 1) 1m43.574039118s ago: executing program 0 (id=2808): r0 = socket(0x2b, 0x80801, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525787cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000010000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6ad4c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dc938db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c98000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000085fde"]) unshare(0x26020480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2}, 0x48) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x32, 0xffffffffffffffff, 0x2000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006c00), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006c40)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x84) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x491c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9367768}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x531183d7d189be87}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe95a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x44005}, 0x80f4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000002e00010026bdf000fbdbdf2504000200"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040051) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x8) r7 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r7, &(0x7f00000016c0)="b3", 0x1, 0x4000, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x10) 1m43.572890184s ago: executing program 2 (id=2809): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x7, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x6, 0x3}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000300)={0x0, @aes256, 0x0, @desc3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="600000000201050000000000000000000a00000a06001240000100004400018006000340000300007f8bf40c000280210000002c000180140003000000008f6a00000000000000ffffa81414401400040000000000000006000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x200400c4}, 0x44014) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000380), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1, &(0x7f00000007c0)=@raw=[@exit], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 1m43.486088292s ago: executing program 0 (id=2810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x18) sendfile(r2, r3, 0x0, 0xffffffff000) shutdown(r2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000740)={r7, 0x10, "7ed88ba116ef41dc237063d02c6a144b"}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0x8001}, 0x8) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m43.38649795s ago: executing program 3 (id=2811): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@bridge_getlink={0x1d8, 0x12, 0x400, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x45, 0x14e0}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_CARRIER={0x5, 0x21, 0xe6}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3ff}, @IFLA_LINK={0x8}, @IFLA_VFINFO_LIST={0x158, 0x16, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x424d, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0xd199, 0x8ed, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000001, 0xb}}, @IFLA_VF_RATE={0x10, 0x6, {0xd7, 0xffff, 0xfffff000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xd8, 0x1}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2ff8, 0x6, 0x5}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xe5d, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x2, 0x7fffffff}}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffffff7f, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x100000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x1ff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @multicast}}]}]}, @IFLA_EVENT={0x8}]}, 0x1d8}}, 0xc010) 1m43.0502817s ago: executing program 3 (id=2812): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x18) sendfile(r2, r3, 0x0, 0xffffffff000) shutdown(r2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000740)={r7, 0x10, "7ed88ba116ef41dc237063d02c6a144b"}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0x8001}, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ffbcf497", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000fc0)}], 0x1}}], 0x2, 0x40408e0) 1m28.448572859s ago: executing program 32 (id=2810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x18) sendfile(r2, r3, 0x0, 0xffffffff000) shutdown(r2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000740)={r7, 0x10, "7ed88ba116ef41dc237063d02c6a144b"}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0x8001}, 0x8) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m28.374366238s ago: executing program 33 (id=2809): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x7, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x6, 0x3}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000300)={0x0, @aes256, 0x0, @desc3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="600000000201050000000000000000000a00000a06001240000100004400018006000340000300007f8bf40c000280210000002c000180140003000000008f6a00000000000000ffffa81414401400040000000000000006000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x200400c4}, 0x44014) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000380), &(0x7f0000000440)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1, &(0x7f00000007c0)=@raw=[@exit], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 1m27.943591223s ago: executing program 34 (id=2812): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x18) sendfile(r2, r3, 0x0, 0xffffffff000) shutdown(r2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000740)={r7, 0x10, "7ed88ba116ef41dc237063d02c6a144b"}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0x8001}, 0x8) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ffbcf497", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000fc0)}], 0x1}}], 0x2, 0x40408e0) 3.67834312s ago: executing program 7 (id=3435): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0xe900) close(r9) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r10, 0x0, 0x2b) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r13], 0x20}, 0x1, 0x0, 0x0, 0x48880}, 0x40018) 3.51088868s ago: executing program 1 (id=3437): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x3, &(0x7f0000000040)="040015", 0x9, 0x1, 0x16c2, 0x5505, 0xf, 0x2, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socketpair(0x1f, 0x800, 0xe4a4, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xc}}}, 0x108) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111630000002544dbfa4092df440f1c83b86ef9c16100b00000000000000001850000001f00000095000000000000009500a5050000000039846c6d8db415d8e7016be707aa7c8b89a65ffa9f3b3c5c3c84ee238ee552b7feff197e8d2e301cb44057d3e9"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', r8, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r7, 0xfff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r7, @in={{0x2, 0x4e23, @loopback}}, [0x8, 0x1, 0xe, 0x1, 0x9, 0x2, 0x3712, 0x81, 0x2, 0x4, 0xc, 0x70, 0x1, 0x7fa5, 0x8]}, &(0x7f0000000200)=0x100) 3.285396116s ago: executing program 4 (id=3439): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="30b3d3001800356a28bd7000000000000a800000ff0300061a0001cba746d25ff3e90bcf1e4ffed8c0a00014000100fe88002964d8cd472212af00000001013483db44b6f53a96375beeacf249eaf45f697d06492189da3b9a4066bb"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.143981604s ago: executing program 1 (id=3441): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write(0xffffffffffffffff, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x9, 0x2, 0x0, 0x0, @empty=0xac1414aa, @dev={0xac, 0x14, 0x14, 0x22}}}}}}}, 0x0) 2.88699552s ago: executing program 4 (id=3443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000810) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800800050001000000050025000100", @ANYRES32=r3, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local, 0x6}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) socket$inet6(0xa, 0x3, 0x3c) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r9}, 0x18) sendmmsg(r7, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) 2.688868183s ago: executing program 7 (id=3444): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x33}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x1503, 0x120d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) close(r1) socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) read(r1, &(0x7f0000000000)=""/31, 0x1f) 2.614605208s ago: executing program 6 (id=3445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2056, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) 2.529025472s ago: executing program 6 (id=3447): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8937, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000480}, 0x80) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2.226641712s ago: executing program 1 (id=3449): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x27, 0xa, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket(0x2b, 0x1, 0x1) getsockopt$inet_int(r5, 0x0, 0x17, 0x0, &(0x7f0000000440)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x20000010304}, 0xa, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$NFC_CMD_DEV_UP(r6, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x8040085) 1.978489618s ago: executing program 4 (id=3450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1", 0x12}], 0x1}, 0x20000800) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 1.840740522s ago: executing program 5 (id=3452): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r9, r8, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r10) r11 = accept4$tipc(r4, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x800) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r12}, @ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x50}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) getpeername$tipc(r11, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000200020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.770657916s ago: executing program 7 (id=3453): r0 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x0, 0x40}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x10d0}}, 0x240484c0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x10d0}}, 0x240484c0) 1.665278766s ago: executing program 7 (id=3454): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0xe900) close(r9) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r10, 0x0, 0x2b) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r13], 0x20}, 0x1, 0x0, 0x0, 0x48880}, 0x40018) 1.622915742s ago: executing program 6 (id=3455): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="3811000043000701fefffffffcdbdf25027c000504004580201101"], 0x1138}}, 0xc000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x9, 0xfff1}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x0, 0x8, 0x1, 0xc23e, {{0x8, 0x4, 0x1, 0x5, 0x20, 0x65, 0x0, 0x7a, 0x4, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x9, 0x2, [{0x1, 0x3, '~'}]}]}}}}}) sendto$packet(r0, &(0x7f0000000400)="0890c6ed35b134766c539d0af0511a07bb9ee0d08558969167d2e4bcb7a112", 0x1f, 0x4801, &(0x7f00000004c0)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.548904905s ago: executing program 4 (id=3456): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$netlink(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)=[{&(0x7f00000001c0)={0xb8, 0x1d, 0x800, 0x70bd26, 0x25dfdbff, "", [@nested={0xa6, 0x18, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x17}, @generic="49858bc24da8c61f52641f144734699c4c5841f42e92ed72b753aec1e72283d5b10311219400e18742fe28763640f95577442178e6f0f916a8e4cbebcb22443060a90cde0392da7a578acca772e8fbb131d00962a2c8e649b7e3612c4bd1d9910d3eec8f754556d4ab8f868e3ce4a07d0819d515ee2f1dbaa73eafb9652d628ec2cec7c15b13486ef40160390c07"]}]}, 0xb8}], 0x1, 0x0, 0x0, 0x4014}, 0x4004000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000300)={0x1, 0x3}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r3, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000500)=0x84) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/191, 0xbf}, {&(0x7f0000000700)=""/9, 0x9}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/19, 0x13}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001a40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x2) epoll_wait(r1, &(0x7f0000001b80)=[{}, {}], 0x2, 0x6) getpeername$llc(r13, &(0x7f0000001bc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001c00)=0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000001c40)={'wg1\x00'}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, &(0x7f0000001c80)={r4, 0x50, "4d2f9d6fbb2a658df8035abb8174cbfe1cd4b1f1a8be56837db8732f6979be50b082a1711320c627c45997b0252e9c487deae891cc20030e27978e910181f7bc050263d8ae84858705d96433ceb92fdc"}, &(0x7f0000001d00)=0x58) setsockopt$inet6_tcp_TLS_RX(r15, 0x11a, 0x2, &(0x7f0000001d40)=@ccm_128={{0x304}, "61756180216f1116", "62b221011eeeaba02dae1c42cfc3c9fa", "e18533f5", "a1abb7ec21dc759d"}, 0x28) tee(r5, r10, 0x1, 0x2) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000001d80), 0x4) r16 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r16, 0x0, &(0x7f0000001dc0), 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000002200)={r17, 0x2, 0x1, [0xffff, 0x2, 0x2, 0x7fff, 0x6], [0x9, 0x5, 0xd0a, 0xc, 0x2, 0x6, 0x101, 0xee7, 0xe, 0x7, 0xa, 0xfdb, 0x6, 0xb20000, 0xe, 0xfffffffffffffe88, 0x4, 0xab38, 0x1, 0x9, 0x10000, 0x3, 0x7, 0xffff, 0x8, 0x3, 0x2, 0xcd8, 0xa13, 0x5, 0x2, 0x7fff, 0x7fffffffffffffff, 0x3, 0x80000001, 0x1, 0x4f8a, 0x7fffffff, 0x5, 0x8, 0x1, 0x5045f8b0, 0xfffffffffffffff9, 0x101, 0x2, 0xfa, 0x9, 0x0, 0x3, 0x0, 0x0, 0x9, 0x8, 0x8, 0x4, 0x7, 0x40, 0x2d, 0x9, 0x1, 0x8000, 0x4, 0x4, 0x81, 0x9, 0x63ed, 0x79d, 0x1, 0x7, 0x5, 0xd98, 0xffffffffffffff22, 0x0, 0xf, 0x80000000, 0x481, 0xf1, 0xffffffff, 0x7ff, 0x8000, 0x7, 0xff00000000000000, 0xf43, 0x1, 0x7, 0x6, 0xfffffffffffffffc, 0x8, 0x0, 0xfffffffffffffffb, 0xc0d, 0x8001, 0x2a, 0xffffffffd8a4ae72, 0x8, 0x2f5, 0x3, 0xffff, 0x10000, 0x2, 0x6, 0xf, 0x6, 0x5, 0xfffffffffffffff9, 0x8001, 0x2, 0x1, 0x4, 0x6, 0x4, 0x2, 0x9, 0x0, 0x8, 0x1000, 0x9, 0x9, 0x9, 0x6, 0x2]}) ioctl$SIOCRSACCEPT(r7, 0x89e3) syz_genetlink_get_family_id$ipvs(&(0x7f0000002640), r15) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000002680)) sendfile(r9, r14, &(0x7f00000026c0)=0x5, 0x10) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r18, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r19, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x810) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000002840), &(0x7f0000002880)=0x30) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f00000028c0)) socket$nl_generic(0x10, 0x3, 0x10) accept4(r11, &(0x7f0000002900)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000002980)=0x80, 0x800) 1.335286554s ago: executing program 6 (id=3457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2056, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) 1.325521295s ago: executing program 5 (id=3458): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'macvtap0\x00', 0x200}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) unshare(0x20000400) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) 1.290837533s ago: executing program 4 (id=3459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) socket(0x2c, 0x4, 0x0) bind$bt_hci(r1, &(0x7f00000010c0)={0x1f, 0x1, 0x3}, 0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="440000001000d7cd0584076c8b91ff212bbd7000fbdbdf0400000000f74091e41919e43f72a2f4ceb12504bebac1b7cc5c411dbaa8034c24bbbb082d1df7c57c1770", @ANYRES32=0x0, @ANYBLOB="fda65f0571000000140012800c0001006d6163767461700004000280050027000400000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040050}, 0x2000c000) connect$802154_dgram(r1, &(0x7f0000001180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) accept$alg(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000101000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 1.267981284s ago: executing program 1 (id=3460): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@loopback, @private=0xa010100, @loopback}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000080)={'lo\x00', @ifru_settings={0x9, 0x7, @raw_hdlc=&(0x7f0000000040)={0x0, 0xd0}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b1000000070000000000000099f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000003c0)=@req3={0x3, 0x8, 0x9, 0x7, 0x8, 0x73, 0x8}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000380)=@req3={0x4, 0xb4, 0x0, 0x4, 0x5, 0x2, 0xd}, 0x1c) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1}, 0x20003ff1}], 0x1, 0x0, 0x0) close(r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r3}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="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"], 0x6118}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.174041308s ago: executing program 5 (id=3461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000008c"], 0x38}}, 0x0) 1.160102888s ago: executing program 6 (id=3462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{r2}], 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0x18, 0x0, &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000ac46da6b41bc78a03afe2fc2b9b98270ae77d3ba6bb28e8b45359e93ab8ac971c017a1e650a6c559d53cd86f7527af6e087f16ad571310ae3b907365e4c126c30d5839a030b2852c80ac2d3815", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1010, r1, 0x6a20d000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) 1.016413182s ago: executing program 5 (id=3463): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x33}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x1503, 0x120d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) close(r1) socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) read(r1, &(0x7f0000000000)=""/31, 0x1f) 1.015697449s ago: executing program 4 (id=3464): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80102, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080), &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1f, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6c, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x226, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x3}, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 700.545819ms ago: executing program 7 (id=3465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 590.51762ms ago: executing program 7 (id=3466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1", 0x12}], 0x1}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 240.034461ms ago: executing program 1 (id=3467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000300000000000000eeffffff8500000030000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x71}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e8, 0xffffff7a, 0xffffffff, 0x1e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x100, 0xa2c9]}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb0, 0x6}}}, {{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x2, 0x1, 0x5, 0x4, 0x6], 0x0, 0x1}}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)="20df682451b2abffeffe2702dbcd10793fe4d16ca3b9132654eed1bc8dbfaa9c9c6a2bec429379e259d1a965aa575e84273330a2a7b571ac2dc15e54040e882005a5fb9c8a93101b76fcd59a8ae06fdc8b2dbe9f1a8732013c3e3a346837622dccea1188a034336636cfe26889226a4bc08c863e4ed9605a52afebd60a6b8ba59447c406eeec6672b6561059de64bdd66587b81579e2a40ce3b5dcd2b35d58db0708d03529a60d243bf157e0abdb42a65ea10f9b8cc9789cad9e95ab92b6f6f2d7de1db472f375833d", &(0x7f0000000100)=""/198}, 0x20) 155.714267ms ago: executing program 1 (id=3468): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2c, 0x6, 0xc, {0x1, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x44}, @multicast2, 0x4e21, 0x4e21, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 0x4bf, 0xc62, [0x101, 0x8cb8]}, @usr_ip6_spec={@local, @private2, 0x4b4, 0x31, 0x5}, {0x0, @local, 0x9, 0x9, [0x2, 0xc10]}, 0x4, 0x6}}}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003904000000000000000000173a83", @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac"], 0x38}}, 0x20000080) getpeername$packet(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x14) sendto$packet(r2, &(0x7f0000000180)="892c", 0x2, 0x40, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x9, 0x6, @broadcast}, 0x14) 146.984568ms ago: executing program 6 (id=3469): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x488d5}, 0x4010) 78.726378ms ago: executing program 5 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x60) 0s ago: executing program 5 (id=3471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x2c}}, 0x60) kernel console output (not intermixed with test programs): timeout [ 401.554893][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 401.791074][T15001] wg1 speed is unknown, defaulting to 1000 [ 401.862200][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'. [ 402.128216][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 402.354159][T15054] netlink: 'syz.2.2722': attribute type 4 has an invalid length. [ 402.448350][T13563] lo speed is unknown, defaulting to 1000 [ 402.461025][T15059] netlink: 'syz.2.2722': attribute type 4 has an invalid length. [ 402.483956][T13563] syz1: Port: 1 Link DOWN [ 402.506322][T13563] lo speed is unknown, defaulting to 1000 [ 402.531936][T13563] syz1: Port: 1 Link ACTIVE [ 403.074397][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 403.271748][T15053] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 403.293577][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 403.303290][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 403.403831][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 403.597694][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2737'. [ 403.606961][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2737'. [ 403.616132][T15102] netlink: 'syz.3.2737': attribute type 4 has an invalid length. [ 403.889223][T15109] netlink: 'syz.3.2741': attribute type 4 has an invalid length. [ 404.280951][T15126] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 404.370450][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 405.578193][T15165] wg1 speed is unknown, defaulting to 1000 [ 405.598377][T15165] lo speed is unknown, defaulting to 1000 [ 406.419878][T15172] netlink: 'syz.2.2760': attribute type 10 has an invalid length. [ 406.454948][T15165] wg1 speed is unknown, defaulting to 1000 [ 406.500077][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.510216][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.520895][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.534476][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.544975][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.758551][T15173] wg1 speed is unknown, defaulting to 1000 [ 406.778720][T15173] lo speed is unknown, defaulting to 1000 [ 406.921553][T15177] wg1 speed is unknown, defaulting to 1000 [ 406.948242][T15177] lo speed is unknown, defaulting to 1000 [ 407.206304][T15173] wg1 speed is unknown, defaulting to 1000 [ 407.502945][T15177] wg1 speed is unknown, defaulting to 1000 [ 407.823263][T15173] chnl_net:caif_netlink_parms(): no params data found [ 408.609655][ T5833] Bluetooth: hci5: command tx timeout [ 409.345149][ T5837] bond0: (slave syz_tun): Releasing backup interface [ 409.635437][T15187] wg1 speed is unknown, defaulting to 1000 [ 409.645357][T15173] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.682649][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.704278][T15173] bridge_slave_0: entered allmulticast mode [ 409.744032][T15173] bridge_slave_0: entered promiscuous mode [ 409.786575][T15187] lo speed is unknown, defaulting to 1000 [ 409.799784][T15173] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.825074][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.865594][T15173] bridge_slave_1: entered allmulticast mode [ 409.904880][T15173] bridge_slave_1: entered promiscuous mode [ 410.018125][T15209] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 410.101004][T15173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.135527][T15173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.262640][T15218] wg1 speed is unknown, defaulting to 1000 [ 410.284032][T15218] lo speed is unknown, defaulting to 1000 [ 410.289163][T15220] wg1 speed is unknown, defaulting to 1000 [ 410.354890][T15220] lo speed is unknown, defaulting to 1000 [ 410.383729][T15173] team0: Port device team_slave_0 added [ 410.396786][T15223] __nla_validate_parse: 13 callbacks suppressed [ 410.396806][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 410.404414][T15173] team0: Port device team_slave_1 added [ 410.485921][T15187] wg1 speed is unknown, defaulting to 1000 [ 410.616714][T15173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.624540][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.650870][T15173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.689339][ T5842] Bluetooth: hci5: command tx timeout [ 410.732039][T15173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.747285][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.783532][T15173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.034932][T15173] hsr_slave_0: entered promiscuous mode [ 411.042016][T15173] hsr_slave_1: entered promiscuous mode [ 411.069937][T15173] debugfs: 'hsr0' already exists in 'hsr' [ 411.075738][T15173] Cannot create hsr debugfs directory [ 411.359681][T15218] wg1 speed is unknown, defaulting to 1000 [ 411.432587][T15220] wg1 speed is unknown, defaulting to 1000 [ 412.049726][T15247] wg1 speed is unknown, defaulting to 1000 [ 412.142259][T15247] lo speed is unknown, defaulting to 1000 [ 412.542139][T15173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.572667][T15173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.598856][T15173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.616610][T15173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.770410][ T5842] Bluetooth: hci5: command tx timeout [ 412.866847][T15173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.898416][T15247] wg1 speed is unknown, defaulting to 1000 [ 413.025938][T15173] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.043804][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.051088][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.112124][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.119513][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.233782][T15271] wg1 speed is unknown, defaulting to 1000 [ 413.264453][T15271] lo speed is unknown, defaulting to 1000 [ 413.459818][ T8227] bridge_slave_1: left allmulticast mode [ 413.478245][ T8227] bridge_slave_1: left promiscuous mode [ 413.489952][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.585656][ T8227] bridge_slave_0: left allmulticast mode [ 413.599458][ T8227] bridge_slave_0: left promiscuous mode [ 413.607668][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.314147][T15287] FAULT_INJECTION: forcing a failure. [ 414.314147][T15287] name failslab, interval 1, probability 0, space 0, times 0 [ 414.327187][T15287] CPU: 0 UID: 0 PID: 15287 Comm: syz.1.2790 Not tainted syzkaller #0 PREEMPT(full) [ 414.327217][T15287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.327230][T15287] Call Trace: [ 414.327239][T15287] [ 414.327248][T15287] dump_stack_lvl+0x189/0x250 [ 414.327283][T15287] ? __pfx____ratelimit+0x10/0x10 [ 414.327308][T15287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.327337][T15287] ? __pfx__printk+0x10/0x10 [ 414.327363][T15287] ? __pfx___might_resched+0x10/0x10 [ 414.327387][T15287] ? fs_reclaim_acquire+0x7d/0x100 [ 414.327427][T15287] should_fail_ex+0x414/0x560 [ 414.327465][T15287] should_failslab+0xa8/0x100 [ 414.327489][T15287] __kmalloc_noprof+0xcb/0x7f0 [ 414.327518][T15287] ? bpf_test_init+0x9f/0x150 [ 414.327556][T15287] bpf_test_init+0x9f/0x150 [ 414.327592][T15287] bpf_prog_test_run_xdp+0x503/0x10e0 [ 414.327644][T15287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.327683][T15287] ? __fget_files+0x2a/0x420 [ 414.327710][T15287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.327745][T15287] bpf_prog_test_run+0x2c7/0x340 [ 414.327771][T15287] __sys_bpf+0x562/0x860 [ 414.327794][T15287] ? __pfx___sys_bpf+0x10/0x10 [ 414.327835][T15287] ? ksys_write+0x22a/0x250 [ 414.327869][T15287] ? __pfx_ksys_write+0x10/0x10 [ 414.327906][T15287] __x64_sys_bpf+0x7c/0x90 [ 414.327938][T15287] do_syscall_64+0xfa/0xfa0 [ 414.327963][T15287] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.327990][T15287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.328011][T15287] ? clear_bhb_loop+0x60/0xb0 [ 414.328038][T15287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.328059][T15287] RIP: 0033:0x7f5030b8efc9 [ 414.328079][T15287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.328099][T15287] RSP: 002b:00007f5031a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.328122][T15287] RAX: ffffffffffffffda RBX: 00007f5030de5fa0 RCX: 00007f5030b8efc9 [ 414.328139][T15287] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 414.328153][T15287] RBP: 00007f5031a97090 R08: 0000000000000000 R09: 0000000000000000 [ 414.328180][T15287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.328193][T15287] R13: 00007f5030de6038 R14: 00007f5030de5fa0 R15: 00007ffe1bba00a8 [ 414.328231][T15287] [ 414.768594][T15290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2791'. [ 414.849220][ T5842] Bluetooth: hci5: command tx timeout [ 415.009627][ T8227] bond1 (unregistering): (slave gre1): Releasing backup interface [ 415.059945][ T8227] dvmrp0 (unregistering): left allmulticast mode [ 415.148071][T15284] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 415.985994][ T8227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.996313][ T8227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.006787][ T8227] bond0 (unregistering): Released all slaves [ 416.050824][ T5842] Bluetooth: hci4: command 0x0401 tx timeout [ 416.124907][ T8227] bond1 (unregistering): Released all slaves [ 416.146322][T15271] wg1 speed is unknown, defaulting to 1000 [ 416.155615][T15301] veth0_to_bridge: entered promiscuous mode [ 416.191518][T15304] veth0_to_bridge: left promiscuous mode [ 416.310465][ T8227] tipc: Left network mode [ 416.538195][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 416.574882][T15173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.649208][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2799'. [ 417.347074][T15336] syzkaller1: entered promiscuous mode [ 417.362904][T15336] syzkaller1: entered allmulticast mode [ 417.599335][ T8227] hsr_slave_0: left promiscuous mode [ 417.721752][T15350] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 417.745640][T15350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2804'. [ 417.861072][T15328] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 418.027265][T15357] FAULT_INJECTION: forcing a failure. [ 418.027265][T15357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.045745][T15357] CPU: 0 UID: 0 PID: 15357 Comm: syz.0.2807 Not tainted syzkaller #0 PREEMPT(full) [ 418.045776][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.045789][T15357] Call Trace: [ 418.045797][T15357] [ 418.045805][T15357] dump_stack_lvl+0x189/0x250 [ 418.045840][T15357] ? __pfx____ratelimit+0x10/0x10 [ 418.045866][T15357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.045895][T15357] ? __pfx__printk+0x10/0x10 [ 418.045918][T15357] ? __might_fault+0xb0/0x130 [ 418.045962][T15357] should_fail_ex+0x414/0x560 [ 418.046000][T15357] _copy_from_user+0x2d/0xb0 [ 418.046030][T15357] do_tcp_setsockopt+0x47d/0x1f40 [ 418.046061][T15357] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 418.046081][T15357] ? aa_sk_perm+0x81e/0x950 [ 418.046117][T15357] ? __pfx_aa_sk_perm+0x10/0x10 [ 418.046148][T15357] ? aa_sock_opt_perm+0xff/0x1b0 [ 418.046181][T15357] ? sock_common_setsockopt+0x36/0xc0 [ 418.046209][T15357] ? tcp_setsockopt+0x3d/0xe0 [ 418.046228][T15357] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 418.046269][T15357] do_sock_setsockopt+0x17c/0x1b0 [ 418.046297][T15357] __x64_sys_setsockopt+0x13f/0x1b0 [ 418.046324][T15357] do_syscall_64+0xfa/0xfa0 [ 418.046350][T15357] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.046376][T15357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.046396][T15357] ? clear_bhb_loop+0x60/0xb0 [ 418.046421][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.046441][T15357] RIP: 0033:0x7f04bc78efc9 [ 418.046461][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.046480][T15357] RSP: 002b:00007f04bd6d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.046502][T15357] RAX: ffffffffffffffda RBX: 00007f04bc9e5fa0 RCX: 00007f04bc78efc9 [ 418.046519][T15357] RDX: 0000000000000005 RSI: 0000000000000006 RDI: 0000000000000003 [ 418.046531][T15357] RBP: 00007f04bd6d9090 R08: 0000000000000004 R09: 0000000000000000 [ 418.046544][T15357] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 418.046558][T15357] R13: 00007f04bc9e6038 R14: 00007f04bc9e5fa0 R15: 00007ffc47982db8 [ 418.046596][T15357] [ 418.149675][ T5842] Bluetooth: hci4: command 0x0401 tx timeout [ 418.560614][T15363] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2809'. [ 418.586573][T15363] netlink: 'syz.2.2809': attribute type 1 has an invalid length. [ 418.986840][ T8227] team0 (unregistering): Port device team_slave_1 removed [ 419.061616][ T8227] team0 (unregistering): Port device team_slave_0 removed [ 419.172983][ T8227] smc: removing net device veth0_to_bond with user defined pnetid SYZ0 [ 419.335617][ T8227] vxcan1 (unregistering): left allmulticast mode [ 419.553491][T15363] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 419.578365][T15173] veth0_vlan: entered promiscuous mode [ 419.603744][T15173] veth1_vlan: entered promiscuous mode [ 419.656007][T15173] veth0_macvtap: entered promiscuous mode [ 419.672991][T15173] veth1_macvtap: entered promiscuous mode [ 419.706955][T15173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.732126][T15173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.751706][ T257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.761956][ T257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.791158][ T1341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.808301][ T1341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.923347][T15381] syzkaller1: entered promiscuous mode [ 419.929160][T15381] syzkaller1: entered allmulticast mode [ 419.941877][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.956419][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.005019][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.013603][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.176846][T15388] netlink: 'syz.1.2815': attribute type 4 has an invalid length. [ 420.195542][T15389] netlink: 'syz.4.2816': attribute type 4 has an invalid length. [ 420.211046][T15389] netlink: 'syz.4.2816': attribute type 4 has an invalid length. [ 420.289086][ T5842] Bluetooth: hci4: command 0x0401 tx timeout [ 422.604630][T15421] syzkaller1: entered promiscuous mode [ 422.610429][T15421] syzkaller1: entered allmulticast mode [ 422.892048][T15429] syzkaller0: entered promiscuous mode [ 422.897567][T15429] syzkaller0: entered allmulticast mode [ 424.297432][T15439] netlink: 'syz.1.2834': attribute type 32 has an invalid length. [ 424.492331][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 426.707581][T15482] netlink: 'syz.1.2844': attribute type 4 has an invalid length. [ 426.731927][T15482] netlink: 'syz.1.2844': attribute type 4 has an invalid length. [ 426.800138][T15485] netlink: 'syz.4.2845': attribute type 4 has an invalid length. [ 427.567489][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2847'. [ 427.656486][T15493] lo speed is unknown, defaulting to 1000 [ 427.715095][T15495] netlink: 'syz.1.2848': attribute type 10 has an invalid length. [ 427.723205][T15495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2848'. [ 427.820489][T15493] wg1 speed is unknown, defaulting to 1000 [ 428.109548][T15504] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2852'. [ 428.118670][T15504] nbd: illegal input index 65508 [ 428.188054][T15507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2853'. [ 428.320005][T15511] netlink: 'syz.1.2854': attribute type 4 has an invalid length. [ 429.462283][T15548] lo speed is unknown, defaulting to 1000 [ 429.664629][T15548] wg1 speed is unknown, defaulting to 1000 [ 429.817647][T15557] syz.1.2859 uses old SIOCAX25GETINFO [ 430.572880][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.582904][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.604141][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.612310][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.620132][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.696353][T15571] lo speed is unknown, defaulting to 1000 [ 430.786642][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.827579][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.905090][T15571] wg1 speed is unknown, defaulting to 1000 [ 430.933998][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.944459][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.976368][T15577] tc_dump_action: action bad kind [ 431.029686][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.042815][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.147750][ T58] team0: Port device netdevsim0 removed [ 431.162191][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.176746][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.218017][T15582] syzkaller1: entered promiscuous mode [ 431.223625][T15582] syzkaller1: entered allmulticast mode [ 431.287589][T15571] chnl_net:caif_netlink_parms(): no params data found [ 431.408678][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.416317][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.423783][T15571] bridge_slave_0: entered allmulticast mode [ 431.432045][T15571] bridge_slave_0: entered promiscuous mode [ 431.444433][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.452686][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.460076][T15571] bridge_slave_1: entered allmulticast mode [ 431.467367][T15571] bridge_slave_1: entered promiscuous mode [ 431.509863][T15571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.525446][T15571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.567520][T15571] team0: Port device team_slave_0 added [ 431.575813][T15571] team0: Port device team_slave_1 added [ 431.608048][T15571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.615245][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.641507][T15571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.655001][T15571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.662046][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.693279][T15571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.757249][ T9] wg1 speed is unknown, defaulting to 1000 [ 431.766649][ T9] syz0: Port: 1 Link DOWN [ 431.767102][T15571] hsr_slave_0: entered promiscuous mode [ 431.777746][T15571] hsr_slave_1: entered promiscuous mode [ 431.784271][T15571] debugfs: 'hsr0' already exists in 'hsr' [ 431.790749][T15571] Cannot create hsr debugfs directory [ 432.427201][T15598] veth0: entered promiscuous mode [ 432.433668][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 432.699092][ T5833] Bluetooth: hci3: command tx timeout [ 433.994469][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 434.004117][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 434.012469][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 434.022039][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 434.029893][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.124612][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.138141][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.149015][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.159235][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.170378][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.171470][T15603] lo speed is unknown, defaulting to 1000 [ 434.254294][T15606] lo speed is unknown, defaulting to 1000 [ 434.319992][T15611] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2877'. [ 434.565009][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 434.574685][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 434.584718][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 434.592937][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 434.600896][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 434.619496][T15603] wg1 speed is unknown, defaulting to 1000 [ 434.769078][ T5833] Bluetooth: hci3: command tx timeout [ 434.873052][T15619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2880'. [ 435.014121][ T58] bond1 (unregistering): (slave gre2): Releasing backup interface [ 435.022038][ T58] gre2 (unregistering): left promiscuous mode [ 435.050924][ T58] dvmrp0 (unregistering): left allmulticast mode [ 435.706290][ T58] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 435.715173][ T58] bond0 (unregistering): Released all slaves [ 435.814485][ T58] bond1 (unregistering): Released all slaves [ 435.829691][ T58] bond2 (unregistering): Released all slaves [ 435.866221][T15619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2880'. [ 435.876379][T15619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2880'. [ 435.892431][T15606] wg1 speed is unknown, defaulting to 1000 [ 435.918831][ T58] tipc: Disabling bearer [ 435.939883][ T58] tipc: Left network mode [ 436.007307][T15614] lo speed is unknown, defaulting to 1000 [ 436.130740][ T5833] Bluetooth: hci0: command tx timeout [ 436.219543][ T5833] Bluetooth: hci6: command tx timeout [ 436.383015][T15614] wg1 speed is unknown, defaulting to 1000 [ 436.651734][ T58] hsr_slave_0: left promiscuous mode [ 436.662961][ T58] veth0_macvtap: left promiscuous mode [ 436.668786][ T58] veth1_vlan: left promiscuous mode [ 436.674650][ T58] veth0_vlan: left promiscuous mode [ 436.689378][ T5833] Bluetooth: hci7: command tx timeout [ 436.849819][ T5833] Bluetooth: hci3: command tx timeout [ 437.140379][ T257] smc: removing ib device !yz! [ 437.410742][ T58] team0 (unregistering): Port device dummy0 removed [ 437.664352][T15606] chnl_net:caif_netlink_parms(): no params data found [ 437.745110][T15631] lo speed is unknown, defaulting to 1000 [ 437.867290][T15603] chnl_net:caif_netlink_parms(): no params data found [ 438.065188][T15571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.209154][ T5833] Bluetooth: hci0: command tx timeout [ 438.265341][T15571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.278131][T15571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.291590][ T5833] Bluetooth: hci6: command tx timeout [ 438.329427][T15571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.699541][T15606] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.706798][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.715667][T15606] bridge_slave_0: entered allmulticast mode [ 438.728834][T15606] bridge_slave_0: entered promiscuous mode [ 438.769327][ T5833] Bluetooth: hci7: command tx timeout [ 438.917482][T15606] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.926614][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.934113][T15606] bridge_slave_1: entered allmulticast mode [ 438.939842][ T5833] Bluetooth: hci3: command tx timeout [ 438.952433][T15606] bridge_slave_1: entered promiscuous mode [ 439.039153][T15603] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.046816][T15603] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.055550][T15603] bridge_slave_0: entered allmulticast mode [ 439.086092][T15603] bridge_slave_0: entered promiscuous mode [ 439.101728][T15603] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.109157][T15603] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.116463][T15603] bridge_slave_1: entered allmulticast mode [ 439.141400][T15603] bridge_slave_1: entered promiscuous mode [ 439.401433][T15606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.414302][T15606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.438303][T15614] chnl_net:caif_netlink_parms(): no params data found [ 439.456566][T15603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.470880][T15603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.530321][T15606] team0: Port device team_slave_0 added [ 439.568682][T15603] team0: Port device team_slave_0 added [ 439.576723][T15606] team0: Port device team_slave_1 added [ 439.605281][T15603] team0: Port device team_slave_1 added [ 439.639933][T15606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.646954][T15606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.674025][T15606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.723469][T15603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.731050][T15603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.758005][T15603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.770436][T15606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.778409][T15606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.805023][T15606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.838114][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.845544][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.853253][T15614] bridge_slave_0: entered allmulticast mode [ 439.861498][T15614] bridge_slave_0: entered promiscuous mode [ 439.870599][T15603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.877721][T15603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.904731][T15603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.953374][ T58] IPVS: stop unused estimator thread 0... [ 439.988578][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.996579][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.004800][T15614] bridge_slave_1: entered allmulticast mode [ 440.017846][T15614] bridge_slave_1: entered promiscuous mode [ 440.083752][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.098120][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.127737][T15606] hsr_slave_0: entered promiscuous mode [ 440.143308][T15606] hsr_slave_1: entered promiscuous mode [ 440.150617][T15606] debugfs: 'hsr0' already exists in 'hsr' [ 440.156412][T15606] Cannot create hsr debugfs directory [ 440.231252][T15614] team0: Port device team_slave_0 added [ 440.261536][T15603] hsr_slave_0: entered promiscuous mode [ 440.268427][T15603] hsr_slave_1: entered promiscuous mode [ 440.275645][T15603] debugfs: 'hsr0' already exists in 'hsr' [ 440.281590][T15603] Cannot create hsr debugfs directory [ 440.289470][ T5833] Bluetooth: hci0: command tx timeout [ 440.291545][T15614] team0: Port device team_slave_1 added [ 440.362676][T15655] lo speed is unknown, defaulting to 1000 [ 440.381475][ T5833] Bluetooth: hci6: command tx timeout [ 440.440097][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.447196][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.473624][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.519928][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.526945][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.553185][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.735955][T15614] hsr_slave_0: entered promiscuous mode [ 440.743343][T15614] hsr_slave_1: entered promiscuous mode [ 440.750442][T15614] debugfs: 'hsr0' already exists in 'hsr' [ 440.756291][T15614] Cannot create hsr debugfs directory [ 440.807067][T15660] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2884'. [ 440.824404][T15571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.852142][ T5833] Bluetooth: hci7: command tx timeout [ 441.150206][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.226198][T15606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 441.238158][T15606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.264397][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.271606][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.281969][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.289172][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.300657][T15606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.314054][T15606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 441.402485][T15603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 441.417674][T15603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 441.440353][T15603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.470013][T15603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.559916][T15614] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.578656][T15614] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 441.597364][T15614] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 441.621660][T15614] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 441.783929][T15606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.853359][T15606] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.910680][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.917888][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.947857][T15571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.971759][T15603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.988785][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.996032][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.017869][T15663] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 442.073588][T15603] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.093910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.101201][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.141971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.149225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.190117][T15689] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 442.234847][T15571] veth0_vlan: entered promiscuous mode [ 442.265491][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.306161][T15571] veth1_vlan: entered promiscuous mode [ 442.348384][T15614] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.369557][ T5833] Bluetooth: hci0: command tx timeout [ 442.392142][T15694] netlink: 'syz.4.2887': attribute type 4 has an invalid length. [ 442.408717][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.416053][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.438812][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.446059][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.461169][T15697] netlink: 'syz.4.2887': attribute type 4 has an invalid length. [ 442.464580][ T5833] Bluetooth: hci6: command tx timeout [ 442.545707][T15571] veth0_macvtap: entered promiscuous mode [ 442.573461][T15571] veth1_macvtap: entered promiscuous mode [ 442.655355][T15571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.694845][T15571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.728559][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.748587][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.772907][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.783829][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.846522][T15603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.896123][T15606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.930651][ T5833] Bluetooth: hci7: command tx timeout [ 442.993887][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.009800][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 443.020207][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.110262][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.129460][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.137995][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.477147][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2863'. [ 443.519073][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2863'. [ 443.541841][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2863'. [ 443.588006][T15720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2863'. [ 443.756936][T15730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2889'. [ 443.773259][T15603] veth0_vlan: entered promiscuous mode [ 443.779270][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2889'. [ 443.788274][T15730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2889'. [ 443.816761][T15603] veth1_vlan: entered promiscuous mode [ 443.832411][T15730] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2889'. [ 443.848729][T15606] veth0_vlan: entered promiscuous mode [ 443.925510][T15606] veth1_vlan: entered promiscuous mode [ 444.010598][T15603] veth0_macvtap: entered promiscuous mode [ 444.046728][T15603] veth1_macvtap: entered promiscuous mode [ 444.069979][T15614] veth0_vlan: entered promiscuous mode [ 444.153668][T15742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2891'. [ 444.202817][T15606] veth0_macvtap: entered promiscuous mode [ 444.222066][T15606] veth1_macvtap: entered promiscuous mode [ 444.538493][T15614] veth1_vlan: entered promiscuous mode [ 444.580846][T15603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.593724][T15606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.632453][T15603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.663423][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.676899][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.882984][T15606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.919911][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.072947][T15614] veth0_macvtap: entered promiscuous mode [ 445.155674][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.164632][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.295989][T15614] veth1_macvtap: entered promiscuous mode [ 445.311552][ T8229] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.344881][ T8229] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.385734][ T8229] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.400158][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.412559][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.420737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.438692][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.473113][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.504033][ T8229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.522912][ T8229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.568848][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.573530][ T8229] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.593542][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.601882][ T8229] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.644065][ T8229] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.670575][ T8229] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.688351][ T8229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.723658][ T8229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.863180][ T8227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.887288][ T8227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.005906][ T8229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.036350][ T8229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.051514][T15754] netlink: 'syz.6.2874': attribute type 4 has an invalid length. [ 446.083032][T15756] netlink: 'syz.1.2894': attribute type 4 has an invalid length. [ 446.091252][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 446.104881][T15756] netlink: 'syz.1.2894': attribute type 4 has an invalid length. [ 446.107284][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2895'. [ 446.168962][ T8229] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.177886][ T8229] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.213799][ T8229] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.223420][ T8229] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.366461][T15760] lo speed is unknown, defaulting to 1000 [ 447.164551][T15774] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2899'. [ 447.187017][T15774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2899'. [ 447.197148][T15774] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2899'. [ 447.326043][T15775] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.390243][T15777] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2901'. [ 447.400401][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2901'. [ 447.416530][T15777] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2901'. [ 447.427008][T15777] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2901'. [ 447.494666][T15775] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.671074][T15775] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.726332][ T9] IPVS: starting estimator thread 0... [ 447.801740][T15775] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.819631][T15793] IPVS: using max 25 ests per chain, 60000 per kthread [ 447.850599][T15786] netlink: 'syz.5.2903': attribute type 4 has an invalid length. [ 448.009821][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.053396][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.096798][ T257] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.123462][ T257] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.160489][T15797] lo speed is unknown, defaulting to 1000 [ 448.532786][T15813] netlink: 'syz.6.2910': attribute type 4 has an invalid length. [ 448.677568][T15822] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2911'. [ 448.937222][T15829] FAULT_INJECTION: forcing a failure. [ 448.937222][T15829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.963459][T15829] CPU: 0 UID: 0 PID: 15829 Comm: syz.5.2916 Not tainted syzkaller #0 PREEMPT(full) [ 448.963488][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.963504][T15829] Call Trace: [ 448.963512][T15829] [ 448.963525][T15829] dump_stack_lvl+0x189/0x250 [ 448.963555][T15829] ? __pfx____ratelimit+0x10/0x10 [ 448.963577][T15829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.963621][T15829] ? __pfx__printk+0x10/0x10 [ 448.963641][T15829] ? __might_fault+0xb0/0x130 [ 448.963678][T15829] should_fail_ex+0x414/0x560 [ 448.963712][T15829] _copy_from_iter+0x1de/0x1790 [ 448.963737][T15829] ? rcu_is_watching+0x15/0xb0 [ 448.963766][T15829] ? kmalloc_reserve+0xbd/0x290 [ 448.963793][T15829] ? __pfx__copy_from_iter+0x10/0x10 [ 448.963813][T15829] ? __build_skb_around+0x262/0x3f0 [ 448.963848][T15829] ? netlink_sendmsg+0x642/0xb30 [ 448.963864][T15829] ? skb_put+0x11b/0x210 [ 448.963895][T15829] netlink_sendmsg+0x6b2/0xb30 [ 448.963920][T15829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.963939][T15829] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.963967][T15829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.963984][T15829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.964001][T15829] __sock_sendmsg+0x21c/0x270 [ 448.964028][T15829] ____sys_sendmsg+0x505/0x830 [ 448.964052][T15829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.964078][T15829] ? import_iovec+0x74/0xa0 [ 448.964106][T15829] ___sys_sendmsg+0x21f/0x2a0 [ 448.964127][T15829] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.964183][T15829] ? __fget_files+0x2a/0x420 [ 448.964199][T15829] ? __fget_files+0x3a0/0x420 [ 448.964226][T15829] __x64_sys_sendmsg+0x19b/0x260 [ 448.964247][T15829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.964282][T15829] ? __pfx_ksys_write+0x10/0x10 [ 448.964313][T15829] ? do_syscall_64+0xbe/0xfa0 [ 448.964340][T15829] do_syscall_64+0xfa/0xfa0 [ 448.964361][T15829] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.964386][T15829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.964408][T15829] ? clear_bhb_loop+0x60/0xb0 [ 448.964434][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.964465][T15829] RIP: 0033:0x7f33b6f8efc9 [ 448.964486][T15829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.964507][T15829] RSP: 002b:00007f33b7d53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.964530][T15829] RAX: ffffffffffffffda RBX: 00007f33b71e5fa0 RCX: 00007f33b6f8efc9 [ 448.964546][T15829] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 448.964561][T15829] RBP: 00007f33b7d53090 R08: 0000000000000000 R09: 0000000000000000 [ 448.964574][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.964586][T15829] R13: 00007f33b71e6038 R14: 00007f33b71e5fa0 R15: 00007ffe944770d8 [ 448.964623][T15829] [ 449.278462][T15825] syzkaller0: entered promiscuous mode [ 449.293537][T15825] syzkaller0: entered allmulticast mode [ 450.065456][T15856] netlink: 'syz.7.2912': attribute type 3 has an invalid length. [ 451.504941][T15846] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 452.123744][T15883] netlink: 'syz.1.2928': attribute type 29 has an invalid length. [ 452.154295][T15882] __nla_validate_parse: 11 callbacks suppressed [ 452.154316][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2926'. [ 452.185754][T15883] netlink: 'syz.1.2928': attribute type 29 has an invalid length. [ 452.241399][T15882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.242678][T15883] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2928'. [ 452.248853][T15882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.276855][T15882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.299915][T15882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.352862][T15890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2928'. [ 452.363881][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2929'. [ 452.365844][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2928'. [ 452.374637][T15891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.374667][T15891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.403464][T15891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.411837][T15891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.924991][T15906] tipc: Started in network mode [ 452.932022][T15906] tipc: Node identity , cluster identity 4711 [ 452.938225][T15906] tipc: Failed to obtain node identity [ 452.944833][T15906] tipc: Enabling of bearer rejected, failed to enable media [ 453.442085][T15930] lo speed is unknown, defaulting to 1000 [ 453.544959][T15936] Bluetooth: MGMT ver 1.23 [ 454.000845][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2944'. [ 454.220624][T15955] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2945'. [ 454.249126][T15955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2945'. [ 454.292149][T15955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2945'. [ 454.353660][T15955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2945'. [ 454.477175][T15965] IPVS: Error connecting to the multicast addr [ 455.790905][T16011] netlink: 'syz.4.2962': attribute type 4 has an invalid length. [ 455.842350][T16014] netlink: 'syz.4.2962': attribute type 4 has an invalid length. [ 456.297348][T16010] syzkaller0: entered promiscuous mode [ 456.302974][T16010] syzkaller0: entered allmulticast mode [ 456.397013][T16012] syzkaller0: entered promiscuous mode [ 456.402679][T16012] syzkaller0: entered allmulticast mode [ 456.418415][T16017] FAULT_INJECTION: forcing a failure. [ 456.418415][T16017] name failslab, interval 1, probability 0, space 0, times 0 [ 456.433017][T16017] CPU: 1 UID: 0 PID: 16017 Comm: syz.1.2963 Not tainted syzkaller #0 PREEMPT(full) [ 456.433049][T16017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.433064][T16017] Call Trace: [ 456.433073][T16017] [ 456.433083][T16017] dump_stack_lvl+0x189/0x250 [ 456.433116][T16017] ? __pfx____ratelimit+0x10/0x10 [ 456.433141][T16017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.433169][T16017] ? __pfx__printk+0x10/0x10 [ 456.433196][T16017] ? __pfx___might_resched+0x10/0x10 [ 456.433224][T16017] should_fail_ex+0x414/0x560 [ 456.433261][T16017] should_failslab+0xa8/0x100 [ 456.433284][T16017] __kmalloc_noprof+0xcb/0x7f0 [ 456.433312][T16017] ? ethnl_default_notify+0x1f5/0xb70 [ 456.433340][T16017] ethnl_default_notify+0x1f5/0xb70 [ 456.433366][T16017] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 456.433393][T16017] ? __pfx_ethnl_default_notify+0x10/0x10 [ 456.433434][T16017] ? mutex_is_locked+0x17/0x50 [ 456.433458][T16017] ? rtnl_is_locked+0x15/0x20 [ 456.433486][T16017] ethnl_default_set_doit+0x4f8/0x890 [ 456.433523][T16017] genl_family_rcv_msg_doit+0x215/0x300 [ 456.433560][T16017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.433599][T16017] ? bpf_lsm_capable+0x9/0x20 [ 456.433624][T16017] ? security_capable+0x7e/0x2e0 [ 456.433658][T16017] genl_rcv_msg+0x60e/0x790 [ 456.433690][T16017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.433712][T16017] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 456.433736][T16017] ? __asan_memcpy+0x40/0x70 [ 456.433769][T16017] ? __pfx_ref_tracker_free+0x10/0x10 [ 456.433797][T16017] netlink_rcv_skb+0x208/0x470 [ 456.433827][T16017] ? __lock_acquire+0xab9/0xd20 [ 456.433853][T16017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.433882][T16017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.433940][T16017] ? down_read+0x1ad/0x2e0 [ 456.433971][T16017] genl_rcv+0x28/0x40 [ 456.433993][T16017] netlink_unicast+0x82f/0x9e0 [ 456.434034][T16017] ? __pfx_netlink_unicast+0x10/0x10 [ 456.434064][T16017] ? netlink_sendmsg+0x642/0xb30 [ 456.434080][T16017] ? skb_put+0x11b/0x210 [ 456.434115][T16017] netlink_sendmsg+0x805/0xb30 [ 456.434144][T16017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.434166][T16017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.434199][T16017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.434219][T16017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.434241][T16017] __sock_sendmsg+0x21c/0x270 [ 456.434272][T16017] ____sys_sendmsg+0x505/0x830 [ 456.434302][T16017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.434339][T16017] ? import_iovec+0x74/0xa0 [ 456.434372][T16017] ___sys_sendmsg+0x21f/0x2a0 [ 456.434399][T16017] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.434464][T16017] ? __fget_files+0x2a/0x420 [ 456.434484][T16017] ? __fget_files+0x3a0/0x420 [ 456.434514][T16017] __x64_sys_sendmsg+0x19b/0x260 [ 456.434532][T16017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.434557][T16017] ? __pfx_ksys_write+0x10/0x10 [ 456.434595][T16017] ? do_syscall_64+0xbe/0xfa0 [ 456.434628][T16017] do_syscall_64+0xfa/0xfa0 [ 456.434654][T16017] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.434682][T16017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.434706][T16017] ? clear_bhb_loop+0x60/0xb0 [ 456.434726][T16017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.434750][T16017] RIP: 0033:0x7f4b33b8efc9 [ 456.434765][T16017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.434779][T16017] RSP: 002b:00007f4b34a44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.434797][T16017] RAX: ffffffffffffffda RBX: 00007f4b33de5fa0 RCX: 00007f4b33b8efc9 [ 456.434809][T16017] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000013 [ 456.434820][T16017] RBP: 00007f4b34a44090 R08: 0000000000000000 R09: 0000000000000000 [ 456.434830][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.434839][T16017] R13: 00007f4b33de6038 R14: 00007f4b33de5fa0 R15: 00007fff46bb2d88 [ 456.434866][T16017] [ 457.316344][T16036] netlink: 'syz.5.2968': attribute type 39 has an invalid length. [ 460.538056][T16060] __nla_validate_parse: 6 callbacks suppressed [ 460.538078][T16060] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2975'. [ 460.929652][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2978'. [ 460.938698][T16073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2978'. [ 460.969160][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2978'. [ 460.978301][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2978'. [ 461.019565][T16069] syzkaller1: entered promiscuous mode [ 461.025125][T16069] syzkaller1: entered allmulticast mode [ 461.294082][T16092] FAULT_INJECTION: forcing a failure. [ 461.294082][T16092] name failslab, interval 1, probability 0, space 0, times 0 [ 461.307840][T16092] CPU: 0 UID: 0 PID: 16092 Comm: syz.4.2985 Not tainted syzkaller #0 PREEMPT(full) [ 461.307872][T16092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.307886][T16092] Call Trace: [ 461.307897][T16092] [ 461.307908][T16092] dump_stack_lvl+0x189/0x250 [ 461.307945][T16092] ? __pfx____ratelimit+0x10/0x10 [ 461.307971][T16092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.308003][T16092] ? __pfx__printk+0x10/0x10 [ 461.308043][T16092] should_fail_ex+0x414/0x560 [ 461.308083][T16092] should_failslab+0xa8/0x100 [ 461.308108][T16092] __kmalloc_cache_noprof+0x6f/0x6f0 [ 461.308140][T16092] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 461.308169][T16092] ? sctp_add_bind_addr+0x8c/0x370 [ 461.308203][T16092] sctp_add_bind_addr+0x8c/0x370 [ 461.308235][T16092] sctp_copy_local_addr_list+0x30b/0x4e0 [ 461.308267][T16092] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 461.308295][T16092] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 461.308325][T16092] ? sctp_v6_is_any+0x64/0x80 [ 461.308355][T16092] ? sctp_copy_one_addr+0x93/0x360 [ 461.308387][T16092] sctp_bind_addr_copy+0xb3/0x3c0 [ 461.308415][T16092] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 461.308444][T16092] sctp_connect_new_asoc+0x2e0/0x690 [ 461.308486][T16092] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 461.308521][T16092] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 461.308555][T16092] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 461.308586][T16092] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 461.308628][T16092] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 461.308666][T16092] __sctp_connect+0x5ba/0xd50 [ 461.308713][T16092] ? __pfx___sctp_connect+0x10/0x10 [ 461.308758][T16092] sctp_inet_connect+0x12e/0x1e0 [ 461.308792][T16092] __sys_connect+0x316/0x440 [ 461.308825][T16092] ? __fget_files+0x3a0/0x420 [ 461.308848][T16092] ? __pfx___sys_connect+0x10/0x10 [ 461.308893][T16092] ? __pfx_ksys_write+0x10/0x10 [ 461.308932][T16092] __x64_sys_connect+0x7a/0x90 [ 461.308963][T16092] do_syscall_64+0xfa/0xfa0 [ 461.308989][T16092] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.309017][T16092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.309039][T16092] ? clear_bhb_loop+0x60/0xb0 [ 461.309067][T16092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.309089][T16092] RIP: 0033:0x7fa81ed8efc9 [ 461.309109][T16092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.309129][T16092] RSP: 002b:00007fa81fb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 461.309153][T16092] RAX: ffffffffffffffda RBX: 00007fa81efe5fa0 RCX: 00007fa81ed8efc9 [ 461.309171][T16092] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 461.309186][T16092] RBP: 00007fa81fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.309200][T16092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.309214][T16092] R13: 00007fa81efe6038 R14: 00007fa81efe5fa0 R15: 00007ffc627bd228 [ 461.309252][T16092] [ 461.352033][T16089] xt_hashlimit: size too large, truncated to 1048576 [ 461.673776][T16089] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 461.796638][T16106] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2989'. [ 461.805977][T16106] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2989'. [ 461.815726][T16106] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2989'. [ 462.096653][T16110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 462.134389][T16112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 462.153141][T16112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2992'. [ 462.590101][T16135] syzkaller1: entered promiscuous mode [ 462.595641][T16135] syzkaller1: entered allmulticast mode [ 463.678511][T16167] vlan2: entered promiscuous mode [ 463.684110][T16167] vlan2: entered allmulticast mode [ 463.690026][T16167] hsr_slave_1: entered allmulticast mode [ 463.731761][T16167] lo speed is unknown, defaulting to 1000 [ 464.124728][T16174] vlan2: entered promiscuous mode [ 464.153275][T16174] vlan2: entered allmulticast mode [ 464.158476][T16174] hsr_slave_1: entered allmulticast mode [ 464.318274][T16177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.336243][T16177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.361916][T16177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.382460][T16177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.391346][T13567] IPVS: starting estimator thread 0... [ 464.391616][T16180] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 464.416004][T16188] openvswitch: netlink: Key 22 has unexpected len 8 expected 4 [ 464.491652][T16186] IPVS: using max 26 ests per chain, 62400 per kthread [ 464.563450][T16190] netlink: 'syz.6.3015': attribute type 10 has an invalid length. [ 464.590691][T16193] netlink: 'syz.5.3016': attribute type 13 has an invalid length. [ 464.599670][T16193] netlink: 'syz.5.3016': attribute type 17 has an invalid length. [ 464.652569][T16182] macvlan2: entered promiscuous mode [ 464.683692][T16190] batadv_slave_1: entered promiscuous mode [ 464.690250][T16190] bridge0: port 3(batadv_slave_1) entered blocking state [ 464.707875][T16190] bridge0: port 3(batadv_slave_1) entered disabled state [ 464.715799][T16190] batadv_slave_1: entered allmulticast mode [ 464.726869][T16190] bridge0: port 3(batadv_slave_1) entered blocking state [ 464.734193][T16190] bridge0: port 3(batadv_slave_1) entered forwarding state [ 464.872615][T16193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.929428][T16175] lo speed is unknown, defaulting to 1000 [ 465.225108][T16212] netlink: 'syz.5.3021': attribute type 1 has an invalid length. [ 465.713857][T16224] netlink: 'syz.4.3024': attribute type 4 has an invalid length. [ 465.771096][T16224] netlink: 'syz.4.3024': attribute type 4 has an invalid length. [ 465.799192][T16229] __nla_validate_parse: 12 callbacks suppressed [ 465.799215][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3027'. [ 466.072250][T16246] netlink: 7016 bytes leftover after parsing attributes in process `syz.6.3029'. [ 466.099130][T16246] openvswitch: netlink: Message has 8 unknown bytes. [ 466.191073][T16252] netlink: 'syz.1.3032': attribute type 13 has an invalid length. [ 466.199484][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'. [ 466.288848][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3034'. [ 466.889761][T16273] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3040'. [ 466.955678][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3039'. [ 466.968986][T16271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3039'. [ 466.989343][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3039'. [ 467.012351][T16271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3039'. [ 467.080833][T16278] lo speed is unknown, defaulting to 1000 [ 467.319322][T16293] syzkaller0: entered promiscuous mode [ 467.328479][T16293] syzkaller0: entered allmulticast mode [ 467.495077][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3041'. [ 467.863110][T16300] syzkaller0: entered promiscuous mode [ 467.869652][T16300] syzkaller0: entered allmulticast mode [ 471.861234][T16349] __nla_validate_parse: 2 callbacks suppressed [ 471.861257][T16349] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3057'. [ 471.878439][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3057'. [ 471.920353][T16349] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3057'. [ 471.930341][T16349] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3057'. [ 471.950565][T16351] syzkaller1: entered promiscuous mode [ 471.956210][T16351] syzkaller1: entered allmulticast mode [ 471.981458][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 472.018438][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3058'. [ 472.220938][T16366] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 472.229739][T16366] FAULT_INJECTION: forcing a failure. [ 472.229739][T16366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.243430][T16366] CPU: 0 UID: 0 PID: 16366 Comm: syz.6.3061 Not tainted syzkaller #0 PREEMPT(full) [ 472.243462][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.243475][T16366] Call Trace: [ 472.243484][T16366] [ 472.243495][T16366] dump_stack_lvl+0x189/0x250 [ 472.243538][T16366] ? __pfx____ratelimit+0x10/0x10 [ 472.243565][T16366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.243595][T16366] ? __pfx__printk+0x10/0x10 [ 472.243632][T16366] should_fail_ex+0x414/0x560 [ 472.243671][T16366] _copy_to_user+0x31/0xb0 [ 472.243702][T16366] simple_read_from_buffer+0xe1/0x170 [ 472.243741][T16366] proc_fail_nth_read+0x1b3/0x220 [ 472.243774][T16366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.243806][T16366] ? rw_verify_area+0x2a6/0x4d0 [ 472.243835][T16366] ? __lock_acquire+0xab9/0xd20 [ 472.243856][T16366] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 472.243886][T16366] vfs_read+0x200/0xa30 [ 472.243915][T16366] ? fdget_pos+0x247/0x320 [ 472.243941][T16366] ? __pfx___mutex_lock+0x10/0x10 [ 472.243971][T16366] ? __pfx_vfs_read+0x10/0x10 [ 472.244003][T16366] ? __fget_files+0x2a/0x420 [ 472.244028][T16366] ? __fget_files+0x3a0/0x420 [ 472.244048][T16366] ? __fget_files+0x2a/0x420 [ 472.244079][T16366] ksys_read+0x145/0x250 [ 472.244112][T16366] ? __pfx_ksys_read+0x10/0x10 [ 472.244147][T16366] ? do_syscall_64+0xbe/0xfa0 [ 472.244183][T16366] do_syscall_64+0xfa/0xfa0 [ 472.244208][T16366] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.244235][T16366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.244258][T16366] ? clear_bhb_loop+0x60/0xb0 [ 472.244286][T16366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.244308][T16366] RIP: 0033:0x7f521a38d9dc [ 472.244328][T16366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 472.244349][T16366] RSP: 002b:00007f521b2a3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 472.244373][T16366] RAX: ffffffffffffffda RBX: 00007f521a5e5fa0 RCX: 00007f521a38d9dc [ 472.244390][T16366] RDX: 000000000000000f RSI: 00007f521b2a30a0 RDI: 0000000000000004 [ 472.244404][T16366] RBP: 00007f521b2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 472.244418][T16366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.244432][T16366] R13: 00007f521a5e6038 R14: 00007f521a5e5fa0 R15: 00007ffcc9a64e38 [ 472.244471][T16366] [ 472.704936][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3064'. [ 472.714202][T16375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 472.721490][T16375] IPv6: NLM_F_CREATE should be set when creating new route [ 472.925828][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3067'. [ 472.944740][T16379] syzkaller0: entered promiscuous mode [ 472.959049][T16379] syzkaller0: entered allmulticast mode [ 473.000417][T16389] lo speed is unknown, defaulting to 1000 [ 473.035341][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 473.471833][T16401] netlink: 3980 bytes leftover after parsing attributes in process `syz.7.3070'. [ 473.846485][T16413] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 475.286918][T16434] macvlan2: entered allmulticast mode [ 475.306745][T16434] bridge0: port 3(macvlan2) entered blocking state [ 475.325044][T16437] netlink: 'syz.7.3080': attribute type 11 has an invalid length. [ 475.340579][T16434] bridge0: port 3(macvlan2) entered disabled state [ 475.368545][T16434] macvlan2: entered promiscuous mode [ 475.423320][T16425] syzkaller1: entered promiscuous mode [ 475.429081][T16425] syzkaller1: entered allmulticast mode [ 475.440677][T16435] netlink: 'syz.6.3079': attribute type 4 has an invalid length. [ 475.636125][T16444] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 475.753871][T16446] FAULT_INJECTION: forcing a failure. [ 475.753871][T16446] name failslab, interval 1, probability 0, space 0, times 0 [ 475.773027][T16446] CPU: 0 UID: 0 PID: 16446 Comm: syz.7.3082 Not tainted syzkaller #0 PREEMPT(full) [ 475.773058][T16446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 475.773071][T16446] Call Trace: [ 475.773091][T16446] [ 475.773102][T16446] dump_stack_lvl+0x189/0x250 [ 475.773137][T16446] ? __pfx____ratelimit+0x10/0x10 [ 475.773163][T16446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.773193][T16446] ? __pfx__printk+0x10/0x10 [ 475.773223][T16446] ? __pfx___might_resched+0x10/0x10 [ 475.773253][T16446] should_fail_ex+0x414/0x560 [ 475.773293][T16446] should_failslab+0xa8/0x100 [ 475.773317][T16446] __kmalloc_noprof+0xcb/0x7f0 [ 475.773349][T16446] ? tls_get_rec+0xbf/0x670 [ 475.773383][T16446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 475.773412][T16446] tls_get_rec+0xbf/0x670 [ 475.773454][T16446] tls_sw_sendmsg+0x4cd/0x2420 [ 475.773535][T16446] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 475.773570][T16446] ? __pfx_aa_sk_perm+0x10/0x10 [ 475.773598][T16446] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 475.773631][T16446] ? sock_rps_record_flow+0x19/0x410 [ 475.773667][T16446] ? inet_getname+0x377/0x3c0 [ 475.773704][T16446] ? inet6_sendmsg+0x101/0x120 [ 475.773731][T16446] __sock_sendmsg+0xe5/0x270 [ 475.773763][T16446] ____sys_sendmsg+0x505/0x830 [ 475.773794][T16446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.773828][T16446] ? import_iovec+0x74/0xa0 [ 475.773861][T16446] ___sys_sendmsg+0x21f/0x2a0 [ 475.773887][T16446] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.773954][T16446] ? __fget_files+0x2a/0x420 [ 475.773975][T16446] ? __fget_files+0x3a0/0x420 [ 475.774009][T16446] __x64_sys_sendmsg+0x19b/0x260 [ 475.774036][T16446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 475.774071][T16446] ? __pfx_ksys_write+0x10/0x10 [ 475.774116][T16446] ? do_syscall_64+0xbe/0xfa0 [ 475.774148][T16446] do_syscall_64+0xfa/0xfa0 [ 475.774174][T16446] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.774202][T16446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.774224][T16446] ? clear_bhb_loop+0x60/0xb0 [ 475.774252][T16446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.774274][T16446] RIP: 0033:0x7fb04618efc9 [ 475.774294][T16446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.774314][T16446] RSP: 002b:00007fb0470ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.774339][T16446] RAX: ffffffffffffffda RBX: 00007fb0463e5fa0 RCX: 00007fb04618efc9 [ 475.774356][T16446] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 475.774370][T16446] RBP: 00007fb0470ec090 R08: 0000000000000000 R09: 0000000000000000 [ 475.774384][T16446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.774398][T16446] R13: 00007fb0463e6038 R14: 00007fb0463e5fa0 R15: 00007fff42793f28 [ 475.774436][T16446] [ 476.194283][T16454] lo speed is unknown, defaulting to 1000 [ 476.272922][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.279163][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.286038][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.306063][T16466] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 476.355540][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.363951][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.375560][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.389563][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.435524][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.471543][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.479763][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.488048][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.517869][T16466] wg1 speed is unknown, defaulting to 1000 [ 476.927008][T16482] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 477.056893][T16486] lo speed is unknown, defaulting to 1000 [ 477.064330][T16488] FAULT_INJECTION: forcing a failure. [ 477.064330][T16488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.066777][T16486] wg1 speed is unknown, defaulting to 1000 [ 477.089219][T16488] CPU: 1 UID: 0 PID: 16488 Comm: syz.7.3094 Not tainted syzkaller #0 PREEMPT(full) [ 477.089251][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.089265][T16488] Call Trace: [ 477.089274][T16488] [ 477.089283][T16488] dump_stack_lvl+0x189/0x250 [ 477.089319][T16488] ? __pfx____ratelimit+0x10/0x10 [ 477.089345][T16488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.089375][T16488] ? __pfx__printk+0x10/0x10 [ 477.089411][T16488] should_fail_ex+0x414/0x560 [ 477.089451][T16488] _copy_to_user+0x31/0xb0 [ 477.089480][T16488] simple_read_from_buffer+0xe1/0x170 [ 477.089519][T16488] proc_fail_nth_read+0x1b3/0x220 [ 477.089551][T16488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.089581][T16488] ? rw_verify_area+0x2a6/0x4d0 [ 477.089610][T16488] ? __lock_acquire+0xab9/0xd20 [ 477.089630][T16488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 477.089660][T16488] vfs_read+0x200/0xa30 [ 477.089689][T16488] ? fdget_pos+0x247/0x320 [ 477.089714][T16488] ? __pfx___mutex_lock+0x10/0x10 [ 477.089744][T16488] ? __pfx_vfs_read+0x10/0x10 [ 477.089776][T16488] ? __fget_files+0x2a/0x420 [ 477.089802][T16488] ? __fget_files+0x3a0/0x420 [ 477.089822][T16488] ? __fget_files+0x2a/0x420 [ 477.089853][T16488] ksys_read+0x145/0x250 [ 477.089888][T16488] ? __pfx_ksys_read+0x10/0x10 [ 477.089923][T16488] ? do_syscall_64+0xbe/0xfa0 [ 477.089954][T16488] do_syscall_64+0xfa/0xfa0 [ 477.089980][T16488] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.090006][T16488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.090028][T16488] ? clear_bhb_loop+0x60/0xb0 [ 477.090055][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.090076][T16488] RIP: 0033:0x7fb04618d9dc [ 477.090097][T16488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 477.090117][T16488] RSP: 002b:00007fb0470ec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 477.090149][T16488] RAX: ffffffffffffffda RBX: 00007fb0463e5fa0 RCX: 00007fb04618d9dc [ 477.090166][T16488] RDX: 000000000000000f RSI: 00007fb0470ec0a0 RDI: 0000000000000005 [ 477.090180][T16488] RBP: 00007fb0470ec090 R08: 0000000000000000 R09: 0000000000000000 [ 477.090193][T16488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.090209][T16488] R13: 00007fb0463e6038 R14: 00007fb0463e5fa0 R15: 00007fff42793f28 [ 477.090247][T16488] [ 477.757193][T16514] __nla_validate_parse: 12 callbacks suppressed [ 477.757216][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3100'. [ 477.947548][T16499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.981969][T16521] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 478.014677][T16521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 478.058226][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 478.103714][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 478.133941][T16523] netlink: 'syz.4.3102': attribute type 4 has an invalid length. [ 478.281732][T16499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.448054][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3105'. [ 478.457737][T16528] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3105'. [ 478.471434][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3105'. [ 478.509420][T16528] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3105'. [ 478.529733][T16532] netlink: 'syz.4.3107': attribute type 11 has an invalid length. [ 478.537620][T16532] netlink: 'syz.4.3107': attribute type 5 has an invalid length. [ 478.551865][T16499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.724339][T16542] netlink: 'syz.7.3108': attribute type 4 has an invalid length. [ 478.776527][T16545] netlink: 'syz.7.3108': attribute type 4 has an invalid length. [ 478.813155][T16546] sctp: [Deprecated]: syz.5.3106 (pid 16546) Use of int in max_burst socket option. [ 478.813155][T16546] Use struct sctp_assoc_value instead [ 478.835872][T16499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.956335][T16526] lo speed is unknown, defaulting to 1000 [ 479.006468][T16526] wg1 speed is unknown, defaulting to 1000 [ 479.065036][T16550] lo speed is unknown, defaulting to 1000 [ 479.073135][T16550] wg1 speed is unknown, defaulting to 1000 [ 479.317278][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.394930][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3113'. [ 479.535057][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.607810][T16562] macvlan2: left promiscuous mode [ 479.613609][T16562] bridge0: port 3(macvlan2) entered disabled state [ 479.625908][T16562] bridge_slave_1: left allmulticast mode [ 479.631903][T16562] bridge_slave_1: left promiscuous mode [ 479.637870][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.657940][T16562] bridge_slave_0: left allmulticast mode [ 479.664204][T16562] bridge_slave_0: left promiscuous mode [ 479.670673][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.715826][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3118'. [ 479.729362][T16578] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3118'. [ 479.807152][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.848831][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.876670][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.181798][T16591] netlink: 'syz.1.3122': attribute type 4 has an invalid length. [ 480.357633][T16593] lo speed is unknown, defaulting to 1000 [ 480.365958][T16593] wg1 speed is unknown, defaulting to 1000 [ 480.494567][T16599] pim6reg1: entered promiscuous mode [ 480.510166][T16599] pim6reg1: entered allmulticast mode [ 480.889727][T16616] lo speed is unknown, defaulting to 1000 [ 480.899068][T16616] wg1 speed is unknown, defaulting to 1000 [ 481.339296][T16626] lo speed is unknown, defaulting to 1000 [ 481.361753][T16626] wg1 speed is unknown, defaulting to 1000 [ 482.271196][T16656] FAULT_INJECTION: forcing a failure. [ 482.271196][T16656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.305645][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.6.3140 Not tainted syzkaller #0 PREEMPT(full) [ 482.305677][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 482.305691][T16656] Call Trace: [ 482.305700][T16656] [ 482.305710][T16656] dump_stack_lvl+0x189/0x250 [ 482.305744][T16656] ? __pfx____ratelimit+0x10/0x10 [ 482.305769][T16656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.305798][T16656] ? __pfx__printk+0x10/0x10 [ 482.305821][T16656] ? __might_fault+0xb0/0x130 [ 482.305863][T16656] should_fail_ex+0x414/0x560 [ 482.305910][T16656] _copy_from_user+0x2d/0xb0 [ 482.305938][T16656] ___sys_recvmsg+0x12e/0x510 [ 482.305968][T16656] ? __pfx____sys_recvmsg+0x10/0x10 [ 482.306027][T16656] ? __might_fault+0xb0/0x130 [ 482.306061][T16656] do_recvmmsg+0x307/0x770 [ 482.306094][T16656] ? __pfx_do_recvmmsg+0x10/0x10 [ 482.306130][T16656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.306180][T16656] __x64_sys_recvmmsg+0x190/0x240 [ 482.306207][T16656] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 482.306235][T16656] ? do_syscall_64+0xbe/0xfa0 [ 482.306265][T16656] do_syscall_64+0xfa/0xfa0 [ 482.306289][T16656] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.306315][T16656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.306335][T16656] ? clear_bhb_loop+0x60/0xb0 [ 482.306361][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.306382][T16656] RIP: 0033:0x7f521a38efc9 [ 482.306402][T16656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.306420][T16656] RSP: 002b:00007f521b2a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 482.306443][T16656] RAX: ffffffffffffffda RBX: 00007f521a5e5fa0 RCX: 00007f521a38efc9 [ 482.306459][T16656] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 482.306473][T16656] RBP: 00007f521b2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 482.306486][T16656] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 482.306499][T16656] R13: 00007f521a5e6038 R14: 00007f521a5e5fa0 R15: 00007ffcc9a64e38 [ 482.306536][T16656] [ 482.655487][T16662] lo speed is unknown, defaulting to 1000 [ 482.663140][T16662] wg1 speed is unknown, defaulting to 1000 [ 482.737295][T16663] lo speed is unknown, defaulting to 1000 [ 482.746486][T16663] wg1 speed is unknown, defaulting to 1000 [ 482.807008][T16655] syzkaller1: entered promiscuous mode [ 482.814619][T16655] syzkaller1: entered allmulticast mode [ 482.905162][T16668] __nla_validate_parse: 5 callbacks suppressed [ 482.905185][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3144'. [ 483.140856][T16672] batadv0: entered promiscuous mode [ 483.147594][T16672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.376366][T16681] team_slave_0: entered promiscuous mode [ 483.382439][T16681] team_slave_1: entered promiscuous mode [ 483.396265][T16681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.512126][T16684] syz_tun: entered allmulticast mode [ 483.529514][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 483.610312][T16677] syz_tun (unregistering): left allmulticast mode [ 483.640763][T16683] lo speed is unknown, defaulting to 1000 [ 483.647469][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 483.671326][T16674] lo speed is unknown, defaulting to 1000 [ 483.681797][T16683] wg1 speed is unknown, defaulting to 1000 [ 483.708588][T16674] wg1 speed is unknown, defaulting to 1000 [ 484.239358][T16709] team_slave_0: entered promiscuous mode [ 484.245140][T16709] team_slave_1: entered promiscuous mode [ 484.324669][T16714] sctp: [Deprecated]: syz.4.3154 (pid 16714) Use of int in max_burst socket option. [ 484.324669][T16714] Use struct sctp_assoc_value instead [ 484.359663][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3155'. [ 484.369711][T16709] team_slave_0: left promiscuous mode [ 484.375203][T16709] team_slave_1: left promiscuous mode [ 484.777066][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 484.967811][T16736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3162'. [ 485.044336][T16738] lo speed is unknown, defaulting to 1000 [ 485.052040][T16738] wg1 speed is unknown, defaulting to 1000 [ 485.432404][T16748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3165'. [ 485.441687][T16748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3165'. [ 485.450839][T16748] netlink: 'syz.1.3165': attribute type 4 has an invalid length. [ 485.882004][T16763] lo speed is unknown, defaulting to 1000 [ 485.889928][T16763] wg1 speed is unknown, defaulting to 1000 [ 486.236641][T16743] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 486.851834][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3175'. [ 486.896169][T16782] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3175'. [ 487.162095][T16798] lo speed is unknown, defaulting to 1000 [ 487.186514][T16798] wg1 speed is unknown, defaulting to 1000 [ 487.329384][ T5842] Bluetooth: hci4: command 0x0401 tx timeout [ 487.336654][T16809] Bluetooth: hci4: Opcode 0x0401 failed: -110 [ 487.486145][T16820] netlink: 'syz.4.3185': attribute type 4 has an invalid length. [ 488.581293][T16845] __nla_validate_parse: 4 callbacks suppressed [ 488.581317][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3194'. [ 488.609231][T16845] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3194'. [ 488.657492][T16845] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3194'. [ 488.715065][T16845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.832843][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'. [ 489.089137][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 489.096233][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 489.257569][T16872] netlink: 'syz.1.3201': attribute type 4 has an invalid length. [ 489.294277][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3203'. [ 489.409154][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 489.548317][T16884] syzkaller0: entered promiscuous mode [ 489.553986][T16884] syzkaller0: entered allmulticast mode [ 489.576345][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3208'. [ 490.482812][T16881] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 491.571186][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 491.801544][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3215'. [ 491.819334][T16920] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3215'. [ 491.846104][T16917] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3215'. [ 491.966798][T16917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.045395][T16922] syz_tun: entered allmulticast mode [ 492.053772][T16921] syz_tun: left allmulticast mode [ 492.128449][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3219'. [ 492.273423][T16936] netlink: 'syz.1.3220': attribute type 4 has an invalid length. [ 492.467869][T16943] lo speed is unknown, defaulting to 1000 [ 492.475790][T16943] wg1 speed is unknown, defaulting to 1000 [ 492.958235][T16968] erspan0: entered promiscuous mode [ 492.970297][T16968] erspan0: left promiscuous mode [ 493.602750][T16992] __nla_validate_parse: 9 callbacks suppressed [ 493.602772][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3237'. [ 493.609508][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 493.650417][T16992] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3237'. [ 493.680220][T16992] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3237'. [ 493.712704][T16996] tipc: Started in network mode [ 493.717831][T16996] tipc: Node identity 66c2565c305b, cluster identity 4711 [ 493.730243][T16996] tipc: Enabled bearer , priority 0 [ 493.738554][T16996] syzkaller0: entered promiscuous mode [ 493.744604][T16996] syzkaller0: entered allmulticast mode [ 493.758787][T16987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.795495][T16996] tipc: Resetting bearer [ 493.809490][T16995] tipc: Resetting bearer [ 493.823513][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 493.839773][T16995] tipc: Disabling bearer [ 493.898147][T17000] FAULT_INJECTION: forcing a failure. [ 493.898147][T17000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.912459][T17000] CPU: 1 UID: 0 PID: 17000 Comm: syz.6.3242 Not tainted syzkaller #0 PREEMPT(full) [ 493.912496][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 493.912515][T17000] Call Trace: [ 493.912524][T17000] [ 493.912534][T17000] dump_stack_lvl+0x189/0x250 [ 493.912576][T17000] ? __pfx____ratelimit+0x10/0x10 [ 493.912601][T17000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.912631][T17000] ? __pfx__printk+0x10/0x10 [ 493.912655][T17000] ? __might_fault+0xb0/0x130 [ 493.912699][T17000] should_fail_ex+0x414/0x560 [ 493.912737][T17000] _copy_from_user+0x2d/0xb0 [ 493.912766][T17000] ___sys_recvmsg+0x12e/0x510 [ 493.912797][T17000] ? __pfx____sys_recvmsg+0x10/0x10 [ 493.912850][T17000] ? __might_fault+0xb0/0x130 [ 493.912885][T17000] do_recvmmsg+0x307/0x770 [ 493.912919][T17000] ? __pfx_do_recvmmsg+0x10/0x10 [ 493.912955][T17000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.913002][T17000] __x64_sys_recvmmsg+0x190/0x240 [ 493.913030][T17000] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 493.913059][T17000] ? do_syscall_64+0xbe/0xfa0 [ 493.913090][T17000] do_syscall_64+0xfa/0xfa0 [ 493.913115][T17000] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.913141][T17000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.913164][T17000] ? clear_bhb_loop+0x60/0xb0 [ 493.913191][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.913212][T17000] RIP: 0033:0x7f521a38efc9 [ 493.913232][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.913252][T17000] RSP: 002b:00007f521b2a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 493.913281][T17000] RAX: ffffffffffffffda RBX: 00007f521a5e5fa0 RCX: 00007f521a38efc9 [ 493.913297][T17000] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 493.913311][T17000] RBP: 00007f521b2a3090 R08: 0000000000000000 R09: 0000000000000000 [ 493.913325][T17000] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 493.913337][T17000] R13: 00007f521a5e6038 R14: 00007f521a5e5fa0 R15: 00007ffcc9a64e38 [ 493.913372][T17000] [ 494.130672][T17004] netlink: 'syz.1.3243': attribute type 4 has an invalid length. [ 494.245905][T17008] lo speed is unknown, defaulting to 1000 [ 494.255447][T17008] wg1 speed is unknown, defaulting to 1000 [ 494.815687][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3247'. [ 495.014514][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3250'. [ 495.205915][T17046] tipc: Started in network mode [ 495.223893][T17046] tipc: Node identity 2, cluster identity 2048 [ 495.250990][T17046] tipc: Node number set to 2 [ 495.261736][T17046] tipc: Cannot configure node identity twice [ 495.713844][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3257'. [ 495.724672][T17073] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3257'. [ 495.736639][T17073] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3257'. [ 495.806075][T17073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.908379][T17077] FAULT_INJECTION: forcing a failure. [ 495.908379][T17077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.941492][T17077] CPU: 1 UID: 0 PID: 17077 Comm: syz.1.3258 Not tainted syzkaller #0 PREEMPT(full) [ 495.941526][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.941540][T17077] Call Trace: [ 495.941549][T17077] [ 495.941559][T17077] dump_stack_lvl+0x189/0x250 [ 495.941594][T17077] ? __pfx____ratelimit+0x10/0x10 [ 495.941619][T17077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.941647][T17077] ? __pfx__printk+0x10/0x10 [ 495.941668][T17077] ? __might_fault+0xb0/0x130 [ 495.941709][T17077] should_fail_ex+0x414/0x560 [ 495.941748][T17077] _copy_from_user+0x2d/0xb0 [ 495.941776][T17077] ___sys_recvmsg+0x12e/0x510 [ 495.941804][T17077] ? __pfx____sys_recvmsg+0x10/0x10 [ 495.941864][T17077] ? __might_fault+0xb0/0x130 [ 495.941898][T17077] do_recvmmsg+0x307/0x770 [ 495.941931][T17077] ? __pfx_do_recvmmsg+0x10/0x10 [ 495.941967][T17077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.942014][T17077] __x64_sys_recvmmsg+0x190/0x240 [ 495.942040][T17077] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 495.942068][T17077] ? do_syscall_64+0xbe/0xfa0 [ 495.942097][T17077] do_syscall_64+0xfa/0xfa0 [ 495.942121][T17077] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.942147][T17077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.942169][T17077] ? clear_bhb_loop+0x60/0xb0 [ 495.942196][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.942218][T17077] RIP: 0033:0x7f4b33b8efc9 [ 495.942238][T17077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.942258][T17077] RSP: 002b:00007f4b34a44038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 495.942282][T17077] RAX: ffffffffffffffda RBX: 00007f4b33de5fa0 RCX: 00007f4b33b8efc9 [ 495.942299][T17077] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 495.942315][T17077] RBP: 00007f4b34a44090 R08: 0000000000000000 R09: 0000000000000000 [ 495.942329][T17077] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 495.942343][T17077] R13: 00007f4b33de6038 R14: 00007f4b33de5fa0 R15: 00007fff46bb2d88 [ 495.942386][T17077] [ 496.042296][T17080] netlink: 'syz.7.3259': attribute type 4 has an invalid length. [ 496.165035][T17044] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 496.263549][T17082] FAULT_INJECTION: forcing a failure. [ 496.263549][T17082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.291480][T17082] CPU: 1 UID: 0 PID: 17082 Comm: syz.1.3260 Not tainted syzkaller #0 PREEMPT(full) [ 496.291523][T17082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 496.291537][T17082] Call Trace: [ 496.291546][T17082] [ 496.291556][T17082] dump_stack_lvl+0x189/0x250 [ 496.291591][T17082] ? __pfx____ratelimit+0x10/0x10 [ 496.291618][T17082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.291648][T17082] ? __pfx__printk+0x10/0x10 [ 496.291689][T17082] should_fail_ex+0x414/0x560 [ 496.291728][T17082] copy_folio_from_iter_atomic+0x325/0x1910 [ 496.291756][T17082] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 496.291795][T17082] ? shmem_get_folio_gfp+0x1432/0x1660 [ 496.291834][T17082] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 496.291872][T17082] ? shmem_write_begin+0x15f/0x2b0 [ 496.291909][T17082] generic_perform_write+0x5df/0x900 [ 496.291951][T17082] ? __pfx_generic_perform_write+0x10/0x10 [ 496.291974][T17082] ? down_write+0x162/0x1f0 [ 496.292013][T17082] ? file_update_time+0x2da/0x490 [ 496.292045][T17082] shmem_file_write_iter+0xf8/0x120 [ 496.292081][T17082] vfs_write+0x5c9/0xb30 [ 496.292118][T17082] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 496.292151][T17082] ? __pfx_vfs_write+0x10/0x10 [ 496.292179][T17082] ? __lock_acquire+0xab9/0xd20 [ 496.292213][T17082] ? __might_fault+0xb0/0x130 [ 496.292256][T17082] ksys_write+0x145/0x250 [ 496.292289][T17082] ? __pfx_ksys_write+0x10/0x10 [ 496.292333][T17082] do_syscall_64+0xfa/0xfa0 [ 496.292359][T17082] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.292386][T17082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.292409][T17082] ? clear_bhb_loop+0x60/0xb0 [ 496.292437][T17082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.292458][T17082] RIP: 0033:0x7f4b33b8efc9 [ 496.292479][T17082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.292506][T17082] RSP: 002b:00007f4b34a44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.292531][T17082] RAX: ffffffffffffffda RBX: 00007f4b33de5fa0 RCX: 00007f4b33b8efc9 [ 496.292547][T17082] RDX: 0000000000032600 RSI: 0000200000000140 RDI: 0000000000000003 [ 496.292561][T17082] RBP: 00007f4b34a44090 R08: 0000000000000000 R09: 0000000000000000 [ 496.292575][T17082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 496.292588][T17082] R13: 00007f4b33de6038 R14: 00007f4b33de5fa0 R15: 00007fff46bb2d88 [ 496.292626][T17082] [ 496.632513][T17091] netlink: 'syz.7.3263': attribute type 4 has an invalid length. [ 497.169895][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 497.267413][T17111] lo speed is unknown, defaulting to 1000 [ 497.278602][T17111] wg1 speed is unknown, defaulting to 1000 [ 497.286319][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.293663][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.300997][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.308363][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.315690][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.322991][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.330480][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.337752][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.344632][T17115] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 497.345059][T17109] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 497.617859][T17119] netlink: 'syz.5.3273': attribute type 22 has an invalid length. [ 497.657170][T17127] FAULT_INJECTION: forcing a failure. [ 497.657170][T17127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.670700][T17127] CPU: 1 UID: 0 PID: 17127 Comm: syz.4.3277 Not tainted syzkaller #0 PREEMPT(full) [ 497.670732][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.670746][T17127] Call Trace: [ 497.670755][T17127] [ 497.670765][T17127] dump_stack_lvl+0x189/0x250 [ 497.670803][T17127] ? __pfx____ratelimit+0x10/0x10 [ 497.670830][T17127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.670860][T17127] ? __pfx__printk+0x10/0x10 [ 497.670883][T17127] ? __might_fault+0xb0/0x130 [ 497.670928][T17127] should_fail_ex+0x414/0x560 [ 497.670967][T17127] _copy_from_user+0x2d/0xb0 [ 497.670997][T17127] ___sys_sendmsg+0x158/0x2a0 [ 497.671023][T17127] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.671088][T17127] ? __fget_files+0x2a/0x420 [ 497.671108][T17127] ? __fget_files+0x3a0/0x420 [ 497.671141][T17127] __x64_sys_sendmsg+0x19b/0x260 [ 497.671167][T17127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.671202][T17127] ? __pfx_ksys_write+0x10/0x10 [ 497.671237][T17127] ? do_syscall_64+0xbe/0xfa0 [ 497.671269][T17127] do_syscall_64+0xfa/0xfa0 [ 497.671295][T17127] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.671322][T17127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.671344][T17127] ? clear_bhb_loop+0x60/0xb0 [ 497.671386][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.671407][T17127] RIP: 0033:0x7fa81ed8efc9 [ 497.671427][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.671447][T17127] RSP: 002b:00007fa81fb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.671470][T17127] RAX: ffffffffffffffda RBX: 00007fa81efe5fa0 RCX: 00007fa81ed8efc9 [ 497.671486][T17127] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 497.671501][T17127] RBP: 00007fa81fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 497.671515][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.671528][T17127] R13: 00007fa81efe6038 R14: 00007fa81efe5fa0 R15: 00007ffc627bd228 [ 497.671565][T17127] [ 498.239779][T17132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.436181][T17133] syzkaller1: entered promiscuous mode [ 498.442693][T17133] syzkaller1: entered allmulticast mode [ 498.649645][T17150] lo speed is unknown, defaulting to 1000 [ 498.665799][T17150] wg1 speed is unknown, defaulting to 1000 [ 498.909475][T17164] __nla_validate_parse: 6 callbacks suppressed [ 498.909500][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 498.927276][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 498.993226][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'. [ 499.073687][T17171] veth0: entered promiscuous mode [ 499.082626][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3290'. [ 499.572881][T17189] syzkaller1: entered promiscuous mode [ 499.583051][T17189] syzkaller1: entered allmulticast mode [ 499.604194][T17190] Bluetooth: MGMT ver 1.23 [ 500.271102][T17199] lo speed is unknown, defaulting to 1000 [ 500.295632][T17199] wg1 speed is unknown, defaulting to 1000 [ 500.402367][T17207] FAULT_INJECTION: forcing a failure. [ 500.402367][T17207] name failslab, interval 1, probability 0, space 0, times 0 [ 500.451053][T17207] CPU: 0 UID: 0 PID: 17207 Comm: syz.1.3303 Not tainted syzkaller #0 PREEMPT(full) [ 500.451086][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.451100][T17207] Call Trace: [ 500.451109][T17207] [ 500.451118][T17207] dump_stack_lvl+0x189/0x250 [ 500.451154][T17207] ? __pfx____ratelimit+0x10/0x10 [ 500.451180][T17207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.451210][T17207] ? __pfx__printk+0x10/0x10 [ 500.451240][T17207] ? __pfx___might_resched+0x10/0x10 [ 500.451264][T17207] ? fs_reclaim_acquire+0x7d/0x100 [ 500.451303][T17207] should_fail_ex+0x414/0x560 [ 500.451343][T17207] should_failslab+0xa8/0x100 [ 500.451378][T17207] kmem_cache_alloc_node_noprof+0x77/0x710 [ 500.451409][T17207] ? __alloc_skb+0x112/0x2d0 [ 500.451450][T17207] __alloc_skb+0x112/0x2d0 [ 500.451488][T17207] netlink_dump+0x1b7/0xe90 [ 500.451535][T17207] ? __pfx_netlink_dump+0x10/0x10 [ 500.451593][T17207] ? genl_start+0x499/0x6c0 [ 500.451630][T17207] __netlink_dump_start+0x5cb/0x7e0 [ 500.451673][T17207] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 500.451704][T17207] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 500.451738][T17207] ? __pfx_genl_start+0x10/0x10 [ 500.451760][T17207] ? __pfx_genl_dumpit+0x10/0x10 [ 500.451782][T17207] ? __pfx_genl_done+0x10/0x10 [ 500.451811][T17207] ? bpf_lsm_capable+0x9/0x20 [ 500.451837][T17207] ? security_capable+0x7e/0x2e0 [ 500.451873][T17207] genl_rcv_msg+0x5da/0x790 [ 500.451907][T17207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.451932][T17207] ? __pfx_batadv_orig_dump+0x10/0x10 [ 500.451961][T17207] ? __asan_memcpy+0x40/0x70 [ 500.451988][T17207] ? __pfx_ref_tracker_free+0x10/0x10 [ 500.452016][T17207] netlink_rcv_skb+0x208/0x470 [ 500.452045][T17207] ? __lock_acquire+0xab9/0xd20 [ 500.452067][T17207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.452095][T17207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.452147][T17207] ? down_read+0x1ad/0x2e0 [ 500.452179][T17207] genl_rcv+0x28/0x40 [ 500.452202][T17207] netlink_unicast+0x82f/0x9e0 [ 500.452241][T17207] ? __pfx_netlink_unicast+0x10/0x10 [ 500.452273][T17207] ? netlink_sendmsg+0x642/0xb30 [ 500.452290][T17207] ? skb_put+0x11b/0x210 [ 500.452327][T17207] netlink_sendmsg+0x805/0xb30 [ 500.452365][T17207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.452390][T17207] ? aa_sock_msg_perm+0xf1/0x1d0 [ 500.452422][T17207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.452443][T17207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.452464][T17207] __sock_sendmsg+0x21c/0x270 [ 500.452496][T17207] ____sys_sendmsg+0x505/0x830 [ 500.452525][T17207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.452557][T17207] ? import_iovec+0x74/0xa0 [ 500.452588][T17207] ___sys_sendmsg+0x21f/0x2a0 [ 500.452614][T17207] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.452679][T17207] ? __fget_files+0x2a/0x420 [ 500.452699][T17207] ? __fget_files+0x3a0/0x420 [ 500.452732][T17207] __x64_sys_sendmsg+0x19b/0x260 [ 500.452758][T17207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.452792][T17207] ? __pfx_ksys_write+0x10/0x10 [ 500.452826][T17207] ? do_syscall_64+0xbe/0xfa0 [ 500.452857][T17207] do_syscall_64+0xfa/0xfa0 [ 500.452882][T17207] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.452909][T17207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.452929][T17207] ? clear_bhb_loop+0x60/0xb0 [ 500.452956][T17207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.452977][T17207] RIP: 0033:0x7f4b33b8efc9 [ 500.452998][T17207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.453017][T17207] RSP: 002b:00007f4b34a23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.453040][T17207] RAX: ffffffffffffffda RBX: 00007f4b33de6090 RCX: 00007f4b33b8efc9 [ 500.453056][T17207] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 500.453070][T17207] RBP: 00007f4b34a23090 R08: 0000000000000000 R09: 0000000000000000 [ 500.453082][T17207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.453095][T17207] R13: 00007f4b33de6128 R14: 00007f4b33de6090 R15: 00007fff46bb2d88 [ 500.453132][T17207] [ 500.973063][T17218] FAULT_INJECTION: forcing a failure. [ 500.973063][T17218] name failslab, interval 1, probability 0, space 0, times 0 [ 500.988540][T17218] CPU: 0 UID: 0 PID: 17218 Comm: syz.6.3305 Not tainted syzkaller #0 PREEMPT(full) [ 500.988572][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.988586][T17218] Call Trace: [ 500.988596][T17218] [ 500.988605][T17218] dump_stack_lvl+0x189/0x250 [ 500.988641][T17218] ? __pfx____ratelimit+0x10/0x10 [ 500.988668][T17218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.988699][T17218] ? __pfx__printk+0x10/0x10 [ 500.988739][T17218] ? __pfx___might_resched+0x10/0x10 [ 500.988763][T17218] ? fs_reclaim_acquire+0x7d/0x100 [ 500.988804][T17218] should_fail_ex+0x414/0x560 [ 500.988848][T17218] should_failslab+0xa8/0x100 [ 500.988871][T17218] kmem_cache_alloc_node_noprof+0x77/0x710 [ 500.988903][T17218] ? __alloc_skb+0x112/0x2d0 [ 500.988941][T17218] __alloc_skb+0x112/0x2d0 [ 500.988977][T17218] netlink_dump+0x1b7/0xe90 [ 500.989026][T17218] ? __pfx_netlink_dump+0x10/0x10 [ 500.989079][T17218] ? genl_start+0x499/0x6c0 [ 500.989115][T17218] __netlink_dump_start+0x5cb/0x7e0 [ 500.989158][T17218] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 500.989191][T17218] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 500.989229][T17218] ? __pfx_genl_start+0x10/0x10 [ 500.989259][T17218] ? __pfx_genl_dumpit+0x10/0x10 [ 500.989283][T17218] ? __pfx_genl_done+0x10/0x10 [ 500.989313][T17218] ? bpf_lsm_capable+0x9/0x20 [ 500.989341][T17218] ? security_capable+0x7e/0x2e0 [ 500.989379][T17218] genl_rcv_msg+0x5da/0x790 [ 500.989412][T17218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.989438][T17218] ? __pfx_batadv_orig_dump+0x10/0x10 [ 500.989469][T17218] ? __asan_memcpy+0x40/0x70 [ 500.989498][T17218] ? __pfx_ref_tracker_free+0x10/0x10 [ 500.989530][T17218] netlink_rcv_skb+0x208/0x470 [ 500.989561][T17218] ? __lock_acquire+0xab9/0xd20 [ 500.989584][T17218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.989612][T17218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.989670][T17218] ? down_read+0x1ad/0x2e0 [ 500.989704][T17218] genl_rcv+0x28/0x40 [ 500.989727][T17218] netlink_unicast+0x82f/0x9e0 [ 500.989770][T17218] ? __pfx_netlink_unicast+0x10/0x10 [ 500.989803][T17218] ? netlink_sendmsg+0x642/0xb30 [ 500.989821][T17218] ? skb_put+0x11b/0x210 [ 500.989859][T17218] netlink_sendmsg+0x805/0xb30 [ 500.989892][T17218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.989918][T17218] ? aa_sock_msg_perm+0xf1/0x1d0 [ 500.989952][T17218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.989973][T17218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.989995][T17218] __sock_sendmsg+0x21c/0x270 [ 500.990029][T17218] ____sys_sendmsg+0x505/0x830 [ 500.990059][T17218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.990093][T17218] ? import_iovec+0x74/0xa0 [ 500.990126][T17218] ___sys_sendmsg+0x21f/0x2a0 [ 500.990152][T17218] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.990219][T17218] ? __fget_files+0x2a/0x420 [ 500.990239][T17218] ? __fget_files+0x3a0/0x420 [ 500.990281][T17218] __x64_sys_sendmsg+0x19b/0x260 [ 500.990308][T17218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.990343][T17218] ? __pfx_ksys_write+0x10/0x10 [ 500.990380][T17218] ? do_syscall_64+0xbe/0xfa0 [ 500.990412][T17218] do_syscall_64+0xfa/0xfa0 [ 500.990437][T17218] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.990463][T17218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.990485][T17218] ? clear_bhb_loop+0x60/0xb0 [ 500.990513][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.990535][T17218] RIP: 0033:0x7f521a38efc9 [ 500.990555][T17218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.990575][T17218] RSP: 002b:00007f521b282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.990600][T17218] RAX: ffffffffffffffda RBX: 00007f521a5e6090 RCX: 00007f521a38efc9 [ 500.990616][T17218] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 500.990630][T17218] RBP: 00007f521b282090 R08: 0000000000000000 R09: 0000000000000000 [ 500.990644][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.990657][T17218] R13: 00007f521a5e6128 R14: 00007f521a5e6090 R15: 00007ffcc9a64e38 [ 500.990695][T17218] [ 501.591120][T17229] veth0: entered promiscuous mode [ 501.599580][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 501.681224][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3313'. [ 501.704849][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3312'. [ 502.054637][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055a8f000: rx timeout, send abort [ 502.087694][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.242276][T17236] bridge_slave_1 (unregistering): left allmulticast mode [ 502.251214][T17236] bridge_slave_1 (unregistering): left promiscuous mode [ 502.258461][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.457788][T17228] syzkaller1: entered promiscuous mode [ 502.464500][T17228] syzkaller1: entered allmulticast mode [ 502.524633][T17251] syz_tun: entered allmulticast mode [ 502.693614][T17247] syz_tun: left allmulticast mode [ 502.882231][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 502.899881][T17269] netlink: 'syz.6.3322': attribute type 30 has an invalid length. [ 503.072410][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 503.076642][T17266] team0: Port device team_slave_1 removed [ 503.258966][T17278] lo speed is unknown, defaulting to 1000 [ 503.266858][T17278] wg1 speed is unknown, defaulting to 1000 [ 503.308016][T17283] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3326'. [ 503.543584][T17288] veth0: entered promiscuous mode [ 504.606208][T17313] __nla_validate_parse: 3 callbacks suppressed [ 504.606240][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3335'. [ 504.647063][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 505.613076][T17335] lo speed is unknown, defaulting to 1000 [ 505.624385][T17333] net_ratelimit: 6521 callbacks suppressed [ 505.624410][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.633812][T17335] wg1 speed is unknown, defaulting to 1000 [ 505.637710][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.650830][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.658135][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.665455][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.672780][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.680103][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.687437][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.694916][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 505.702234][T17333] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 506.810764][T17364] netlink: 'syz.7.3350': attribute type 4 has an invalid length. [ 506.864377][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.143052][T17372] FAULT_INJECTION: forcing a failure. [ 507.143052][T17372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.186863][T17372] CPU: 1 UID: 0 PID: 17372 Comm: syz.4.3354 Not tainted syzkaller #0 PREEMPT(full) [ 507.186897][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.186912][T17372] Call Trace: [ 507.186921][T17372] [ 507.186932][T17372] dump_stack_lvl+0x189/0x250 [ 507.186968][T17372] ? __pfx____ratelimit+0x10/0x10 [ 507.186995][T17372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.187026][T17372] ? __pfx__printk+0x10/0x10 [ 507.187065][T17372] should_fail_ex+0x414/0x560 [ 507.187110][T17372] _copy_from_user+0x2d/0xb0 [ 507.187140][T17372] __copy_msghdr+0x3c5/0x5b0 [ 507.187169][T17372] ___sys_sendmsg+0x1a5/0x2a0 [ 507.187195][T17372] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.187258][T17372] ? __fget_files+0x2a/0x420 [ 507.187279][T17372] ? __fget_files+0x3a0/0x420 [ 507.187312][T17372] __x64_sys_sendmsg+0x19b/0x260 [ 507.187339][T17372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.187373][T17372] ? __pfx_ksys_write+0x10/0x10 [ 507.187409][T17372] ? do_syscall_64+0xbe/0xfa0 [ 507.187441][T17372] do_syscall_64+0xfa/0xfa0 [ 507.187466][T17372] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.187494][T17372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.187516][T17372] ? clear_bhb_loop+0x60/0xb0 [ 507.187543][T17372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.187566][T17372] RIP: 0033:0x7fa81ed8efc9 [ 507.187586][T17372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.187606][T17372] RSP: 002b:00007fa81fb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.187630][T17372] RAX: ffffffffffffffda RBX: 00007fa81efe5fa0 RCX: 00007fa81ed8efc9 [ 507.187647][T17372] RDX: 0000000000000004 RSI: 0000200000001ec0 RDI: 0000000000000004 [ 507.187662][T17372] RBP: 00007fa81fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 507.187676][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.187690][T17372] R13: 00007fa81efe6038 R14: 00007fa81efe5fa0 R15: 00007ffc627bd228 [ 507.187727][T17372] [ 507.814686][T17378] lo speed is unknown, defaulting to 1000 [ 507.842799][T17378] wg1 speed is unknown, defaulting to 1000 [ 507.959323][T17383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3359'. [ 507.968338][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3359'. [ 508.000779][T17383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3359'. [ 508.026406][T17383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3359'. [ 508.424336][T17394] lo speed is unknown, defaulting to 1000 [ 508.442444][T17394] wg1 speed is unknown, defaulting to 1000 [ 508.923121][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3363'. [ 509.032432][T17401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.069019][T17401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.086447][T17401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.109486][T17401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.256118][T17405] lo speed is unknown, defaulting to 1000 [ 509.281639][T17405] wg1 speed is unknown, defaulting to 1000 [ 509.288786][T17409] lo speed is unknown, defaulting to 1000 [ 509.332781][T17409] wg1 speed is unknown, defaulting to 1000 [ 509.737712][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3367'. [ 509.755997][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3367'. [ 509.910944][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3369'. [ 509.923629][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3369'. [ 509.961397][T17425] netlink: 'syz.7.3369': attribute type 4 has an invalid length. [ 509.980915][T17430] netlink: 236 bytes leftover after parsing attributes in process `syz.7.3369'. [ 510.459532][T17429] lo speed is unknown, defaulting to 1000 [ 510.481049][T17429] wg1 speed is unknown, defaulting to 1000 [ 511.166725][T17454] veth0: entered promiscuous mode [ 511.278179][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3374'. [ 511.621042][T17473] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3378'. [ 511.656061][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'. [ 512.275486][T17472] lo speed is unknown, defaulting to 1000 [ 512.294211][T17472] wg1 speed is unknown, defaulting to 1000 [ 512.388222][T17486] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3382'. [ 512.410038][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3382'. [ 512.732655][T17491] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 512.833938][T17491] bond1 (unregistering): Released all slaves [ 513.010570][T17515] netlink: 'syz.7.3389': attribute type 4 has an invalid length. [ 513.269748][T17524] netlink: 'syz.4.3390': attribute type 4 has an invalid length. [ 513.498417][T17530] net_ratelimit: 9785 callbacks suppressed [ 513.498432][T17530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.258674][T17564] lo speed is unknown, defaulting to 1000 [ 514.286031][T17564] wg1 speed is unknown, defaulting to 1000 [ 515.082753][T17555] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 515.163952][T17590] netlink: 'syz.1.3415': attribute type 4 has an invalid length. [ 515.427022][T17600] FAULT_INJECTION: forcing a failure. [ 515.427022][T17600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.449369][T17600] CPU: 1 UID: 0 PID: 17600 Comm: syz.7.3418 Not tainted syzkaller #0 PREEMPT(full) [ 515.449402][T17600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.449417][T17600] Call Trace: [ 515.449427][T17600] [ 515.449436][T17600] dump_stack_lvl+0x189/0x250 [ 515.449473][T17600] ? __pfx____ratelimit+0x10/0x10 [ 515.449499][T17600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.449529][T17600] ? __pfx__printk+0x10/0x10 [ 515.449552][T17600] ? __might_fault+0xb0/0x130 [ 515.449596][T17600] should_fail_ex+0x414/0x560 [ 515.449635][T17600] _copy_from_user+0x2d/0xb0 [ 515.449665][T17600] ___sys_sendmsg+0x158/0x2a0 [ 515.449691][T17600] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.449755][T17600] ? __fget_files+0x2a/0x420 [ 515.449775][T17600] ? __fget_files+0x3a0/0x420 [ 515.449808][T17600] __x64_sys_sendmsg+0x19b/0x260 [ 515.449834][T17600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.449878][T17600] ? __pfx_ksys_write+0x10/0x10 [ 515.449914][T17600] ? do_syscall_64+0xbe/0xfa0 [ 515.449946][T17600] do_syscall_64+0xfa/0xfa0 [ 515.449970][T17600] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.449997][T17600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.450019][T17600] ? clear_bhb_loop+0x60/0xb0 [ 515.450046][T17600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.450067][T17600] RIP: 0033:0x7fb04618efc9 [ 515.450087][T17600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.450106][T17600] RSP: 002b:00007fb0470ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.450126][T17600] RAX: ffffffffffffffda RBX: 00007fb0463e5fa0 RCX: 00007fb04618efc9 [ 515.450139][T17600] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 515.450151][T17600] RBP: 00007fb0470ec090 R08: 0000000000000000 R09: 0000000000000000 [ 515.450162][T17600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.450175][T17600] R13: 00007fb0463e6038 R14: 00007fb0463e5fa0 R15: 00007fff42793f28 [ 515.450210][T17600] [ 516.049044][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 516.096864][T17611] __nla_validate_parse: 5 callbacks suppressed [ 516.096885][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'. [ 516.749013][T17620] lo speed is unknown, defaulting to 1000 [ 516.757229][T17620] wg1 speed is unknown, defaulting to 1000 [ 517.279524][T17631] syzkaller1: entered promiscuous mode [ 517.304799][T17631] syzkaller1: entered allmulticast mode [ 517.675933][T17639] FAULT_INJECTION: forcing a failure. [ 517.675933][T17639] name failslab, interval 1, probability 0, space 0, times 0 [ 517.719016][T17639] CPU: 1 UID: 0 PID: 17639 Comm: syz.5.3429 Not tainted syzkaller #0 PREEMPT(full) [ 517.719049][T17639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.719064][T17639] Call Trace: [ 517.719073][T17639] [ 517.719083][T17639] dump_stack_lvl+0x189/0x250 [ 517.719122][T17639] ? __pfx____ratelimit+0x10/0x10 [ 517.719149][T17639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.719185][T17639] ? __pfx__printk+0x10/0x10 [ 517.719218][T17639] ? kasan_save_track+0x4f/0x80 [ 517.719254][T17639] should_fail_ex+0x414/0x560 [ 517.719291][T17639] should_failslab+0xa8/0x100 [ 517.719315][T17639] kmem_cache_alloc_node_noprof+0x77/0x710 [ 517.719348][T17639] ? __alloc_skb+0x112/0x2d0 [ 517.719387][T17639] __alloc_skb+0x112/0x2d0 [ 517.719426][T17639] _sctp_make_chunk+0x5e/0x430 [ 517.719462][T17639] sctp_make_strreset_tsnreq+0x87/0x3a0 [ 517.719500][T17639] ? __pfx_sctp_make_strreset_tsnreq+0x10/0x10 [ 517.719531][T17639] ? __local_bh_enable_ip+0x12d/0x1c0 [ 517.719555][T17639] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.719584][T17639] ? __local_bh_enable_ip+0x12d/0x1c0 [ 517.719609][T17639] sctp_send_reset_assoc+0x10b/0x500 [ 517.719643][T17639] sctp_setsockopt+0x539/0x1200 [ 517.719672][T17639] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 517.719704][T17639] do_sock_setsockopt+0x17c/0x1b0 [ 517.719731][T17639] __x64_sys_setsockopt+0x13f/0x1b0 [ 517.719757][T17639] do_syscall_64+0xfa/0xfa0 [ 517.719781][T17639] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.719805][T17639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.719825][T17639] ? clear_bhb_loop+0x60/0xb0 [ 517.719850][T17639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.719870][T17639] RIP: 0033:0x7f33b6f8efc9 [ 517.719889][T17639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.719908][T17639] RSP: 002b:00007f33b7d53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 517.719930][T17639] RAX: ffffffffffffffda RBX: 00007f33b71e5fa0 RCX: 00007f33b6f8efc9 [ 517.719953][T17639] RDX: 0000000000000078 RSI: 0000000000000084 RDI: 0000000000000003 [ 517.719965][T17639] RBP: 00007f33b7d53090 R08: 0000000000000004 R09: 0000000000000000 [ 517.719977][T17639] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 517.719991][T17639] R13: 00007f33b71e6038 R14: 00007f33b71e5fa0 R15: 00007ffe944770d8 [ 517.720024][T17639] [ 518.036309][T17641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3430'. [ 518.045422][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3430'. [ 518.054927][T17641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3430'. [ 518.064834][T17641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3430'. [ 518.466033][ T5905] hid-generic 0005:16C2:5505.0001: unknown main item tag 0x0 [ 518.503180][ T5905] hid-generic 0005:16C2:5505.0001: item fetching failed at offset 2/3 [ 518.534716][ T5905] hid-generic 0005:16C2:5505.0001: probe with driver hid-generic failed with error -22 [ 518.785206][T17669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.973683][T17677] lo speed is unknown, defaulting to 1000 [ 518.995847][T17677] wg1 speed is unknown, defaulting to 1000 [ 519.068709][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.076224][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.083535][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.090848][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.098110][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.105518][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.112816][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.120112][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.127376][T17674] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 519.553369][T17697] netlink: 'syz.6.3447': attribute type 4 has an invalid length. [ 519.770974][T17705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3448'. [ 519.785774][T17705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3448'. [ 519.795565][T17705] netlink: 'syz.5.3448': attribute type 4 has an invalid length. [ 519.829136][T17705] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3448'. [ 520.487487][ T5833] Bluetooth: hci7: command tx timeout [ 520.764375][T17746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3459'. [ 520.967691][T17759] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3460'. [ 521.884086][T17777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3469'. [ 523.476809][T17802] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3475'. [ 523.499507][T17802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.506838][T17802] IPv6: NLM_F_CREATE should be set when creating new route [ 523.535295][T17805] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3477'. [ 523.544821][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3477'. [ 523.558930][T17805] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3477'. [ 523.567971][T17805] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3477'. [ 523.598753][T17809] netlink: 'syz.5.3479': attribute type 1 has an invalid length. [ 523.629548][T17811] : renamed from xfrm0 (while UP) [ 523.725674][T17809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.409171][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 555.009201][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 560.130364][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.139464][ T5149] Bluetooth: hci6: command 0x0406 tx timeout [ 568.298074][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.689567][ T31] INFO: task syz.2.2809:15369 blocked for more than 143 seconds. [ 574.697654][ T31] Not tainted syzkaller #0 [ 574.702812][ T31] Blocked by coredump. [ 574.707430][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.716154][ T31] task:syz.2.2809 state:D stack:22856 pid:15369 tgid:15362 ppid:5839 task_flags:0x40054c flags:0x00080001 [ 574.728174][ T31] Call Trace: [ 574.731551][ T31] [ 574.734493][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 574.739061][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.744236][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.749210][ T31] ? __pfx___schedule+0x10/0x10 [ 574.754218][ T31] ? schedule+0x91/0x360 [ 574.758503][ T31] schedule+0x165/0x360 [ 574.762781][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.768279][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 574.778916][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 574.784813][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 574.792436][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.797348][ T31] ? exit_mmap+0x286/0xb40 [ 574.802192][ T31] down_write+0x1ab/0x1f0 [ 574.806576][ T31] ? __pfx_down_write+0x10/0x10 [ 574.811545][ T31] exit_mmap+0x286/0xb40 [ 574.815834][ T31] ? uprobe_clear_state+0x20f/0x290 [ 574.821153][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 574.825963][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 574.831750][ T31] ? __pfx_exit_aio+0x10/0x10 [ 574.836495][ T31] ? uprobe_clear_state+0x27c/0x290 [ 574.841808][ T31] __mmput+0x118/0x430 [ 574.845920][ T31] exit_mm+0x1da/0x2c0 [ 574.850072][ T31] ? __pfx_exit_mm+0x10/0x10 [ 574.854708][ T31] ? rcu_is_watching+0x15/0xb0 [ 574.859593][ T31] do_exit+0x648/0x2300 [ 574.863798][ T31] ? do_raw_spin_lock+0x121/0x290 [ 574.869041][ T31] ? __pfx_do_exit+0x10/0x10 [ 574.873703][ T31] do_group_exit+0x21c/0x2d0 [ 574.878332][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.883663][ T31] get_signal+0x1285/0x1340 [ 574.888226][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 574.909211][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.947937][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.953608][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 574.998945][ T31] exit_to_user_mode_loop+0x72/0x130 [ 575.004327][ T31] do_syscall_64+0x2bd/0xfa0 [ 575.039065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.044456][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.068876][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.073641][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.090289][ T31] RIP: 0033:0x7f0dcdb8efc9 [ 575.094774][ T31] RSP: 002b:00007f0dceabf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.129242][ T31] RAX: 000000000000003c RBX: 00007f0dcdde6090 RCX: 00007f0dcdb8efc9 [ 575.137289][ T31] RDX: 0000000002000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 575.169892][ T31] RBP: 00007f0dcdc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.177946][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.228937][ T31] R13: 00007f0dcdde6128 R14: 00007f0dcdde6090 R15: 00007ffd8b837088 [ 575.237014][ T31] [ 575.259292][ T31] INFO: task syz.0.2810:15365 blocked for more than 143 seconds. [ 575.267166][ T31] Not tainted syzkaller #0 [ 575.319357][ T31] Blocked by coredump. [ 575.324014][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.361843][ T31] task:syz.0.2810 state:D stack:24584 pid:15365 tgid:15365 ppid:5827 task_flags:0x40004c flags:0x00080000 [ 575.399010][ T31] Call Trace: [ 575.402362][ T31] [ 575.405327][ T31] __schedule+0x1798/0x4cc0 [ 575.438985][ T31] ? __lock_acquire+0xab9/0xd20 [ 575.444009][ T31] ? __lock_acquire+0xab9/0xd20 [ 575.479077][ T31] ? __pfx___schedule+0x10/0x10 [ 575.484032][ T31] ? schedule+0x91/0x360 [ 575.488314][ T31] schedule+0x165/0x360 [ 575.528932][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.534475][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 575.568600][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 575.575074][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 575.608947][ T31] ? __lock_acquire+0xab9/0xd20 [ 575.613905][ T31] ? exit_mmap+0x286/0xb40 [ 575.618388][ T31] down_write+0x1ab/0x1f0 [ 575.649319][ T31] ? __pfx_down_write+0x10/0x10 [ 575.654304][ T31] exit_mmap+0x286/0xb40 [ 575.658602][ T31] ? uprobe_clear_state+0x20f/0x290 [ 575.692305][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 575.697174][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 575.729038][ T31] ? __pfx_exit_aio+0x10/0x10 [ 575.733819][ T31] ? uprobe_clear_state+0x27c/0x290 [ 575.759155][ T31] __mmput+0x118/0x430 [ 575.763319][ T31] exit_mm+0x1da/0x2c0 [ 575.767435][ T31] ? __pfx_exit_mm+0x10/0x10 [ 575.789662][ T31] ? rcu_is_watching+0x15/0xb0 [ 575.794614][ T31] do_exit+0x648/0x2300 [ 575.805082][ T31] ? preempt_schedule+0xae/0xc0 [ 575.816341][ T31] ? preempt_schedule_common+0x83/0xd0 [ 575.822019][ T31] ? preempt_schedule+0xae/0xc0 [ 575.826946][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 575.832555][ T31] ? __pfx_do_exit+0x10/0x10 [ 575.837202][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 575.842683][ T31] do_group_exit+0x21c/0x2d0 [ 575.847310][ T31] __x64_sys_exit_group+0x3f/0x40 [ 575.852425][ T31] x64_sys_call+0x21f7/0x2200 [ 575.857130][ T31] do_syscall_64+0xfa/0xfa0 [ 575.861769][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.867864][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.874227][ T31] ? clear_bhb_loop+0x60/0xb0 [ 575.879005][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.884910][ T31] RIP: 0033:0x7f04bc78efc9 [ 575.889384][ T31] RSP: 002b:00007ffc47983118 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 575.897835][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04bc78efc9 [ 575.906189][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.914797][ T31] RBP: 00007ffc4798317c R08: 000000194798320f R09: 00000000000927c0 [ 575.922999][ T31] R10: 0000000000000860 R11: 0000000000000246 R12: 00000000000001fc [ 575.931038][ T31] R13: 00000000000927c0 R14: 000000000006623a R15: 00007ffc479831d0 [ 575.939074][ T31] [ 575.942213][ T31] INFO: task syz.3.2812:15374 blocked for more than 144 seconds. [ 575.950381][ T31] Not tainted syzkaller #0 [ 575.955359][ T31] Blocked by coredump. [ 575.960120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.969521][ T31] task:syz.3.2812 state:D stack:23928 pid:15374 tgid:15373 ppid:5835 task_flags:0x40054c flags:0x00080000 [ 575.994103][ T31] Call Trace: [ 575.997895][ T31] [ 576.000926][ T31] __schedule+0x1798/0x4cc0 [ 576.005486][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.010619][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.015510][ T31] ? __pfx___schedule+0x10/0x10 [ 576.021641][ T31] ? schedule+0x91/0x360 [ 576.025960][ T31] schedule+0x165/0x360 [ 576.030239][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.035728][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 576.041444][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 576.047371][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 576.053660][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.058554][ T31] ? exit_mmap+0x286/0xb40 [ 576.063144][ T31] down_write+0x1ab/0x1f0 [ 576.067517][ T31] ? __pfx_down_write+0x10/0x10 [ 576.072507][ T31] exit_mmap+0x286/0xb40 [ 576.077393][ T31] ? uprobe_clear_state+0x20f/0x290 [ 576.082772][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 576.087577][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 576.093297][ T31] ? __pfx_exit_aio+0x10/0x10 [ 576.098006][ T31] ? uprobe_clear_state+0x27c/0x290 [ 576.103370][ T31] __mmput+0x118/0x430 [ 576.107478][ T31] exit_mm+0x1da/0x2c0 [ 576.111807][ T31] ? __pfx_exit_mm+0x10/0x10 [ 576.116441][ T31] ? rcu_is_watching+0x15/0xb0 [ 576.121341][ T31] do_exit+0x648/0x2300 [ 576.125547][ T31] ? do_raw_spin_lock+0x121/0x290 [ 576.130877][ T31] ? __pfx_do_exit+0x10/0x10 [ 576.135528][ T31] do_group_exit+0x21c/0x2d0 [ 576.140263][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.145495][ T31] get_signal+0x1285/0x1340 [ 576.150056][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 576.155623][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 576.161833][ T31] ? __se_sys_futex+0x36f/0x400 [ 576.166713][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 576.172282][ T31] exit_to_user_mode_loop+0x72/0x130 [ 576.177595][ T31] do_syscall_64+0x2bd/0xfa0 [ 576.182243][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.187451][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.193563][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.198262][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.204239][ T31] RIP: 0033:0x7f38de18efc9 [ 576.208683][ T31] RSP: 002b:00007f38df0810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 576.217220][ T31] RAX: fffffffffffffe00 RBX: 00007f38de3e5fa8 RCX: 00007f38de18efc9 [ 576.225238][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f38de3e5fa8 [ 576.233270][ T31] RBP: 00007f38de3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 576.241313][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.249357][ T31] R13: 00007f38de3e6038 R14: 00007ffd7f3fe920 R15: 00007ffd7f3fea08 [ 576.257390][ T31] [ 576.260513][ T31] [ 576.260513][ T31] Showing all locks held in the system: [ 576.268282][ T31] 1 lock held by khungtaskd/31: [ 576.273213][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.283346][ T31] 2 locks held by getty/5588: [ 576.288080][ T31] #0: ffff88814cc090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.298049][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 576.308460][ T31] 1 lock held by syz-executor/5827: [ 576.313740][ T31] #0: ffff888026e60ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 576.322865][ T31] 1 lock held by syz-executor/5835: [ 576.328065][ T31] #0: ffff88807a859760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 576.337216][ T31] 1 lock held by syz-executor/5839: [ 576.342482][ T31] #0: ffff888026e61760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 576.351641][ T31] 2 locks held by kworker/1:14/13572: [ 576.357067][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 576.368213][ T31] #1: ffffc9000b297ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 576.378575][ T31] 3 locks held by syz-executor/15173: [ 576.383984][ T31] #0: ffff88807c8a8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 576.394090][ T31] #1: ffff88807c8a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 576.403858][ T31] #2: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 576.414476][ T31] 1 lock held by syz.2.2809/15369: [ 576.419831][ T31] #0: ffff88807b1b0ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 576.428990][ T31] 1 lock held by syz.0.2810/15365: [ 576.434113][ T31] #0: ffff88807b1b2ce0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 576.443251][ T31] 1 lock held by syz.3.2812/15374: [ 576.448401][ T31] #0: ffff88807b1b57e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 576.457787][ T31] 2 locks held by syz-executor/15571: [ 576.463418][ T31] #0: ffffffff8f2cb208 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 576.472488][ T31] #1: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 576.483464][ T31] 5 locks held by syz-executor/15603: [ 576.489064][ T31] #0: ffff888026d54dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 576.499046][ T31] #1: ffff888026d540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 576.508749][ T31] #2: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 576.518858][ T31] #3: ffff88807d33db38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 576.528255][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 576.539254][ T31] 3 locks held by syz-executor/15606: [ 576.544678][ T31] #0: ffff888033554dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 576.554754][ T31] #1: ffff8880335540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 576.564539][ T31] #2: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 576.574661][ T31] 3 locks held by syz-executor/15614: [ 576.580140][ T31] #0: ffff888037530dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 576.590154][ T31] #1: ffff8880375300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 576.599991][ T31] #2: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 576.610179][ T31] [ 576.612541][ T31] ============================================= [ 576.612541][ T31] [ 576.621050][ T31] NMI backtrace for cpu 0 [ 576.621072][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.621097][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.621111][ T31] Call Trace: [ 576.621120][ T31] [ 576.621131][ T31] dump_stack_lvl+0x189/0x250 [ 576.621170][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.621201][ T31] ? __pfx__printk+0x10/0x10 [ 576.621238][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 576.621277][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 576.621313][ T31] ? __pfx__printk+0x10/0x10 [ 576.621341][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.621379][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.621418][ T31] watchdog+0xf60/0xfa0 [ 576.621446][ T31] ? watchdog+0x1e2/0xfa0 [ 576.621476][ T31] kthread+0x711/0x8a0 [ 576.621510][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.621532][ T31] ? __pfx_kthread+0x10/0x10 [ 576.621564][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.621589][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.621614][ T31] ? __pfx_kthread+0x10/0x10 [ 576.621644][ T31] ret_from_fork+0x4bc/0x870 [ 576.621670][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.621702][ T31] ? __switch_to_asm+0x39/0x70 [ 576.621720][ T31] ? __switch_to_asm+0x33/0x70 [ 576.621737][ T31] ? __pfx_kthread+0x10/0x10 [ 576.621776][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.621817][ T31] [ 576.621827][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.767869][ C1] NMI backtrace for cpu 1 [ 576.767892][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 576.767913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.767926][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 576.767954][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 41 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 576.767972][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 576.767997][ C1] RAX: 303cda12771d6300 RBX: ffffffff81967b87 RCX: 303cda12771d6300 [ 576.768012][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bb05 RDI: ffffffff8bbf0460 [ 576.768025][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 576.768039][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ccb70 [ 576.768053][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395eb58 [ 576.768065][ C1] FS: 0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000 [ 576.768081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.768093][ C1] CR2: 00007fff4f76bffc CR3: 0000000033b98000 CR4: 00000000003526f0 [ 576.768109][ C1] Call Trace: [ 576.768119][ C1] [ 576.768126][ C1] default_idle+0x13/0x20 [ 576.768152][ C1] default_idle_call+0x73/0xb0 [ 576.768180][ C1] do_idle+0x1e7/0x510 [ 576.768204][ C1] ? __pfx_do_idle+0x10/0x10 [ 576.768310][ C1] cpu_startup_entry+0x44/0x60 [ 576.768341][ C1] start_secondary+0x101/0x110 [ 576.768370][ C1] common_startup_64+0x13e/0x147 [ 576.768406][ C1] [ 577.104100][ T1341] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.158599][ T1341] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.266432][ T1341] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.345445][ T1341] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.427155][ T1341] bridge_slave_1: left allmulticast mode [ 577.433058][ T1341] bridge_slave_1: left promiscuous mode [ 577.438852][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.450365][ T1341] bridge_slave_0: left allmulticast mode [ 577.456127][ T1341] bridge_slave_0: left promiscuous mode [ 577.462025][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.943151][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.954423][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.964672][ T1341] bond0 (unregistering): Released all slaves [ 577.983610][T13570] wg1 speed is unknown, defaulting to 1000 [ 577.989643][T13570] syz0: Port: 1 Link DOWN [ 578.064217][ T1341] tipc: Left network mode [ 578.281502][ T1341] hsr_slave_0: left promiscuous mode [ 578.287512][ T1341] hsr_slave_1: left promiscuous mode [ 578.308248][ T1341] team_slave_0: left promiscuous mode [ 578.315288][ T1341] veth1_macvtap: left promiscuous mode [ 578.320846][ T1341] veth0_macvtap: left promiscuous mode [ 578.326575][ T1341] veth1_vlan: left promiscuous mode [ 578.331929][ T1341] veth0_vlan: left promiscuous mode [ 578.771404][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 579.398266][ T1341] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.469134][ T1341] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.524884][ T1341] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.585260][ T1341] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.687623][ T1341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.698275][ T1341] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.776800][ T1341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.787276][ T1341] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.853293][ T1341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.863905][ T1341] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.952959][ T1341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.963371][ T1341] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.085233][ T1341] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.165947][ T1341] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.228442][ T1341] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.304990][ T1341] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.414699][ T1341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.496906][ T1341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.574810][ T1341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.653094][ T1341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.745109][ T1341] batadv_slave_1: left allmulticast mode [ 580.751409][ T1341] bridge0: port 3(batadv_slave_1) entered disabled state [ 580.760539][ T1341] bridge_slave_1: left allmulticast mode [ 580.766202][ T1341] bridge_slave_1: left promiscuous mode [ 580.772217][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.781485][ T1341] bridge_slave_0: left allmulticast mode [ 580.787150][ T1341] bridge_slave_0: left promiscuous mode [ 580.793271][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.805954][ T1341] bridge_slave_1: left allmulticast mode [ 580.812056][ T1341] bridge_slave_1: left promiscuous mode [ 580.817821][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.827287][ T1341] bridge_slave_0: left allmulticast mode [ 580.833343][ T1341] bridge_slave_0: left promiscuous mode [ 580.839347][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.850934][ T1341] bridge_slave_0: left allmulticast mode [ 580.856602][ T1341] bridge_slave_0: left promiscuous mode [ 580.862631][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.408746][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.420408][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.430952][ T1341] bond0 (unregistering): Released all slaves [ 581.444954][ T1341] bond1 (unregistering): Released all slaves [ 581.761694][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.772498][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.782750][ T1341] bond0 (unregistering): Released all slaves [ 581.882489][ T1341] bond1 (unregistering): Released all slaves [ 582.233502][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.244543][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.254676][ T1341] bond0 (unregistering): Released all slaves [ 582.655108][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.666346][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.676580][ T1341] bond0 (unregistering): Released all slaves [ 582.796681][ T1341] tipc: Left network mode [ 583.369765][ T1341] hsr_slave_0: left promiscuous mode [ 583.375898][ T1341] hsr_slave_1: left promiscuous mode [ 583.386630][ T1341] hsr_slave_0: left promiscuous mode [ 583.393176][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.402486][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.410746][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.418162][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.430173][ T1341] hsr_slave_0: left promiscuous mode [ 583.436393][ T1341] hsr_slave_1: left promiscuous mode [ 583.445872][ T1341] hsr_slave_0: left promiscuous mode [ 583.503839][ T1341] veth1_macvtap: left promiscuous mode [ 583.509896][ T1341] veth0_macvtap: left promiscuous mode [ 583.515581][ T1341] veth1_vlan: left promiscuous mode [ 583.520949][ T1341] veth0_vlan: left promiscuous mode [ 583.527392][ T1341] veth1_macvtap: left promiscuous mode [ 583.532979][ T1341] veth0_macvtap: left promiscuous mode [ 583.538616][ T1341] veth1_vlan: left promiscuous mode [ 583.543973][ T1341] veth0_vlan: left promiscuous mode [ 583.550109][ T1341] veth1_macvtap: left promiscuous mode [ 583.555627][ T1341] veth0_macvtap: left promiscuous mode [ 583.561343][ T1341] veth1_vlan: left promiscuous mode [ 583.567850][ T1341] veth0_vlan: left promiscuous mode [ 583.574558][ T1341] veth1_macvtap: left promiscuous mode [ 583.580226][ T1341] veth0_macvtap: left promiscuous mode [ 583.585854][ T1341] veth1_vlan: left promiscuous mode [ 583.591275][ T1341] veth0_vlan: left promiscuous mode [ 584.208421][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 584.247880][ T1341] team0 (unregistering): Port device team_slave_0 removed