last executing test programs: 4m35.681558432s ago: executing program 2 (id=5394): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e", 0xad}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1}}], 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r4, @ANYRES8=r3], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'rose0\x00', 0x10}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x2, 0x76eb) socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 4m35.436626332s ago: executing program 2 (id=5400): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x2, 0x6, {{0x10, 0x4, 0x1, 0x3, 0x40, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x84, [@dev={0xac, 0x14, 0x14, 0xa}, @remote, @empty, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x28, 0x1, 0x1, [{@multicast1, 0x3ff}]}, @lsrr={0x83, 0x3, 0x20}]}}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x2000300, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040007057007c78d9292cb0000", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r9, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20002040) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r10, &(0x7f0000001440)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) 4m34.405319142s ago: executing program 2 (id=5415): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000100)=0x1, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2ff49051d920611, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0xfe, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2, 0x0, 0x1, [@generic]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000500)=[{0x7, 0x3, {0x0, 0xf0, 0x2}, {0x1, 0x1, 0x1}, 0xfe, 0xfe}, {0x1, 0x8000000001, {0x4, 0x1, 0x3}, {0x2, 0xff, 0x1}, 0xfe, 0xff}, {0x2, 0x0, {0x1, 0x0, 0x2}, {0x0, 0xff}, 0x0, 0x1}, {0x3, 0x2, {0x1, 0x0, 0x4}, {0x2, 0xff, 0x1}, 0x1}], 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) 4m33.995470197s ago: executing program 2 (id=5417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20054880}, 0x40440c4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="af268932b41a888a2cc22618d5f474bf387f14b3049b5a32eae0638b737a593682b48d67eb4b44a482f46aaf58ed4654880f6263a6e3136c64118ac05d046b0aa7a153b274b85eb010c3dc55f9458fed2d3d6a90401200590c2938ddb768bffad112f33fd68fbd4afa91cbadedc3e780fe4d0481d21c188873851d92f16189e498d91dd275", 0x85}], 0x1) 4m33.857701582s ago: executing program 2 (id=5419): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, &(0x7f0000000780)=""/99, 0x63, 0x2001, 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4000800) r3 = socket$tipc(0x1e, 0x4, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f00000006c0)="0d612c10150bbfda8a172837ee3897325f9fa9480b707c0e8606af24f2695bc78ec68f1083694b6d2e1b3315b08924ae3adbe2ba29bb3c2070e9df8002e907a3f2ee23b451f5653465a138511b3e4b311bb38dbee4e1293032a08f3ff8c1401d955b02ee3185553f3bd7848224aa7820b4b42932c10e59e0208956b057ca7043ae43c33d007d30e32d3171e91827083dceb0b13a2d8102b4106b4a3f5bfd992b332b30a6fce114de88610040ab8e2a689ac9bc23c9edf2e37046a751b07104e4693498f9fb0d9fa8b27417bcea9d3a4fa96e37b6ea0b66a6b6fbcd12d85b24762775d49fc9a370cf6dda486b96fdc7375909e271485ec02ae71e5fcce5c2ddb92f089eaace96b3337c16e297eef52e4e579bed5e6d7ca095908d7d5c239f8ace29cfccb49294faa696a5aed28b435180d7f6e54cfa3d9a41f7bae51465733e5e98bfa96ef227931178c17415dfb35dfe0ec3f00eef20edbf6a7649417e1b3e5587c9605eaac8a8b0bb6ac4ca4a555a3940dae10aec0df46e06798948b88a875a95c4ddd67faafaaabb66c9de583600d5a17800e04f4e365348f17a8b5da39cb93e00c7ced564c6f62c9208560b85f2ba5f6e6b5dfd23b58ff85fade7c6f94c6f92ddac7591efdd1cd9def36fc100940fc2c22bc56ffb1b26c02d30015d6da9a81fde11f3ef08375427cf83963bab83940650d0db960b2a5cdc94348c0334ac83476d617c9b0cb2ec251753f6c5c37203bd4119726d5ea26ec965e174395a8657dbea23e0b9499d3045328ad61dd4238b207200eb100bba933ddebbed33c6f2633a242535c313ee09df66370100fd859493c87ffacc52a2d14b264ece76cf296b603bd3051aaefa78d792ad387a164e9df431126bcf27d72eb76b8eb734a51de9ffcfea6573387b238a398e3ad2dc38c136777f0792bbcb6a949ae6ccc85fd9f3c4c42d51d6b4829cf4804295caa8d4b76dccbfabb0fe95f896bbd201174ca38716615c9ce35263f1667ce2d2913e190023bb106d83eacffda6308e4b393143425386ff2c43a0df48583216482866ab7759d0183f74f2bd48bf710edf94d5d6b6c037f6cdbdaaeab3beddd4df1b2d9d464c03902b6a8def2232cc690468caa8dc37563a14800c0654e2e121cc1173aa2fc613a00eeb1fef542c12456231424b4a00f412c98e81da276d854951ebfafd4c6c1d966e93843ed5273e321dc3deb7b59d31734d917f861ee82dbe3dc3a51d81074e9a4081bb438b0554efd0d704e5776cc1e5a400c9ce6ed4663e1afa8526f5dfe51be5a20d7a72dd6f4ef3ad113ad180e0e5712e25cd442c08afc57f265ee8b6b5d31c72c374ed123ec1c1b008fe5c81ce2a6a7458af50635b861c567285e361f86b49aad7c06a6af0c59a5d1898afc401928f187e948a636f0fe6813a07e4bb53664f7a7af42739d2be73ebc520ea78209feea33be8e9dac7c71a65868f36242b95f4f17339e3136cc49ad8679d2f24f978221a47aac900263c2a04fcd96b9f631caa109c33c78213e27f3abb1cc90dd806901723731723afa9810eb4d6529bd1d0a9d5b8ddb7bba1124d86977d45b9ce99317a457063ed7b35f8e136e175f6b6a4e0ac33ee5084caa1f7974afcf96b2b2e53891feb89be8f2b0da5fb8f05ea6dacf5b0ba5c0b4c8f5371e0ede86019051adff8911759d915714ff133a5cd9a00dbb2c4d1f7186a7bd62694a992be2489baeeca6d3b4b80c0773bd7fea5f38d9339fa924b8767bcf213bac2745b85b34c5dde8125fa4aa4f82a977796d9cf264408244ae3e928254a3bd8465b2dcca9e8a53c04fd16e9a77c68881cc07d8db637cc50ec38347fa4acc9df66080ea69780c878465564a05ff53e56d8f267c0eb3466fc0cea4550fa8f72755c473f2df19e8f5f4aefe48bf9995b0be5e533759a26177b82d46b3388328f3d57e56a9789919e8e54c06c9b9490812d7a24deca484af904bf6a68a330577f9dc2891318cb30cb25ecb388d131a596b36a4179c30c0c391a737973179b04f25c4ff04690fafd373a778ae2c99196e13f6bde39557daf73ae6336663f980b33352da9e842ff0d4d6c314befdf4629b89acbb22a990cbeca3baa0ef941a070904f40bc7612b472383ac360ba5ccdfa0d0d3fe8693a6bce3100ecfb97d8baf2ecd7a8b1675ab00cb5364917271631d40fbbfea443e4817d05180079eb2927693d19901b1cfe5be1a240a89c8998db2bc91f51ecec6f9e03ca725007bfcf9025909b6e71a12cc27dc37f7ba075a9c00976f3b0642cfa8157ee0ad93e161e5eb70d47d005cfab953914bbb66bbe46fb504df4c3e61b8fc21f8590028ea37f07592b5994175302c3c16c144c6a3369ca6c8183999bf4b27be7dbdbc1207a0be41424d06f860b879b139c503de79196c7448501112642e161cba60df354419e6ba4e368d7e924f22317e1edf4d49a54bacd03146b0e1edef9a4edfaa01f9b73aae82050e4c8ab96c43b12545a9697b8d0cc7d364bcfc160806168e8f4206c07ec216ceefa2849834085ae2991045571ee2c41de0a4e7f015b8bbe7a074130929107fba4649063686e3b6bd0863cc56be99fa51418360eaa9195db348c3003458aeee58b93ac729fbcfbe24b974a5263c7bbbc07314841c870caa10e6265c99af3fce1bd4fdd30d6e32694f207f027be9bc73f29074d9386e3618901f4eaeb63f3c430b4fdd18cb3108a98cce5672e027546af044cfcd83f372abe78fe92bb2df93ce2decbd8c9e5510b4625caa5ab74a43f1f09b6a2fca5aeb28e1f25a91a1ac95781dce67cbdcc73005afacd5ff0d62eecd25e8cb6b36d3d1d1ca1575d77cbab3a6ac69d7e27e90fc4c9daad29f0cd19409c8b925d8bb8a2fe5585ceceae33bcc329cd26915fbc5eb79cdf72d6eafe9dce60d7cd337ec633b3341260f843ed7d21616f88f3917e0fa8f8efc6f72177bb4aa2c7568f2a6f27397716de807d65db7aeee5d08f48c31ccacf9f94468dd14098fc2573fde7dd6eedfccf472f230d56b49265b999a3f1d42601eb268a7bfa6f03b7e06193c2b253e83f956bf2194f27d8e0d044244cef6785a2329e7d82c78ebce481a0e9412bb7dafde8d4a536bf2805e21e76ee289abcfaa93a19743b7b376f309242f7d34a3d3f152064e1c40a2bb187f00f854d91dfc26d458ae3f0166a164c45c3020b80ecf9905c8870def82f5a466776e0b8772fa931690b8bc641372dbd04619231a3d1ea9f8afb2834d5e13d110b129de527cb3f4e936d5f64757842c43af36972c18704c58f34b47555a2813637c1f126a1de14a129e6fb4dfebb8135cc7ea6d18a23fda3980f626bcb5fdc9b878f0225efab398ed2ac76384d3259b03ab592efc82485b2c4c0014d79f2ac87f64dbc8028631c178ed39da0113998939db4389bfe7d92a0092d571c0d026aa71c70c4fb30eebfb8c5d1305e02efccedf90652cede8443b92e63a2c30db57347782e1388fd27992694332708fe7ae50d1466b8b698655e090c9fe30e2f77192c7f7073ceb670d2311d108c9f5fd16bda8e3da20c31f369c4612f7647e3da9aca491750b51b0b84c676c4b773543fdf5f92634f1fefa1ed2230fbc6b9bf7e1a0b88dd2b7882ae18106930a79cd8150047c7ad0e4393d9595e743d877a2dcdfa1fabb7b136e6c1e1ff92ef258aa44274e0c3ed755e63befbb5f9865ec6f8382547d34ba590e14eecd851c1002f850bfb672de51bbac8ed00bf5ca05aa9f5115b26d7cb154e4e80c064259baaffeb485384542acb83b3dc972e7886178a1d329b071b9045b7aaa7758266014eced858a431feab9a34226966d597454e963a7cdeb2bd884e15eba854e34e74f07304a6b198bb7516f0f6eb23696dc456345eb30d4ac6ad0aaa8abe664a2f961add7d322ff98e123225219fb0689d1029dcc638b23b1fb38a9174b6959c63dfb23dd5a0bf1c6b33587b6df6086c9a1bfb779b5a21fdd5818beadcea4b273ba43641f02faeac4e80b075b6c1c338754af5b1c8899cf1574dfba02356479ee9572d9ee444193fe3adc23123df523e8803ce1ebafe89db56a3a6ec8d0df064c1854c9ffe25f62aa9657d4961cbed76d379f5d511c31d067acbca4286083c942cbc05d02238d5951a413ed6d653455099d91000a26d7e8a4546516d62c87ec11573d316469e686885c162cfdaa84a0e92c86d192db4f32cc101d189df5cf738810d7e9cc8932c18675078173a715a18a350c26a66b02da8e678f63e531302b13d0b64676ef746abfeff4908271d5f707786b328dfe8da4b69530e6213e0577539ce6e2ccb9325ab4272826816b870c3ff05a3bff349e8374b7ebb56a3071c9c9fc124faf1806735648e37244f3bf358c71eb266b9095b2e1cc14f67e689f3e14902ea548334642b2efa592c938c1ba8ce609e11787f0f63563363de3ca7a5c8033f76225d995d1b3fa5c3968e7b2f205f873e0c1e18307f07d4defff779dc57a67a16ceea120ae5b4880f5d1ce067b0d2b436339d1c58804ccb782498b852d83fbe63b443164d4278baa5b52b5d7e7747733acc4e6ce53bb32b52431dc6809bcf92f8f225291c2111ddbc9a77e01b54d9dbb774ae24ba04e37c9fc697fad580b44e4fadb2b93481d3b2fbaa1aeb417a385496829a09fe623c43b7f4b09da0c571c5548b80841ad9f6048730cc7ab6efbb8865a8a8aa45e33490886d116b9bbe38f079a766a4e1a3ad626eb241c6708a60f6f682adffcb2ee36f38c2e3b68523eee2fc3099e802ea414fe7700696f191f173deb18d357084deb98bcee328287e87809d74b1389c7a96afafd0d4451440e3feb7127c7e97339dcb8f9f81daa36bc496c92f3bcdc57fffb74994c1bbb251a29b2bde5787036233b02832b4637f5008ff521b77b65c3b2e0ffd9b04eaf6dbdb0edc1eb3ccf2a4e51fa732c21cc13ffd941238f144968fa13074b30f0b3d5415c56809b5433096ecdb2042a2b3754811dfabd9ac83b9d44522537519dd4b6f59c44ff11b31447ac8241f5d7298ac56ee0c6adc21027184249e13919cfaab328ededf824074b0dbdac88e678cc4b237fd39252d3cd5c2ad33aca8c2de6c843f0efa5be057934dc81ba3a0c1c54478ad95c55d6579f4aaca2d2c7760df4226fca9a20adc1874346c3d4fb2fb515e0b2b5f609faa44b2e1b2f66021a28653ec28842a4090bd996fe8f9520552d7f1e1b40107f8a893e4b4fcc2d4efdfda74326a8977fc833997fbe2404e1e2f1eb49cfb548cf0af13bcb2325c8ddcbcbfcf0c4db1a711cb9b8719b26e91ee3a43a9b2f91b52303ab711e8324aa8b636aef13c20c63ca1315022c49d637f306c2deb62e3ce2b93521bc028e41efc393c22096447fc481249f6040406a0bd46eb2d6cb58b2ebd7892086873bd356dd94bbbf010f4c928d8b948073d25b076e231581d967bc487d104ab5c95c1b996620647a8198c13b4aed351f7d9a62ad27240bdb4ec388e5ea80d998c15217a174dbbac07bfb1012b48f86f7856e60de42127fd800898c2fe2e8b60334d2b71c4807f75074dc7b4c40847548a9615437fce320d21122419fdd2a7359f3d1c4a68044719477b42aaf88aa6a85e12976bfa96d3956098214c86a7956b3c813d3127bf25c60f458e6e333d7de4834090ebe85bbfe4e84d94ce4e1bc2033701b0611e62c37f57e995f8d264adb84f4485fdd9483710515c01b68f6cdcfe16a1c354ac14f128df3d057ffa0aebd91f225b94472eeda0a15a6c474f648aff524032169e584ad5244791990bdb2c5efb0d59dcdda09c67", 0x1000}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0}, 0x40) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000380)={@remote, 0x0}, &(0x7f00000003c0)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @generic={0x4, 0x4, 0xc, 0x0, 0x400}, @generic={0x58, 0xf, 0x8, 0x2, 0x40}, @ldst={0x1, 0x9045297eba728915, 0x3, 0x9, 0x8, 0xfffffffffffffffe, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x8, 0xad, &(0x7f0000000500)=""/173, 0x40f00, 0x10, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x8, 0x80000000, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000680)=[{0x3, 0x5, 0x0, 0x1}, {0x4, 0x1, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex=r7, 0xffffffffffffffff, 0x2, 0x10, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) connect$tipc(r3, 0x0, 0x0) 4m31.432024188s ago: executing program 2 (id=5433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000003050000006d"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000005800000016"], 0xe8}}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) 4m16.325688942s ago: executing program 32 (id=5433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000003050000006d"], 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000005800000016"], 0xe8}}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x39b3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) 2m42.547717266s ago: executing program 4 (id=6110): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56441, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0xffffff01, 0x2, 0x8, 0xfffffffb, 0x2, 0xc}, [@TCA_NETEM_CORR={0x10, 0x1, {0xc, 0x1, 0x5}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008065}, 0x204c0c0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0x2}, {0xfff1, 0xb}, {0x2, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40000, 0x6}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x8040) 2m42.05372491s ago: executing program 4 (id=6115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163437412ba8af23dde536a5bfd391eab1cd545458e5da85a7f09fe52eb6ff7ed2517a99beef553019db75adea3dbf33cbcfc50380f6bc37af56dc6b5d982ab29f0f9784f1201b81", 0x52}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40891) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) 2m42.049947438s ago: executing program 4 (id=6119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x2, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20108}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x490) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 2m41.856217144s ago: executing program 4 (id=6120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000440)=0xc) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="05031400d3fc140000004788001c09102c28a865efa595cb9aa8fd8bcf4ff3ffd4d73ebbc7213e4202f208b76097e3d3a1f1d7e2e1f231387d50fd6bb7dd3e2999c468d9e3a75ed490fb99fd85dabdb3888c126046b3aaa6e6072d8b7c6250671b6b39c73c3fe649e6ab86e468d3e62ea249008903008dfe082915ebde8cca04e20f7be0336e4b5b03a42b9e110a451af9fb1e103262743202f9637dee941a61aa1947701dc0bfcc89ef6b4d9e9b966fc2c94bb5797ed11383f2ac815a25e0ca6c35", 0xc2, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5}, 0x14) 2m41.25457092s ago: executing program 4 (id=6124): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r4], 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) write$cgroup_int(r6, &(0x7f0000000200)=0xf, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x15, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r8, r6, 0x2d, 0x18, 0x0, @void, @value=r5, @void, @void, r7}, 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x2, 0x9, 0x3}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r9, r1, 0xe, 0x10, 0x0, @void, @value=r10, @void, @void, r7}, 0x20) r11 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r11, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r11, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r12, 0x118, 0x0, &(0x7f00000002c0)=0x7, 0x4) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) 2m40.788180186s ago: executing program 4 (id=6125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r1, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd2d, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4044007}, 0x4000000) 2m25.666728378s ago: executing program 33 (id=6125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f000008b000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r1, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd2d, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4044007}, 0x4000000) 10.315116966s ago: executing program 5 (id=6654): r0 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x28e4f000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfeffffbf}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4}, 0x94) ppoll(&(0x7f0000000180), 0x1f, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000180)={[0x9da6]}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x1000) 10.098815307s ago: executing program 5 (id=6657): r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x6, 0x8000}, 0x4) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f080001002700000027023800460002610000a8"], 0xfd6c) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x2}, {0xfff2, 0xd}, {0x4, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000890000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r8 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xe, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x40000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r10, &(0x7f00000003c0)={0xa, 0x0, 0x380080, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x48c0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) socket$kcm(0x10, 0x2, 0x0) 9.780075588s ago: executing program 0 (id=6660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x7, 0xd, 0x44, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x30}, 0x7, 0x8000, 0xbc0, 0x8000ffff}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xa207, 0x9, 0x1, 0x0, r0, 0x1ff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x3f8, 0x0, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b740f6dba5f735b3690000008600000018110000", @ANYRESHEX=r2, @ANYRES32=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x21, 0xcc, 0x0, &(0x7f00000005c0)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463aed4ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e37d3fafe24909fbd687aa50db907df76599e8004316955c93326a4066c68b5e3d7104c670750a4b304bb16fe3a5b11ec0ac5d370e1c5d7adbf579185eaed6bb19676ef6917b69395ceb34ed544721b4383748fd842d5bec3d41cf335891706e6ba650742e0e97019f4da4a660233fce2f35190c3a415d3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0xfeffffff}, 0x50) 9.533778738s ago: executing program 0 (id=6663): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, 0x0, &(0x7f0000000fc0)) (async) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, 0x0, &(0x7f0000000fc0)) sendmmsg$unix(r4, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000300)={0x8, &(0x7f0000000280)=[{0x1, 0x9, 0x8, 0x1}, {0x6, 0x7, 0x7}, {0x5, 0x2, 0xff, 0x1ff}, {0x9, 0x6, 0x72}, {0x7, 0xd, 0x5, 0x8}, {0xf85, 0x8, 0x8, 0x4}, {0x814, 0xe, 0xa, 0x7f43bda}, {0x1, 0xfc, 0x1, 0x5}]}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004e9d0000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r11, r1, 0x25, 0xd, @val=@perf_event={0x8000000000000000}}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @loopback}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @loopback}}}}}}, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000080)={0x4, 0x6, "569e9a", 0x0, 0x4}) (async) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000080)={0x4, 0x6, "569e9a", 0x0, 0x4}) 9.199252888s ago: executing program 0 (id=6666): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000034c0)=[{&(0x7f00000004c0)="9745010000002000010000ac0a3324491fbb00000098894633120b55", 0x1c}, {&(0x7f0000000500)="e07ecb0f5d6d7afc", 0x8}], 0x2}, 0x24004804) shutdown(r2, 0x1) 7.653335373s ago: executing program 0 (id=6676): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffbff}}, 0x80000001, 0x530, 0xb, 0x12, 0xc, 0x7ff, 0x9}, &(0x7f0000000340)=0x9c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="00400000000000000a004e240000f582ff01000000af0000000000000000000100fcffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x20040010}, 0x20050800) 7.274220874s ago: executing program 0 (id=6679): r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2b, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES64=r1], 0x78) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000180)=ANY=[], 0x4}, 0x804) 4.658864734s ago: executing program 6 (id=6696): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x11, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300030000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e24, @empty}}}, 0x90) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}}, &(0x7f0000000140)=0x84) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) 4.522120044s ago: executing program 6 (id=6698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f00000001c0)=0x20) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x2c, r1, 0xd, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 4.39604261s ago: executing program 6 (id=6699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000043000000000000000000851000008200000020000000000000079500007b00000000850000004a0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146, 0x41000, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0xc000) 4.341286891s ago: executing program 6 (id=6700): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r1}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fe00000000000000fd000000850000002f000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00ec000000f0ffffb6050007000000000000090c0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.999294414s ago: executing program 6 (id=6703): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) r3 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) getpeername$packet(r3, 0x0, &(0x7f00000001c0)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 3.126291863s ago: executing program 6 (id=6708): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r9) (async) close(r9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 2.804739456s ago: executing program 1 (id=6711): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4d21, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="8003000083896c53550fc16c67e1cdda28a1a19cba7d6618304401741fe5248a90e91d12d233271e5508b83affbd472a9752777393099a2e4c450347958198f49088095ab483c625c5ae78bddbe09805e93907", @ANYRESOCT=r2, @ANYBLOB="100027bd7000ffdbdf253900000014015a8004000280680000800b0001000509480b0116300009000100036c1612020000001f000200502c12550107072d46382c2930031f461a4f29213f260c5127110d001c00010024363044d0c7afcd0c4186cf3cf6bda2d47a629118031806121806011601046c2403066c060b361605000700020000000500070002000000740002801600020006312b223e4c1c3328160411215021000a4300001d000100066c6c2403091809046c16164605060630166c301b0409050400000005000600000000002f000200454d541156564d0140474b322b032a53042a3f570c131a4f291542283b1f2347485749092a020c0f4c551f0030000380050004000100000005000600010000001400030001feff0701000400000818f308008d5b050006004000000058025a80b0000380050007000000000024000100120c18091618093601486c0404045f6016041a186c03032f1201241b301618361400050001000100400009000700ffff00100000050004000000000005000400010000001500020010120327414b1c0c32204b2d2150190e03000000140003004003fcff0700010007000800ff01000319000100306c6c3005306c60240924161b191b3612183606360000001400030006000500ffff5e00160c07000500ff7f240001800e0001000c0416051209060c180c000005000400010000000500070001000000900003802e0002001840383a483e06434e2510201f0c0f2a472934000f402408271a03141505031c2900000500070002000000150001000248361212066c01480116016e030930000000001400050008000700ff037f0000000d0007000200050007000100000005000600020000000500040000000000050004000000000005000400000000000400028020000380050004000000000014000500080087bd8000ff030f070800010001fc640000800500070001000000140005000b00090003000400ccfbff0100020006003c0002001f283b0c2335173621183e2146494f293057521047384105101f3c44170329383c3b2824282157481e08522d254d31231a2c531d4e1f4821080002003a24304b0c00008005000700000000005c0003804e0002001d1d262b074c4440391b4a2155282257314652363648193f2041394502500c0c004f0f512a31181c002b1009511c0d2a2102534c0116210515543d414e152b39451c5320"], 0x380}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppoe(0x18, 0x1, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000040)={0x200, 0x5, 0x6, 0x5}, 0x10) close(r4) (async) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x5, &(0x7f0000001100)=ANY=[@ANYRES64=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0xffffffffffffff9c) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001f80)=r7, 0x4) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$alg(0xffffffffffffffff, &(0x7f0000000e00)=""/254, 0xfe) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r9], 0x7c}, 0x1, 0x0, 0x0, 0x6004}, 0x4) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x8d5}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a0129a82969480100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001f75b7e7726930ce3e98f76c34b91521b0a1407511bf204ed5afd6f16c50c7b56ab7ec404ee4bc33854cb52a675a7a68a6455fe7032ff7431198c49"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$inet(r0, &(0x7f0000001e80)={&(0x7f0000000540)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1400000000000000000000000100000008000000000000008000000000000000cf222011d7750000000007000000018917d2000000007f000001e0000002ac1404aa7f000001442cb281ac14060000008749ac1414aa00000009ac1e00010000000bac1414aa00000005ac14143900050f5cac1e0101ac1e00010a010101833c5cac1414bbac1e0101070f1864010100ac1e00016401010200d22d072f7e6c4987af542e55fb4a"], 0x98}, 0x800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x28}, 0x94) 2.03101164s ago: executing program 1 (id=6713): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000f40)={0x0, 0x8, 0x1, [0x7, 0x2e, 0x0, 0x7, 0x1], [0x2, 0x10000, 0x4, 0xffb, 0x7, 0x2, 0x1e, 0x671, 0x200, 0x10, 0x6, 0x800, 0x7fffffff, 0x6, 0x8000000000000001, 0x7fffffffffffffff, 0xfffffffffffffc00, 0x2, 0x9, 0x6, 0x0, 0x2, 0x4, 0x1, 0x4, 0x7, 0x0, 0x9a, 0x1, 0x96f5, 0x9, 0x40, 0x8, 0x6, 0x9, 0x1, 0x81, 0x1, 0xd, 0x9, 0x3, 0x6a6, 0xd, 0x4, 0x40, 0x7, 0x80000001, 0x1, 0xde9f, 0x3, 0x10001, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x7, 0x3ff, 0x5b1, 0x8, 0xff, 0x2, 0x8, 0x80000000, 0x0, 0x2, 0x6, 0x1ff, 0xc, 0xa, 0x4000000000000000, 0x2, 0x5, 0x8, 0x7a10712f, 0x0, 0x13e0, 0x4, 0xffffffff, 0x8, 0x6, 0x6, 0x1000, 0x401, 0xc, 0x3, 0xfffffffffffffffc, 0x13, 0xf4, 0x3, 0x9, 0x400, 0x5e, 0x7, 0x7fffffff, 0x5, 0x4, 0x2, 0x8000000000000000, 0x3ff, 0x0, 0x100, 0x9, 0xffffffff, 0x1, 0x40000, 0x2220, 0x7, 0x3, 0x1acd, 0x6, 0x6, 0xf, 0x9, 0x5, 0x6, 0x6, 0x7, 0x67b1, 0x74, 0x6, 0x8]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/34, 0x22}], 0x1, 0x1000000000000}}, @rdma_args={0x48, 0x114, 0x1, {{0x20080, 0x9}, {&(0x7f0000000600)=""/139, 0x8b}, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/240, 0xf0}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)}], 0x3, 0x1, 0x9}}], 0x90}, 0x0) ioctl(r0, 0x4574f538, &(0x7f0000001640)="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") mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x36, 0x0, &(0x7f0000000240)="f80204160000000000007f5386ddb44b501c817ea08344bd8700883df04a3be1e6c808b380f957d8f81905e3d0dd65598770cff05f58", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310020000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080001400000000514000000110001000000"], 0xdc}}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.496573606s ago: executing program 1 (id=6716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket(0x1000000010, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000010000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$alg(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="b04c95d9b584c5da249e3066db039d5fa983df68ebbb21c0616d36ffccc033afa99581ed50", 0x25}, {&(0x7f0000000140)="14f32227330d81a011f7d7b97a390126", 0x10}, {&(0x7f0000000180)="f08460716963185bb081a329e2a8b0438289369a7258a29fe3f7133328494e94829421", 0x23}, {&(0x7f00000002c0)="d8cedf95b75fc5bc4419adf2ddecd344fd7b24c0379dd259f146afcae28fe8bb059739a74329918310b01fc7e7ade0ff2f5b237374ab4ea790fef7554964864331900ca993972ea7bbe445b571d15b2193d0de4b27fa8eaef409f1a46c75b2c51930c20160586d", 0x67}, {&(0x7f00000003c0)="75cadcbd8184fd209dff92975b334c9338f911d556681ba3c8bcb019e6314214e07c6793808aa64fc3ac9e65bf78369ba39611572e5c2da4b145b2ed0e0c04d8d5eeca384dbfde8a4bbd11de2bd243e1936adf84df9d0c643c431937e04cf2363c276affaeb76e91a0f9b713a2ffe9a906bcd1134e02a45c133a39f91fbd9339e8c5c8fdb49bb5b6a0e59adbff717c299d2e5ce1c9a8ff76673dcfbffec6a463986022e2ca24bdd491336912013d19731b91f77f1cc6941ef5f259b91be01d2d8462d79e601e572ad8821d0f791343fe3ad7b46f580a1f0d3f09c52e5b93009d38158cd74e19932b790e563f82133bb017acf9", 0xf3}], 0x5, &(0x7f00000009c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x3, "d03647"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x92, "52610fa652e04376dda47dd55aabbdfaac458c481949e4ccf45d4be68d33a5b755f300e90dd9a8f01e4080f1951deb57bca010c5581f37e377f4e133754ad703314d0ad3e48861afd6044bd99462d70b8b3b6c6bf8acfb5ef51f1419b2b573bd2c5c41242c27013102c417d5e059276c2acf27156f01edae01308e6b24ab75009ea1e205a0cbbb8b4d886761235e8f216bfd"}, @iv={0x70, 0x117, 0x2, 0x59, "94d28c5fa5aa255f0a7a26f45f41a728129891149e4d992ef380e93a030eb2e5d34101787908ab7cac00b82a57c687707227c7faaa0304523ded77aa28833259fd6e3e26e873c1306e1cfcc62de8a2f599cd3cf9e05c5e24b5"}, @assoc={0x18}], 0x1d8, 0x20000000}, 0x2000000) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@polexpire={0xcc, 0x1b, 0x3, 0x70bd27, 0x25dfdbfd, {{{@in6=@remote, @in=@multicast1, 0x4e22, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x20, 0x32}, {0x8001, 0x5, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000000, 0x9, 0x1158000000000}, {0x2, 0x1, 0x101, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$packet(r4, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0xf6, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@deltfilter={0x308, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x2d0, 0x2, [@TCA_ROUTE4_POLICE={0x58, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1f3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x1, 0x0, 0x0, {0x3, 0x0, 0x7f, 0xb00, 0x2, 0x6}, {0x0, 0x2, 0x3, 0xb03, 0xc1, 0xf}, 0xc5, 0x7, 0x8001}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6d}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe}, @TCA_ROUTE4_ACT={0x264, 0x6, [@m_mirred={0x13c, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x6, 0xf06, 0x4}, 0x2, r2}}]}, {0xee, 0x6, "62e96cb55cf31fcc5fe18cf1b15463bf6c82c541d69218e560e013919c2fb2ec7a31c1c067e113096487173f90c2ecc9a29261a9f18cfd54a9c116f3c7e7b4a298a4b7bc5521e8b33e97550b833bb951abca040b9d9b6ec8e56859bf338cafa1152d4822bd5ca64725145c62e16ddc60c1c19bace185d0f675c3182f4dd68f9e4f2987e7caaad9ee3b8f9acd5c18115a3419fdaa858fbed2720eb51b64c0af99fcca6a9efd7d435fcc65bea2b54aa9e31e05cf46cddc0f4974b8b98e65547b9606c992364a9f118f09d04761053f9adb1e306b3d988ea45b5c0ba6903107a7a27276da1e0b6f2e813fdf"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x124, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x3}]}, {0xf2, 0x6, "b211992d3eb5e45c5a66f71e4262040381423e63e15cdb2e7cbf8c91c806289d3f7a08c4fb1f0b6746cbefd5b5e4959d05cd6192643b81bec01e97621ac5d4439c4331529d45351837d58ed37959abd2ab2f36a7d4c859d8acca9e5a1403de8ec1e14255fbc253d45ba2775d2f02e305a22ff2502179cd99817d0dc33b3eb30dbcd0369b24414875cb4f82c0ed89b8ec87ab2a20dee3e652bab045580d391d378dea9350fae902adabeae594f4326744862b08160a1c3912a9584ae45f43926b78a5cad4e9a07446d92d9219f8a0df04efe6e76bb9e545f92cfaf72ec21219e631a1863c613292ef0ce0c6144934"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x308}}, 0x0) 1.383070472s ago: executing program 1 (id=6717): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000002010085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 1.378595633s ago: executing program 5 (id=6718): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@rand_addr, @initdev, @local}, &(0x7f00000001c0)=0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000500"], 0x18}, 0x440e0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000140)=0x84, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) 1.248620122s ago: executing program 0 (id=6719): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x401, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x200, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xfffffff8}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000000)=ANY=[], 0x4) 1.239396585s ago: executing program 1 (id=6720): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095f4c883c1075b9df5428e86dadf4ea731cfa2e6d26dace82e4c94bd235507f06fbd599dea882b205485b556c52890738f4437a8018fc22412816c29387e11084d74f7"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x5, 0x4, "dd197221"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000400), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r8, 0x80, 0x40, 0xffffffff, 0x7ff, {{0x22, 0x4, 0x2, 0x9, 0x88, 0x67, 0x0, 0xf6, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x44, 0x2, [{0x0, 0xf, "a44ad9e563eff3c155df36a37c"}, {0x1, 0x11, "7a1afad85000ec3759ded5627a908f"}, {0x7, 0xf, "d590efb720b6d558d3e914f928"}, {0x1, 0x8, "c25585fe0e0a"}, {0x5, 0x7, "2204229b11"}]}, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast2, 0x84000000}, {@loopback, 0xeb}, {@broadcast, 0x3}]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x7, [0x71aa, 0x6]}]}}}}}) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xb3, 0xab, &(0x7f0000000080)="13a9c9b7aaa831f75db47ddadaf4dd4288a274f543a3f12e975916c795878baa70132b7b9e2a76bb795625936cbd03fb0b18157fe04c9ec203ae1efa7a2747574dfcd71824b5156579636789b59a26ed9fca575907f0315af09ba37bf6499b3c69f336c917708a835cfa5333b89ea81cfd72e52b7c9dce0c0199218ac82de9d59e77e674ea81bd445ce5b0b5d91e3fc8237be1f14d646e312da8fc87326246fdad85db8db3cf78d5e1d14f08dcae4636a94c14", &(0x7f0000000140)=""/171, 0x2, 0x0, 0xe0, 0x27, &(0x7f0000000200)="9924e98e24b291c44ad229d4c623a63388f4ee17cb37c6512c9eebdc33190501fe83bdbe74552940bfec4b207a7851e8befd951f14ea431998e76f4a7f3cf5190e05366b80eef17c5f6269ee08b24da4a965e04f627389342198081e846333c633a0099ca0ae4a804f5c960bb8cedb6a2a9f1ce6415853b9e691535c91a7b5bfe43644ac8dc03a480d43b540422f184c1de4d150422da7cef5daa460fb8786b24d0266d31bde23f6a6f996a159204ecd297900cdada7cb1e2acb1e9b2ee8c8fa12fef5b45ab2d5b3171e5504a097bd0fe551f21de64a5a4c0dfa440b814b9af8", &(0x7f0000000300)="b940e7a09764696841c8300c69e5df256994dd4bb1007fcc3386eff968b35102784d2f9acd6dd3", 0x4, 0x0, 0xf7}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.027516093s ago: executing program 3 (id=6722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x4}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x1ea, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}}}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x350, 0x398, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ipvlan0\x00', {0x6, 0x0, 0x4, 0xf, 0xfffff801, 0x8, 0x73, 0xb5334157f053eed4, 0x20}, {0xe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 904.575929ms ago: executing program 3 (id=6723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000120c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0xc080}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)='A7', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000801) (async) sendmmsg$inet6(r5, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)='A7', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 893.584787ms ago: executing program 5 (id=6724): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0x53b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_simple={0x4c, 0x1, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_DATA={0x9, 0x3, '%@#\x99\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000000000000000000000000001000000000000fffd0a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005ac2fb0e6dc8acd7e115"], 0x1ac}}, 0x0) 739.822243ms ago: executing program 5 (id=6725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000040)={0x9, 0x1}) 717.176911ms ago: executing program 1 (id=6726): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xda1a}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="05"], 0x144}}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x2}, {}, {0x0, 0x0, {0x0, 0x0, 0x3}}, {}, {}, {}, {}, {}, {}, {}], 0x90) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r5 = accept4(r4, &(0x7f0000000340)=@isdn, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0)={0x45, 0x2, 0x5, 0xff, 0x7, 0x7f, 0xfa, 0x1, 0x68, 0x1, 0xe, 0x7, 0x4, 0x1}, 0xe) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xda1a}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="05"], 0x144}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x2}, {}, {0x0, 0x0, {0x0, 0x0, 0x3}}, {}, {}, {}, {}, {}, {}, {}], 0x90) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) accept4(r4, &(0x7f0000000340)=@isdn, 0x0, 0x80800) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0)={0x45, 0x2, 0x5, 0xff, 0x7, 0x7f, 0xfa, 0x1, 0x68, 0x1, 0xe, 0x7, 0x4, 0x1}, 0xe) (async) 475.379227ms ago: executing program 5 (id=6727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00'], 0x20) sendmsg$netlink(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x25dfdbfc, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b0000000007030000f8ffffffb7030000080000002d010000000000008500000001000000950040000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) sendmmsg$inet(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)="ff1da20332d50a4e90dc59b94fe3292073ab186f6863c904ec5dff6a5f1769924fff4d26af7cf30e828701e1be997e9b873fe789735ff28ea5b175eaec79732b3f17293e0b4b0c4f91f5c6bf6f1166c4873de2b485c7d0290da742c689cc856b5e52ec", 0x63}, {&(0x7f0000000680)="a4b4b0bfe0cb7ca648ae629782041c23550795d783a55c7f1d765af6e5dc0a109806ed95a3f1c0323ffa38f6f9c23955f608e705ac7d2d5f3d9c7c4a6b15a6e05d47a831acf1ebd64859ccf99d699bfd8bdfccb9af68b9eb795ec201ecbd166ff65d9dcb3461327756ce4b521b650f1e757050202e", 0x75}, {&(0x7f0000000800)="d4a64a9062f7ab04aecb571fc8473bee1ee54f3ad9ef95ea70de426a60de5812544252250b498a9f3883345780816dd5c1128869334c5dd048c3f347c4c6b5e90bcb09ecea8dfb6216ccb6ac4166f73c31ab8b109ed2e7562d0d9c40454b2c58293320839ea6f5e76fc42eced01ad0102ae273c24259a7fa312227aabf16f05611576e1bec12a73af8557dae5754ea9ec23b4ede0e9cec", 0x97}, {&(0x7f00000008c0)="a1d05f6efdba70af65cc963291cde767a564bebac5d1808a7c", 0x19}, {&(0x7f0000000a00)="993fd1e3c03c127eaa22720b9f7ce2d92309f381789165c20fd0e92202eb84fe29b4ad5b4690f9aee0dfa862d91d2f74110bda47d6b9f4a8a40e5e90de9bcc9d08c76416f5e364c7703e7008b0a19ffe711faeb44ade91792e9c897c1c46877b87df21bb2a9d2cd825e7554684f05ee1eaef61b77282d318f6ac83656c73560afd23810f9b4f36d20592a390ec6088fb769122c79e81afba8e4380b7cff4368c9b62c97b4d0c95b2c7dc769e9326584acf0264cd4be4585ef0f99efaa7d4abd139801bb1e87b05578e88742a0016c5742fb149c2ff81630ef91a768503878a5576713ee4b27c19b76c5330123b9b05bd18e0ee07a0", 0xf5}], 0x5, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}}], 0x1, 0x40040) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r12}, &(0x7f0000000080), &(0x7f00000000c0)=r13}, 0x20) sendmmsg$inet6(r11, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r11, 0x11, 0x1, &(0x7f0000001280), 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRES16=r6, @ANYBLOB="200002000000fddbdf251f0000008bf9b202b2c0e4678cdd1a0000c09e08000300", @ANYRES8=r7, @ANYBLOB="3af8ff15", @ANYRESHEX=r11, @ANYBLOB="0c00060003000000000000000c0006000200000002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4040) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002500090122bd7008f9ffffff0200000008000300", @ANYRES32=r5, @ANYBLOB="92c20c1bb908b6eb5f26"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9dd13c13cad15fbc133f852f220de77025c63cf614560fc0704ed3ea47d4706cd66e21f342c47ddbbc5e73a943e8a8966a4bf7bca7f14bfa360b1d6d6b4cb58fe90e8168b315267aaa4b55c93bc7dc16f547f6dab2a5b7e755fb9a4e49348c8c43793aa9811b5e266e7973dabf365d97843ba3c3fa9f1d9d4ef544e478", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000040007800c00020000000000000000000c0004000900000000000000"], 0x30}}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x78, r14, 0x71a, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x801) 361.672735ms ago: executing program 3 (id=6728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) syz_emit_ethernet(0xda, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000a42b00fc010000000000000000000000000001fe8000000000000000000000000000aa3b"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setlink={0x40, 0x13, 0x5, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xbdc91815328ca98e, 0x60601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000001c0)={r5, 0x1, 0x6, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x20000400) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = epoll_create1(0x80000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r10, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x6, 0x9}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d616373656300001400000100000008000500", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 267.027253ms ago: executing program 3 (id=6729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000f00)={0x3, 0x3007}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x2) 119.368125ms ago: executing program 3 (id=6730): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000020085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 0s ago: executing program 3 (id=6731): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00005e0ded46905c5fedf3c38700000000000090450000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00005e0ded46905c5fedf3c38700000000000090450000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) kernel console output (not intermixed with test programs): Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.924561][T25854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.981368][T25853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.992499][T25853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.433532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.513783][T25854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.525753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.553784][T25865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.562780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.194466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.313404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.393785][T25855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.404900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.246281][T29600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6084'. [ 881.340472][T29600] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6084'. [ 881.434208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.468525][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 881.502612][T29612] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6088'. [ 881.627711][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6092'. [ 881.640427][T29621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6092'. [ 881.658999][T29621] ip6gre1: entered allmulticast mode [ 881.671325][T29621] team0: Device ip6gre1 is of different type [ 881.797000][T29629] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6094'. [ 882.154616][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.163579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.248849][T29643] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6099'. [ 882.406477][T29652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.104358][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6107'. [ 883.131864][T29672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6107'. [ 883.205548][T29675] ip6gre1: entered allmulticast mode [ 883.257394][T29675] team0: Device ip6gre1 is of different type [ 884.297279][T27472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 884.320790][T27472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 884.330160][T27472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 884.342050][T27472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 884.362274][T27472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.828501][T29724] FAULT_INJECTION: forcing a failure. [ 884.828501][T29724] name failslab, interval 1, probability 0, space 0, times 0 [ 884.904939][T29724] CPU: 0 UID: 0 PID: 29724 Comm: syz.3.6123 Not tainted syzkaller #0 PREEMPT(full) [ 884.904967][T29724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.904979][T29724] Call Trace: [ 884.904987][T29724] [ 884.904996][T29724] dump_stack_lvl+0xe8/0x150 [ 884.905026][T29724] should_fail_ex+0x412/0x560 [ 884.905059][T29724] should_failslab+0xa8/0x100 [ 884.905091][T29724] __kmalloc_noprof+0xe8/0x760 [ 884.905117][T29724] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 884.905151][T29724] tomoyo_realpath_from_path+0xe3/0x5d0 [ 884.905181][T29724] ? tomoyo_domain+0xd7/0x130 [ 884.905215][T29724] ? tomoyo_path_number_perm+0x219/0x630 [ 884.905239][T29724] tomoyo_path_number_perm+0x246/0x630 [ 884.905264][T29724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 884.905285][T29724] ? __lock_acquire+0x6b5/0x2cf0 [ 884.905320][T29724] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 884.905363][T29724] ? __fget_files+0x2a/0x420 [ 884.905391][T29724] ? __fget_files+0x2a/0x420 [ 884.905414][T29724] ? __fget_files+0x3a0/0x420 [ 884.905437][T29724] ? __fget_files+0x2a/0x420 [ 884.905464][T29724] security_file_ioctl+0xc3/0x2a0 [ 884.905490][T29724] __se_sys_ioctl+0x47/0x170 [ 884.905518][T29724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.905540][T29724] do_syscall_64+0x15f/0xf80 [ 884.905560][T29724] ? trace_irq_disable+0x3b/0x140 [ 884.905596][T29724] ? clear_bhb_loop+0x40/0x90 [ 884.905622][T29724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.905642][T29724] RIP: 0033:0x7fe1d4b9ce59 [ 884.905661][T29724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.905679][T29724] RSP: 002b:00007fe1d5999028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.905700][T29724] RAX: ffffffffffffffda RBX: 00007fe1d4e15fa0 RCX: 00007fe1d4b9ce59 [ 884.905715][T29724] RDX: 0000200000002180 RSI: 0000000000008914 RDI: 0000000000000005 [ 884.905729][T29724] RBP: 00007fe1d5999090 R08: 0000000000000000 R09: 0000000000000000 [ 884.905742][T29724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.905755][T29724] R13: 00007fe1d4e16038 R14: 00007fe1d4e15fa0 R15: 00007ffcd18d1978 [ 884.905790][T29724] [ 884.905800][T29724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 885.502352][T29701] lo speed is unknown, defaulting to 1000 [ 886.281380][T29753] __nla_validate_parse: 1 callbacks suppressed [ 886.281402][T29753] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6130'. [ 886.474466][T27472] Bluetooth: hci5: command tx timeout [ 886.669351][T29712] lo speed is unknown, defaulting to 1000 [ 887.157117][T29771] netlink: 'syz.3.6135': attribute type 4 has an invalid length. [ 887.205855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.280883][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.289413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.401458][T29780] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6137'. [ 888.215183][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6142'. [ 888.520528][T29712] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.536092][T29712] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.546319][T29712] bridge_slave_0: entered allmulticast mode [ 888.556673][T27472] Bluetooth: hci5: command tx timeout [ 888.564979][T29712] bridge_slave_0: entered promiscuous mode [ 888.590381][T29712] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.600379][T29712] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.608954][T29712] bridge_slave_1: entered allmulticast mode [ 888.622372][T29712] bridge_slave_1: entered promiscuous mode [ 888.765411][T29712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.778465][T29712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.882649][T29712] team0: Port device team_slave_0 added [ 888.906783][T29712] team0: Port device team_slave_1 added [ 888.964197][T29712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.983251][T29712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.015232][T29712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.028991][T29712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.036422][T29712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.065467][T29712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.094622][T29827] ip6gre1: entered allmulticast mode [ 889.102690][T29827] team0: Device ip6gre1 is of different type [ 889.171660][T29712] hsr_slave_0: entered promiscuous mode [ 889.179120][T29712] hsr_slave_1: entered promiscuous mode [ 889.186127][T29712] debugfs: 'hsr0' already exists in 'hsr' [ 889.191932][T29712] Cannot create hsr debugfs directory [ 889.412024][T29712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.424506][T29712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.549028][T29712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.559658][T29712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.672603][T29712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.687222][T29712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.809273][T29712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.819895][T29712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.476529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 890.633232][T27472] Bluetooth: hci5: command tx timeout [ 891.216776][T29800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.232785][T29825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'. [ 891.242507][T29825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6149'. [ 891.280315][T29712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 891.333566][T29712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.367537][T29712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 891.409796][T29712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.426144][T29712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 891.463572][T29712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.498049][T29712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 891.552522][T29712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 891.965366][T29712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.034823][T29712] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.070791][T25850] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.078859][T25850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.150761][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.158862][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.313625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.713608][T27472] Bluetooth: hci5: command tx timeout [ 892.936942][T29879] bridge0: entered allmulticast mode [ 892.987286][T29879] nbd: must specify a size in bytes for the device [ 893.008292][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'. [ 893.009463][T29879] bridge_slave_1: left allmulticast mode [ 893.036085][T25855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.045110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.046628][T29881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6160'. [ 893.070449][T29879] bridge_slave_1: left promiscuous mode [ 893.083935][T29879] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.102308][T29879] bridge_slave_0: left allmulticast mode [ 893.108724][T29879] bridge_slave_0: left promiscuous mode [ 893.116042][T29879] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.217059][T29884] ip6gre1: entered allmulticast mode [ 893.232864][T29884] team0: Device ip6gre1 is of different type [ 893.458502][T29892] lo speed is unknown, defaulting to 1000 [ 893.460834][T29893] rdma_rxe: rxe_newlink: failed to add lo [ 893.620940][T29893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.658796][T29893] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.695823][T29893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.730470][T29893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.738714][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6166'. [ 893.741421][T29893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.770094][T29893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 893.792311][T29893] veth1_vlan: left promiscuous mode [ 893.799634][T29893] veth0_vlan: left promiscuous mode [ 893.806914][T29893] veth0_vlan: entered promiscuous mode [ 893.816643][T29893] veth1_vlan: entered promiscuous mode [ 893.828131][T29893] veth1_macvtap: left promiscuous mode [ 893.839670][T29893] veth1_macvtap: entered promiscuous mode [ 893.868744][T29893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 893.905051][T29893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.926347][T25865] bond3: (slave ip6gretap1): link status down again after 0 ms [ 893.926732][T29893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 893.950891][T29893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 893.972578][T29893] 8021q: adding VLAN 0 to HW filter on device eth0 [ 893.984302][T29893] 8021q: adding VLAN 0 to HW filter on device eth1 [ 894.001714][T29893] 8021q: adding VLAN 0 to HW filter on device eth2 [ 894.011829][T29893] 8021q: adding VLAN 0 to HW filter on device eth3 [ 894.022937][T29893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 894.034824][T29893] 8021q: adding VLAN 0 to HW filter on device bond6 [ 894.045754][T29893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 894.055381][T29893] 8021q: adding VLAN 0 to HW filter on device bond8 [ 894.075608][T29892] lo speed is unknown, defaulting to 1000 [ 894.245725][T29911] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.253504][T29911] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.356426][T29911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.370110][T29911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.542990][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.578549][ T35] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 894.608865][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.622454][ T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 894.653466][ T35] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 894.674833][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.877608][T29912] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.889525][T29912] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.210922][T29912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.238789][T29912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.424486][T29892] lo speed is unknown, defaulting to 1000 [ 895.440514][ T35] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.466977][ T35] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 895.508244][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.534026][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.553193][ T35] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 895.562664][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.615750][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6168'. [ 895.625813][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 895.645699][T29712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.672764][ T35] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.692929][ T35] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.752284][ T35] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.764113][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.781230][ T35] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.804026][ T35] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.814399][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.828216][ T35] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.845421][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.856800][ T35] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.868942][ T35] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.883712][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.896969][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.923438][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.992279][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.020861][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.056743][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.071945][T29712] veth0_vlan: entered promiscuous mode [ 896.110633][T29712] veth1_vlan: entered promiscuous mode [ 896.162320][T29712] veth0_macvtap: entered promiscuous mode [ 896.197672][T29712] veth1_macvtap: entered promiscuous mode [ 896.259313][T29712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.297641][T29712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.312134][T29892] infiniband sqz0: set active [ 896.326517][T29892] infiniband sqz0: added lo [ 896.334440][T24572] lo speed is unknown, defaulting to 1000 [ 896.352281][T25855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.385049][T29892] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 896.388007][T25855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.420663][T29892] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 896.441061][T29892] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 896.507854][T25855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.518863][T25855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.543602][T29892] RDS/IB: sqz0: added [ 896.577454][T29892] smc: adding ib device sqz0 with port count 1 [ 896.614170][T29892] smc: ib device sqz0 port 1 has no pnetid [ 896.692347][ T8177] lo speed is unknown, defaulting to 1000 [ 896.798256][T29892] lo speed is unknown, defaulting to 1000 [ 896.859504][T25850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.887493][T25850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.050581][T25850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.083958][T25850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.335066][T25858] net_ratelimit: 45 callbacks suppressed [ 897.335087][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.398445][T25858] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 897.524502][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.557109][T25865] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 897.705568][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.739348][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 897.893833][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 897.908351][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 897.948163][T29975] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 898.027471][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 898.073436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.116552][T29984] netlink: 'syz.1.6173': attribute type 6 has an invalid length. [ 898.189306][T29984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6173'. [ 898.242277][T29892] lo speed is unknown, defaulting to 1000 [ 898.370179][T29991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6174'. [ 898.396960][T29991] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6174'. [ 898.494291][T29991] ip6gre1: entered allmulticast mode [ 898.535859][T29991] team0: Device ip6gre1 is of different type [ 899.050712][T29892] lo speed is unknown, defaulting to 1000 [ 900.045542][T29892] lo speed is unknown, defaulting to 1000 [ 900.546345][T30004] lo speed is unknown, defaulting to 1000 [ 900.827074][T30054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6187'. [ 900.849356][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 900.869128][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 900.881640][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 900.895922][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 900.907686][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 901.209795][T30066] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6188'. [ 901.224657][T29892] lo speed is unknown, defaulting to 1000 [ 902.437356][T25858] net_ratelimit: 88 callbacks suppressed [ 902.437378][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.514443][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.532900][T29892] lo speed is unknown, defaulting to 1000 [ 902.533732][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 902.579096][T30003] lo speed is unknown, defaulting to 1000 [ 902.663227][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.679195][T25850] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 902.813269][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.836386][T25858] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 902.953992][T27472] Bluetooth: hci0: command tx timeout [ 902.973360][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 902.993884][T25858] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 903.129723][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 903.636595][T29892] lo speed is unknown, defaulting to 1000 [ 903.794658][T30136] netlink: 'syz.5.6199': attribute type 1 has an invalid length. [ 903.857373][T30138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6200'. [ 903.892905][T30139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6199'. [ 903.963992][T30134] bond1: option xmit_hash_policy: invalid value (10) [ 903.993002][T30134] bond1 (unregistering): Released all slaves [ 904.059780][T30058] lo speed is unknown, defaulting to 1000 [ 904.258421][T30004] lo speed is unknown, defaulting to 1000 [ 904.646661][T30155] pimreg9: entered allmulticast mode [ 904.812140][T30003] lo speed is unknown, defaulting to 1000 [ 905.038661][T27472] Bluetooth: hci0: command tx timeout [ 905.320082][T29892] lo speed is unknown, defaulting to 1000 [ 905.386404][T30172] syzkaller0: entered promiscuous mode [ 905.392405][T30172] syzkaller0: entered allmulticast mode [ 905.975541][T29892] lo speed is unknown, defaulting to 1000 [ 905.996628][T30184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6212'. [ 906.007718][T30184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6212'. [ 906.209273][T30191] netlink: 'syz.1.6215': attribute type 1 has an invalid length. [ 906.415814][T30058] lo speed is unknown, defaulting to 1000 [ 906.973683][T30209] syzkaller0: entered promiscuous mode [ 906.982509][T30209] syzkaller0: entered allmulticast mode [ 907.017402][T29892] lo speed is unknown, defaulting to 1000 [ 907.114960][T27472] Bluetooth: hci0: command tx timeout [ 907.312522][T30213] syzkaller1: entered promiscuous mode [ 907.344766][T30213] syzkaller1: entered allmulticast mode [ 907.461516][T25850] net_ratelimit: 120 callbacks suppressed [ 907.461822][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.576807][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.616194][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.656195][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.714563][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.755159][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.798857][T25858] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 907.934209][T25858] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 907.974732][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.024077][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 908.545461][T30058] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.575040][T30058] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.610531][T30058] bridge_slave_0: entered allmulticast mode [ 908.637401][T30058] bridge_slave_0: entered promiscuous mode [ 908.673899][T30058] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.701870][T30058] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.755878][T30058] bridge_slave_1: entered allmulticast mode [ 908.778897][T30058] bridge_slave_1: entered promiscuous mode [ 908.789215][T30252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6230'. [ 908.927519][T30058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.983607][T30058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.193399][ T5637] Bluetooth: hci0: command tx timeout [ 909.227753][T30058] team0: Port device team_slave_0 added [ 909.249928][T30058] team0: Port device team_slave_1 added [ 909.497822][T30058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.510275][T30058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.542451][T30058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.600378][T30058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.610718][T30058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.640545][T30058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.980022][T30058] hsr_slave_0: entered promiscuous mode [ 909.987092][T30058] hsr_slave_1: entered promiscuous mode [ 909.996085][T30058] debugfs: 'hsr0' already exists in 'hsr' [ 910.001977][T30058] Cannot create hsr debugfs directory [ 910.570215][T30218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 910.649775][T30058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 910.687811][T30058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.720618][T30058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 910.749063][T30279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6240'. [ 910.809401][T30058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.851337][T30058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 910.899092][T30058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 910.932613][T30058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 910.985793][T30058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 911.000793][T30291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6243'. [ 911.072773][T30299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6243'. [ 911.255744][T30291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 911.355748][T30310] syzkaller0: entered promiscuous mode [ 911.391181][T30310] syzkaller0: entered allmulticast mode [ 911.707575][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6251'. [ 911.831198][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6253'. [ 911.887589][T30058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.960244][T30058] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.005071][T25865] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.005656][T30336] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 912.012309][T25865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.052702][T25865] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.059985][T25865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.319229][T30345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6257'. [ 912.428333][T30352] netlink: 'syz.5.6258': attribute type 4 has an invalid length. [ 912.484890][T30352] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 912.533335][T25850] net_ratelimit: 175 callbacks suppressed [ 912.533356][T25850] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 912.564262][T30352] CPU: 0 UID: 0 PID: 30352 Comm: syz.5.6258 Not tainted syzkaller #0 PREEMPT(full) [ 912.564291][T30352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 912.564304][T30352] Call Trace: [ 912.564312][T30352] [ 912.564322][T30352] dump_stack_lvl+0xe8/0x150 [ 912.564352][T30352] sysfs_warn_dup+0x8e/0xa0 [ 912.564381][T30352] sysfs_do_create_link_sd+0xc0/0x110 [ 912.564410][T30352] device_add_class_symlinks+0x1cf/0x240 [ 912.564442][T30352] device_add+0x475/0xbb0 [ 912.564472][T30352] wiphy_register+0x1fb1/0x2fe0 [ 912.564521][T30352] ? __pfx_wiphy_register+0x10/0x10 [ 912.564550][T30352] ? __pfx_netdev_run_todo+0x10/0x10 [ 912.564575][T30352] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 912.564619][T30352] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 912.564656][T30352] ieee80211_register_hw+0x3c53/0x4910 [ 912.564692][T30352] ? ieee80211_register_hw+0x1961/0x4910 [ 912.564746][T30352] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 912.564771][T30352] ? __asan_memset+0x22/0x50 [ 912.564798][T30352] ? __hrtimer_setup+0x1b7/0x260 [ 912.564822][T30352] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 912.564856][T30352] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 912.564918][T30352] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 912.564951][T30352] ? __asan_memcpy+0x40/0x70 [ 912.564988][T30352] hwsim_new_radio_nl+0xd96/0xfa0 [ 912.565034][T30352] genl_family_rcv_msg_doit+0x22a/0x330 [ 912.565072][T30352] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 912.565115][T30352] ? bpf_lsm_capable+0x9/0x20 [ 912.565135][T30352] ? security_capable+0x7e/0x2c0 [ 912.565168][T30352] genl_rcv_msg+0x61c/0x7a0 [ 912.565206][T30352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.565244][T30352] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 912.565289][T30352] netlink_rcv_skb+0x232/0x4b0 [ 912.565314][T30352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.565343][T30352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.565384][T30352] ? down_read+0x270/0x2e0 [ 912.565406][T30352] ? genl_rcv+0xd/0x40 [ 912.565434][T30352] genl_rcv+0x28/0x40 [ 912.565459][T30352] netlink_unicast+0x75c/0x8e0 [ 912.565497][T30352] netlink_sendmsg+0x813/0xb40 [ 912.565532][T30352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.565559][T30352] ? aa_sock_msg_perm+0xf1/0x1b0 [ 912.565587][T30352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 912.565614][T30352] ____sys_sendmsg+0x972/0x9f0 [ 912.565636][T30352] ? __might_fault+0xaf/0x130 [ 912.565669][T30352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.565703][T30352] ? import_iovec+0x73/0xa0 [ 912.565736][T30352] ___sys_sendmsg+0x2a5/0x360 [ 912.565757][T30352] ? __lock_acquire+0x6b5/0x2cf0 [ 912.565786][T30352] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.565817][T30352] ? futex_wake+0x4ac/0x580 [ 912.565875][T30352] ? __fget_files+0x2a/0x420 [ 912.565896][T30352] ? __fget_files+0x3a0/0x420 [ 912.565932][T30352] __x64_sys_sendmsg+0x1bd/0x2a0 [ 912.565959][T30352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 912.565992][T30352] ? rcu_is_watching+0x15/0xb0 [ 912.566027][T30352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.566050][T30352] do_syscall_64+0x15f/0xf80 [ 912.566069][T30352] ? trace_irq_disable+0x3b/0x140 [ 912.566097][T30352] ? clear_bhb_loop+0x40/0x90 [ 912.566123][T30352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.566144][T30352] RIP: 0033:0x7ff212d9ce59 [ 912.566165][T30352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.566182][T30352] RSP: 002b:00007ff213c44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.566204][T30352] RAX: ffffffffffffffda RBX: 00007ff213016090 RCX: 00007ff212d9ce59 [ 912.566219][T30352] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 912.566240][T30352] RBP: 00007ff212e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 912.566253][T30352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.566266][T30352] R13: 00007ff213016128 R14: 00007ff213016090 R15: 00007ffc02172898 [ 912.566302][T30352] [ 913.077400][T25850] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 913.223815][T30359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 913.266516][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.320368][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 913.409612][T30374] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6260'. [ 913.444508][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.456906][T30380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6264'. [ 913.468731][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 913.478544][T30376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.524867][T30376] xt_hashlimit: size too large, truncated to 1048576 [ 913.603464][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.633311][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.694328][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 913.704436][T30386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6265'. [ 914.107578][T30384] bridge_slave_0 (unregistering): left allmulticast mode [ 914.173807][T30384] bridge_slave_0 (unregistering): left promiscuous mode [ 914.183947][T30384] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.859251][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6269'. [ 914.896781][T30418] netlink: 'syz.5.6269': attribute type 6 has an invalid length. [ 914.930188][T30418] netlink: 'syz.5.6269': attribute type 6 has an invalid length. [ 915.526145][T30436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 915.607182][T30439] bond3: (slave veth3): Enslaving as an active interface with an up link [ 915.628594][T30445] syz_tun: entered promiscuous mode [ 915.637592][T30445] vlan3: entered promiscuous mode [ 915.688980][T30422] netlink: 'syz.0.6270': attribute type 9 has an invalid length. [ 915.753518][T30058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.945351][T30454] __nla_validate_parse: 10 callbacks suppressed [ 915.945386][T30454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6278'. [ 916.189599][T30458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 916.373863][T30467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6279'. [ 916.769996][T30058] veth0_vlan: entered promiscuous mode [ 916.811886][T30058] veth1_vlan: entered promiscuous mode [ 916.888220][T30058] veth0_macvtap: entered promiscuous mode [ 916.907174][T30058] veth1_macvtap: entered promiscuous mode [ 916.934735][T30058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.956462][T30058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.028269][T25854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.031114][T30489] Bluetooth: MGMT ver 1.23 [ 917.076985][T30492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6287'. [ 917.086261][T25854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.135336][T25854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.161259][T25854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.534232][T30499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6289'. [ 917.549196][T25863] net_ratelimit: 137 callbacks suppressed [ 917.549218][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.583735][T25867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.602649][T30499] FAULT_INJECTION: forcing a failure. [ 917.602649][T30499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.618866][T25867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.620763][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.652300][T30499] CPU: 0 UID: 0 PID: 30499 Comm: syz.0.6289 Not tainted syzkaller #0 PREEMPT(full) [ 917.652337][T30499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 917.652349][T30499] Call Trace: [ 917.652357][T30499] [ 917.652366][T30499] dump_stack_lvl+0xe8/0x150 [ 917.652393][T30499] should_fail_ex+0x412/0x560 [ 917.652423][T30499] _copy_from_iter+0x1d3/0x1670 [ 917.652452][T30499] ? rcu_is_watching+0x15/0xb0 [ 917.652481][T30499] ? __pfx__copy_from_iter+0x10/0x10 [ 917.652512][T30499] ? netlink_sendmsg+0x650/0xb40 [ 917.652531][T30499] ? skb_put+0x11b/0x210 [ 917.652552][T30499] netlink_sendmsg+0x6c0/0xb40 [ 917.652583][T30499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.652607][T30499] ? aa_sock_msg_perm+0xf1/0x1b0 [ 917.652634][T30499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 917.652664][T30499] ____sys_sendmsg+0x972/0x9f0 [ 917.652684][T30499] ? __might_fault+0xaf/0x130 [ 917.652715][T30499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.652745][T30499] ? import_iovec+0x73/0xa0 [ 917.652775][T30499] ___sys_sendmsg+0x2a5/0x360 [ 917.652794][T30499] ? __lock_acquire+0x6b5/0x2cf0 [ 917.652819][T30499] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.652875][T30499] ? __fget_files+0x2a/0x420 [ 917.652896][T30499] ? __fget_files+0x3a0/0x420 [ 917.652927][T30499] __x64_sys_sendmsg+0x1bd/0x2a0 [ 917.652952][T30499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 917.652981][T30499] ? __pfx_ksys_write+0x10/0x10 [ 917.653016][T30499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.653033][T30499] do_syscall_64+0x15f/0xf80 [ 917.653049][T30499] ? trace_irq_disable+0x3b/0x140 [ 917.653077][T30499] ? clear_bhb_loop+0x40/0x90 [ 917.653101][T30499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.653120][T30499] RIP: 0033:0x7f7e37f9ce59 [ 917.653138][T30499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.653155][T30499] RSP: 002b:00007f7e38dc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.653175][T30499] RAX: ffffffffffffffda RBX: 00007f7e38215fa0 RCX: 00007f7e37f9ce59 [ 917.653189][T30499] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 917.653202][T30499] RBP: 00007f7e38dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 917.653213][T30499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.653224][T30499] R13: 00007f7e38216038 R14: 00007f7e38215fa0 R15: 00007ffdaacdde88 [ 917.653256][T30499] [ 917.805311][T30505] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6290'. [ 917.839858][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 917.921416][T25863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 918.008146][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.017728][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.044077][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 918.052622][T25863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 918.177847][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 918.217866][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 918.301036][T30516] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6294'. [ 918.363281][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 918.366348][T30518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6293'. [ 918.423586][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 918.611601][T30522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 919.099401][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6291'. [ 919.154239][T30504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.225557][T30504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.335112][T30504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.368093][T30504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.418572][T30541] IPVS: length: 539572066 != 56052679704 [ 919.532912][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6302'. [ 919.557833][T30549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6302'. [ 919.601236][T30537] syzkaller0: entered promiscuous mode [ 919.619283][T30537] syzkaller0: entered allmulticast mode [ 919.690313][T30543] macvlan1: entered allmulticast mode [ 919.724740][T30552] ip6gre1: entered allmulticast mode [ 919.747424][T30552] team0: Device ip6gre1 is of different type [ 922.555643][T25867] net_ratelimit: 170 callbacks suppressed [ 922.555666][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.627568][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.654519][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.699969][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.738703][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.764159][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.788320][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.818129][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.844556][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 922.871277][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.208598][T30613] bond1: option arp_all_targets: invalid value (129) [ 926.260239][T30613] bond1 (unregistering): Released all slaves [ 926.663010][T30577] lo speed is unknown, defaulting to 1000 [ 926.956857][T30634] __nla_validate_parse: 1 callbacks suppressed [ 926.956875][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6319'. [ 927.573725][T25866] net_ratelimit: 170 callbacks suppressed [ 927.573749][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.623294][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.653685][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.674074][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.703455][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.707942][T30577] lo speed is unknown, defaulting to 1000 [ 927.720452][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 927.859693][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 927.898767][T25863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 928.001720][T30648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6323'. [ 928.043402][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 928.081204][T25863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 928.228968][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880435f8800: rx timeout, send abort [ 928.590430][T30626] lo speed is unknown, defaulting to 1000 [ 928.731551][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880435f8400: rx timeout, send abort [ 928.744792][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880435f8800: abort rx timeout. Force session deactivation [ 928.769073][T30667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6330'. [ 928.810200][T30668] netlink: 'syz.3.6331': attribute type 13 has an invalid length. [ 928.821290][T30668] netlink: 'syz.3.6331': attribute type 17 has an invalid length. [ 929.159451][T30677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6333'. [ 929.240814][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880435f8400: abort rx timeout. Force session deactivation [ 929.400195][T30683] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6334'. [ 929.672476][T30668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.697661][T30668] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.768855][T30668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 929.811322][T30668] veth1_vlan: left promiscuous mode [ 929.826383][T30668] veth0_vlan: left promiscuous mode [ 929.834165][T30668] veth0_vlan: entered promiscuous mode [ 929.848749][T30668] veth1_vlan: entered promiscuous mode [ 929.862065][T30668] veth1_macvtap: left promiscuous mode [ 929.871360][T30668] veth1_macvtap: entered promiscuous mode [ 929.896967][T30668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 929.920626][T30668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 929.931289][T30668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 929.956065][T30668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 929.982587][T30668] 8021q: adding VLAN 0 to HW filter on device eth0 [ 930.002959][T30668] 8021q: adding VLAN 0 to HW filter on device eth1 [ 930.024966][T30668] 8021q: adding VLAN 0 to HW filter on device eth2 [ 930.045056][T30668] 8021q: adding VLAN 0 to HW filter on device eth3 [ 930.067600][T30668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 930.080032][T30668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 930.093517][T30668] 8021q: adding VLAN 0 to HW filter on device bond7 [ 930.103650][T30668] 8021q: adding VLAN 0 to HW filter on device bond8 [ 930.129007][T24570] lo speed is unknown, defaulting to 1000 [ 930.297304][ T9526] lo speed is unknown, defaulting to 1000 [ 930.325473][T30626] lo speed is unknown, defaulting to 1000 [ 930.341595][T24571] lo speed is unknown, defaulting to 1000 [ 930.860417][T30707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'. [ 930.882863][T30685] rdma_rxe: rxe_newlink: failed to add lo [ 932.632500][T25866] net_ratelimit: 112 callbacks suppressed [ 932.632538][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.658590][T25866] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 932.774636][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.807743][T25866] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 932.933261][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 932.952849][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 933.056525][T30724] lo speed is unknown, defaulting to 1000 [ 933.103747][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 933.117498][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 933.253609][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 933.268010][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 933.401657][T30724] lo speed is unknown, defaulting to 1000 [ 933.748580][T30709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 934.528226][T30765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6353'. [ 935.202047][T30787] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6361'. [ 935.774498][T30805] sctp: [Deprecated]: syz.3.6366 (pid 30805) Use of int in maxseg socket option. [ 935.774498][T30805] Use struct sctp_assoc_value instead [ 935.888984][T30809] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6366'. [ 936.408490][T30817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6370'. [ 936.450748][T30817] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6370'. [ 936.759534][T27472] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 936.778801][T27472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 936.795730][T27472] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 936.811403][T27472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 936.821793][T27472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 937.082556][T30836] syzkaller0: entered promiscuous mode [ 937.103689][T30836] syzkaller0: entered allmulticast mode [ 937.327787][T30847] lo: Caught tx_queue_len zero misconfig [ 937.635121][T25866] net_ratelimit: 112 callbacks suppressed [ 937.635175][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.684567][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.715018][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.743183][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.773469][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.815156][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.843882][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 937.844442][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.863882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.883552][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 938.874995][T27472] Bluetooth: hci7: command tx timeout [ 940.031942][T30840] netlink: 'syz.1.6375': attribute type 12 has an invalid length. [ 940.045995][T30840] netlink: 'syz.1.6375': attribute type 29 has an invalid length. [ 940.055469][T30840] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6375'. [ 940.408483][T30864] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6376'. [ 940.431689][T30861] syzkaller1: entered allmulticast mode [ 940.951642][T30871] netlink: 'syz.5.6381': attribute type 8 has an invalid length. [ 940.965194][T27472] Bluetooth: hci7: command tx timeout [ 940.991417][T30874] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.6382'. [ 941.077132][T30870] syzkaller0: entered promiscuous mode [ 941.094624][T30870] syzkaller0: entered allmulticast mode [ 941.178603][T30876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6379'. [ 942.049017][T30902] Unsupported ieee802154 address type: 0 [ 942.066592][T30902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6384'. [ 942.650279][T25855] net_ratelimit: 198 callbacks suppressed [ 942.650318][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.694404][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.740363][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.767659][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.799117][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.827763][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.857228][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.905214][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.937038][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 942.976097][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 943.053474][T27472] Bluetooth: hci7: command tx timeout [ 945.134621][T27472] Bluetooth: hci7: command tx timeout [ 946.906178][T30828] lo speed is unknown, defaulting to 1000 [ 946.947299][T30880] syzkaller0: entered promiscuous mode [ 946.952835][T30880] syzkaller0: entered allmulticast mode [ 946.992273][T30887] netlink: 'syz.0.6379': attribute type 1 has an invalid length. [ 947.136677][T30908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6386'. [ 947.147217][T30908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6386'. [ 947.656441][T25855] net_ratelimit: 200 callbacks suppressed [ 947.656462][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.690243][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.724389][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.744647][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.763651][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.784128][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.805137][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.824333][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.849241][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 947.875909][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.503542][T30906] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6385'. [ 952.512626][T30906] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6385'. [ 952.532910][T30910] ip6gre1: entered allmulticast mode [ 952.540531][T30910] team0: Device ip6gre1 is of different type [ 952.620744][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6385'. [ 952.663194][T25867] net_ratelimit: 205 callbacks suppressed [ 952.663214][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.680349][T30828] lo speed is unknown, defaulting to 1000 [ 952.688397][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 952.718503][T30925] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6388'. [ 952.805868][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.821538][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 952.943394][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 952.972472][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 953.113619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.123262][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 953.174603][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 953.233792][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 953.370455][T30952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6393'. [ 953.568617][T30941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 953.611411][T30941] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 953.772660][T30941] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 953.822605][T30941] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 953.843533][T30969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6398'. [ 953.871802][T30969] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6398'. [ 953.978690][T30971] ip6gre1: entered allmulticast mode [ 954.012693][T30971] team0: Device ip6gre1 is of different type [ 954.048485][T30973] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6399'. [ 954.168024][T30941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 954.195651][T30941] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 954.419634][T30941] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 954.442884][T30941] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 954.762683][T30941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 954.771590][T30941] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 955.092433][T30941] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 955.101514][T30941] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 955.517945][T31005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6406'. [ 955.749213][T31017] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6409'. [ 956.028226][T31018] netlink: 'syz.1.6408': attribute type 29 has an invalid length. [ 956.129601][T30828] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.170412][T30828] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.190568][T30828] bridge_slave_0: entered allmulticast mode [ 956.204818][T30828] bridge_slave_0: entered promiscuous mode [ 956.214579][T30828] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.223622][T30828] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.231921][T30828] bridge_slave_1: entered allmulticast mode [ 956.248745][T30828] bridge_slave_1: entered promiscuous mode [ 956.395363][T31029] syzkaller0: entered promiscuous mode [ 956.401101][T31029] syzkaller0: entered allmulticast mode [ 956.429050][T30828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.694495][ T9745] net_ratelimit: 177 callbacks suppressed [ 957.694532][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.733791][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.779965][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.809089][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.837005][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.864429][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.908946][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.937447][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.965564][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 957.995840][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 961.745112][T30828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.784971][T31044] __nla_validate_parse: 1 callbacks suppressed [ 961.784991][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'. [ 961.813369][T30828] team0: Port device team_slave_0 added [ 961.822599][T30828] team0: Port device team_slave_1 added [ 961.976982][T30828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.992975][T31060] FAULT_INJECTION: forcing a failure. [ 961.992975][T31060] name failslab, interval 1, probability 0, space 0, times 0 [ 962.008504][T31060] CPU: 0 UID: 0 PID: 31060 Comm: syz.6.6420 Not tainted syzkaller #0 PREEMPT(full) [ 962.008529][T31060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 962.008543][T31060] Call Trace: [ 962.008551][T31060] [ 962.008560][T31060] dump_stack_lvl+0xe8/0x150 [ 962.008590][T31060] should_fail_ex+0x412/0x560 [ 962.008623][T31060] should_failslab+0xa8/0x100 [ 962.008655][T31060] __kmalloc_cache_noprof+0x88/0x660 [ 962.008684][T31060] ? tipc_nametbl_insert_publ+0x8a1/0x13d0 [ 962.008715][T31060] tipc_nametbl_insert_publ+0x8a1/0x13d0 [ 962.008762][T31060] tipc_nametbl_publish+0xc7/0x1f0 [ 962.008789][T31060] tipc_sk_publish+0x17b/0x3c0 [ 962.008819][T31060] ? __pfx_tipc_sk_publish+0x10/0x10 [ 962.008841][T31060] ? tipc_nametbl_build_group+0x4c8/0x500 [ 962.008861][T31060] ? tipc_nametbl_build_group+0x2e/0x500 [ 962.008889][T31060] tipc_sk_join+0x3ab/0x6a0 [ 962.008915][T31060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 962.008947][T31060] ? __pfx_tipc_sk_join+0x10/0x10 [ 962.008971][T31060] ? tipc_setsockopt+0x731/0x990 [ 962.008999][T31060] ? __local_bh_enable_ip+0xd0/0x130 [ 962.009026][T31060] tipc_setsockopt+0x73e/0x990 [ 962.009059][T31060] ? __pfx_tipc_setsockopt+0x10/0x10 [ 962.009085][T31060] ? __fget_files+0x2a/0x420 [ 962.009106][T31060] ? aa_sock_opt_perm+0xff/0x1a0 [ 962.009134][T31060] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 962.009159][T31060] ? __pfx_tipc_setsockopt+0x10/0x10 [ 962.009185][T31060] do_sock_setsockopt+0x17c/0x1b0 [ 962.009211][T31060] __x64_sys_setsockopt+0x13d/0x1b0 [ 962.009233][T31060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.009255][T31060] do_syscall_64+0x15f/0xf80 [ 962.009272][T31060] ? trace_irq_disable+0x3b/0x140 [ 962.009299][T31060] ? clear_bhb_loop+0x40/0x90 [ 962.009322][T31060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.009341][T31060] RIP: 0033:0x7fcec819ce59 [ 962.009361][T31060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.009379][T31060] RSP: 002b:00007fcec9118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 962.009407][T31060] RAX: ffffffffffffffda RBX: 00007fcec8415fa0 RCX: 00007fcec819ce59 [ 962.009421][T31060] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 962.009432][T31060] RBP: 00007fcec9118090 R08: 0000000000000010 R09: 0000000000000000 [ 962.009444][T31060] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 962.009456][T31060] R13: 00007fcec8416038 R14: 00007fcec8415fa0 R15: 00007ffff9dab968 [ 962.009490][T31060] [ 962.009499][T31060] tipc: Failed to bind to 66,4,4 [ 962.069130][T30828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.146225][T31063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6421'. [ 962.178702][T30828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.388318][T30828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.398386][T30828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.428216][T30828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.548107][T31075] netlink: 'syz.6.6423': attribute type 16 has an invalid length. [ 962.566588][T31075] netlink: 'syz.6.6423': attribute type 3 has an invalid length. [ 962.576444][T31075] netlink: 55874 bytes leftover after parsing attributes in process `syz.6.6423'. [ 962.659006][T31078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6424'. [ 962.675617][T30828] hsr_slave_0: entered promiscuous mode [ 962.690831][T30828] hsr_slave_1: entered promiscuous mode [ 962.704525][T30828] debugfs: 'hsr0' already exists in 'hsr' [ 962.705869][ T9745] net_ratelimit: 194 callbacks suppressed [ 962.705921][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.719280][T30828] Cannot create hsr debugfs directory [ 962.731672][T31078] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6424'. [ 962.763311][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.783299][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.803240][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.833564][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.884682][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.912503][T31080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6425'. [ 962.928910][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 962.973608][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 963.013356][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 963.053168][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 963.144618][T31087] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6427'. [ 963.165296][T31087] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 963.554023][T31097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6428'. [ 963.698034][T31101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6428'. [ 963.741550][T31097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 963.798657][T31098] bond2: (slave veth3): Enslaving as an active interface with an up link [ 963.834299][T31100] vlan2: entered allmulticast mode [ 963.843334][T31100] bond0: entered allmulticast mode [ 963.851902][T31100] bond_slave_0: entered allmulticast mode [ 963.869894][T31100] bond_slave_1: entered allmulticast mode [ 963.932758][T31104] FAULT_INJECTION: forcing a failure. [ 963.932758][T31104] name failslab, interval 1, probability 0, space 0, times 0 [ 963.950205][T31104] CPU: 1 UID: 0 PID: 31104 Comm: syz.5.6432 Not tainted syzkaller #0 PREEMPT(full) [ 963.950231][T31104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 963.950243][T31104] Call Trace: [ 963.950252][T31104] [ 963.950261][T31104] dump_stack_lvl+0xe8/0x150 [ 963.950290][T31104] should_fail_ex+0x412/0x560 [ 963.950322][T31104] should_failslab+0xa8/0x100 [ 963.950353][T31104] __kmalloc_cache_noprof+0x88/0x660 [ 963.950379][T31104] ? tipc_net+0x45/0x270 [ 963.950397][T31104] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 963.950431][T31104] tipc_topsrv_queue_evt+0xef/0x2d0 [ 963.950466][T31104] tipc_sub_report_overlap+0x4bd/0x8b0 [ 963.950499][T31104] tipc_nametbl_insert_publ+0xe5a/0x13d0 [ 963.950550][T31104] tipc_nametbl_publish+0xc7/0x1f0 [ 963.950579][T31104] tipc_sk_publish+0x17b/0x3c0 [ 963.950610][T31104] ? __pfx_tipc_sk_publish+0x10/0x10 [ 963.950646][T31104] tipc_sk_join+0x3ab/0x6a0 [ 963.950672][T31104] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 963.950709][T31104] ? __pfx_tipc_sk_join+0x10/0x10 [ 963.950733][T31104] ? tipc_setsockopt+0x731/0x990 [ 963.950761][T31104] ? __local_bh_enable_ip+0xd0/0x130 [ 963.950787][T31104] tipc_setsockopt+0x73e/0x990 [ 963.950820][T31104] ? __pfx_tipc_setsockopt+0x10/0x10 [ 963.950846][T31104] ? __fget_files+0x2a/0x420 [ 963.950867][T31104] ? aa_sock_opt_perm+0xff/0x1a0 [ 963.950897][T31104] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 963.950922][T31104] ? __pfx_tipc_setsockopt+0x10/0x10 [ 963.950949][T31104] do_sock_setsockopt+0x17c/0x1b0 [ 963.950977][T31104] __x64_sys_setsockopt+0x13d/0x1b0 [ 963.951001][T31104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.951022][T31104] do_syscall_64+0x15f/0xf80 [ 963.951043][T31104] ? clear_bhb_loop+0x40/0x90 [ 963.951068][T31104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.951087][T31104] RIP: 0033:0x7ff212d9ce59 [ 963.951107][T31104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.951123][T31104] RSP: 002b:00007ff213c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 963.951144][T31104] RAX: ffffffffffffffda RBX: 00007ff213015fa0 RCX: 00007ff212d9ce59 [ 963.951158][T31104] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 963.951170][T31104] RBP: 00007ff213c65090 R08: 0000000000000010 R09: 0000000000000000 [ 963.951182][T31104] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 963.951195][T31104] R13: 00007ff213016038 R14: 00007ff213015fa0 R15: 00007ffc02172898 [ 963.951230][T31104] [ 964.229869][T31101] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 964.281786][T31106] netlink: 'syz.1.6433': attribute type 1 has an invalid length. [ 964.318479][T30828] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.365036][T30828] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 964.374819][T30828] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.442220][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6433'. [ 964.828831][T30828] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.840951][T30828] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 964.851478][T30828] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.915821][T31137] netlink: 'syz.0.6441': attribute type 1 has an invalid length. [ 965.167773][T31147] tipc: Publication distribution failure [ 965.370449][T30828] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.387539][T30828] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 965.397321][T30828] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.920360][T30828] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.930222][T30828] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 965.939972][T30828] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.215435][T30828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 966.224981][T30828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 966.232987][T30828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 966.241947][T30828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 966.250447][T30828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 966.259794][T30828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 966.274949][T30828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 966.284417][T30828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 966.353471][T30828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.370987][T30828] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.393588][T25854] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.400734][T25854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.412309][T25854] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.419406][T25854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.880891][T30828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.935893][T30828] veth0_vlan: entered promiscuous mode [ 966.949703][T30828] veth1_vlan: entered promiscuous mode [ 966.989916][T30828] veth0_macvtap: entered promiscuous mode [ 967.002355][T30828] veth1_macvtap: entered promiscuous mode [ 967.023657][T30828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.044295][T30828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.064158][T25854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.075673][T25854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.087468][T25854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.096277][T25854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.218812][T25856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.226708][T25856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.288487][T25853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.319054][T25853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.459639][T31183] __nla_validate_parse: 69 callbacks suppressed [ 967.459654][T31183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6369'. [ 967.813633][T25855] net_ratelimit: 139 callbacks suppressed [ 967.813661][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 967.828574][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 967.953546][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 967.961908][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 968.087384][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 968.095469][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 968.213448][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 968.221857][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 968.333614][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 968.341410][T25863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 972.853756][T25853] net_ratelimit: 79 callbacks suppressed [ 972.853794][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 972.868547][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 973.081824][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.089639][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 973.288773][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.297028][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 973.414501][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.424427][T25856] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 973.543683][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.552172][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 977.899032][T25854] net_ratelimit: 60 callbacks suppressed [ 977.899065][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 977.912480][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 978.074531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.124142][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 978.131906][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 978.342187][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 978.350005][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 978.562631][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 978.570419][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 978.788991][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 982.917779][ T9745] net_ratelimit: 57 callbacks suppressed [ 982.917801][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 982.941277][ T9745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 983.063192][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.070970][ T9745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 983.250669][ T9745] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.258435][ T9745] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 983.361606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.586271][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.594060][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 983.904122][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 987.098872][T31197] netlink: 'syz.1.6447': attribute type 2 has an invalid length. [ 987.169884][T31190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6448'. [ 987.192015][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6447'. [ 987.220765][T31199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6448'. [ 987.258713][T31189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6446'. [ 987.602343][T31207] netlink: 'syz.0.6453': attribute type 1 has an invalid length. [ 987.611185][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6451'. [ 987.702719][T31207] bond3: entered promiscuous mode [ 987.708395][T31207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 987.751906][T31209] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6452'. [ 987.765896][T31209] xt_hashlimit: invalid rate [ 987.789194][T31207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6453'. [ 987.830883][T31207] bond3: entered allmulticast mode [ 987.870098][T31213] FAULT_INJECTION: forcing a failure. [ 987.870098][T31213] name failslab, interval 1, probability 0, space 0, times 0 [ 987.882788][T31213] CPU: 1 UID: 0 PID: 31213 Comm: syz.3.6454 Not tainted syzkaller #0 PREEMPT(full) [ 987.882813][T31213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.882824][T31213] Call Trace: [ 987.882833][T31213] [ 987.882843][T31213] dump_stack_lvl+0xe8/0x150 [ 987.882869][T31213] should_fail_ex+0x412/0x560 [ 987.882901][T31213] should_failslab+0xa8/0x100 [ 987.882940][T31213] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 987.882968][T31213] ? __alloc_skb+0x1d0/0x7d0 [ 987.883002][T31213] __alloc_skb+0x1d0/0x7d0 [ 987.883029][T31213] tipc_buf_acquire+0x2b/0xe0 [ 987.883053][T31213] tipc_named_publish+0x278/0x740 [ 987.883075][T31213] tipc_nametbl_publish+0xfb/0x1f0 [ 987.883107][T31213] tipc_sk_publish+0x17b/0x3c0 [ 987.883135][T31213] ? __pfx_tipc_sk_publish+0x10/0x10 [ 987.883159][T31213] ? tipc_nametbl_build_group+0x4c8/0x500 [ 987.883177][T31213] ? tipc_nametbl_build_group+0x2e/0x500 [ 987.883202][T31213] tipc_sk_join+0x3ab/0x6a0 [ 987.883225][T31213] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 987.883251][T31213] ? __pfx_tipc_sk_join+0x10/0x10 [ 987.883272][T31213] ? tipc_setsockopt+0x731/0x990 [ 987.883296][T31213] ? __local_bh_enable_ip+0xd0/0x130 [ 987.883319][T31213] tipc_setsockopt+0x73e/0x990 [ 987.883349][T31213] ? __pfx_tipc_setsockopt+0x10/0x10 [ 987.883374][T31213] ? __fget_files+0x2a/0x420 [ 987.883393][T31213] ? aa_sock_opt_perm+0xff/0x1a0 [ 987.883420][T31213] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 987.883443][T31213] ? __pfx_tipc_setsockopt+0x10/0x10 [ 987.883468][T31213] do_sock_setsockopt+0x17c/0x1b0 [ 987.883492][T31213] __x64_sys_setsockopt+0x13d/0x1b0 [ 987.883513][T31213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.883532][T31213] do_syscall_64+0x15f/0xf80 [ 987.883549][T31213] ? trace_irq_disable+0x3b/0x140 [ 987.883572][T31213] ? clear_bhb_loop+0x40/0x90 [ 987.883593][T31213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.883611][T31213] RIP: 0033:0x7f19ab79ce59 [ 987.883628][T31213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.883652][T31213] RSP: 002b:00007f19a99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 987.883670][T31213] RAX: ffffffffffffffda RBX: 00007f19aba15fa0 RCX: 00007f19ab79ce59 [ 987.883683][T31213] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 987.883694][T31213] RBP: 00007f19a99f6090 R08: 0000000000000010 R09: 0000000000000000 [ 987.883705][T31213] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 987.883716][T31213] R13: 00007f19aba16038 R14: 00007f19aba15fa0 R15: 00007ffc66eb5d18 [ 987.883748][T31213] [ 987.883766][T31213] tipc: Publication distribution failure [ 988.005818][T25853] net_ratelimit: 240 callbacks suppressed [ 988.005837][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 988.184751][T31207] bond3: (slave bridge2): making interface the new active one [ 988.192261][T31207] bridge2: entered promiscuous mode [ 988.198056][T31207] bridge2: entered allmulticast mode [ 988.220882][T31207] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 988.362831][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 988.533172][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 988.585557][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 988.593343][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 988.822253][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 988.830034][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 988.941480][T31239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6462'. [ 989.034303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.036335][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 989.065541][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 989.105265][T31246] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6465'. [ 989.188004][T31245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6464'. [ 989.306979][T31250] tipc: Publication distribution failure [ 989.551103][T31260] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 989.938238][T31272] syzkaller0: entered promiscuous mode [ 989.943755][T31272] syzkaller0: entered allmulticast mode [ 990.339811][T31284] netlink: 'syz.6.6475': attribute type 1 has an invalid length. [ 990.571579][T31284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.646650][T31289] bond1: (slave gretap2): making interface the new active one [ 990.675398][T31289] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 990.981144][T31290] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 991.147759][T31261] lo speed is unknown, defaulting to 1000 [ 991.455977][T31295] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 991.617959][T31297] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 991.844510][T31301] FAULT_INJECTION: forcing a failure. [ 991.844510][T31301] name failslab, interval 1, probability 0, space 0, times 0 [ 991.892863][T31301] CPU: 1 UID: 0 PID: 31301 Comm: syz.1.6480 Not tainted syzkaller #0 PREEMPT(full) [ 991.892891][T31301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.892903][T31301] Call Trace: [ 991.892911][T31301] [ 991.892920][T31301] dump_stack_lvl+0xe8/0x150 [ 991.892948][T31301] should_fail_ex+0x412/0x560 [ 991.892982][T31301] should_failslab+0xa8/0x100 [ 991.893012][T31301] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 991.893037][T31301] ? __alloc_skb+0x1d0/0x7d0 [ 991.893057][T31301] __alloc_skb+0x1d0/0x7d0 [ 991.893078][T31301] tipc_msg_create+0x51/0x4d0 [ 991.893110][T31301] tipc_group_proto_xmit+0xce/0x790 [ 991.893137][T31301] tipc_group_join+0x160/0x700 [ 991.893160][T31301] ? tipc_nametbl_publish+0x13a/0x1f0 [ 991.893188][T31301] ? __pfx_tipc_group_join+0x10/0x10 [ 991.893206][T31301] ? tipc_sk_publish+0x1dc/0x3c0 [ 991.893239][T31301] ? tipc_nametbl_build_group+0x4c8/0x500 [ 991.893260][T31301] ? tipc_nametbl_build_group+0x2e/0x500 [ 991.893285][T31301] tipc_sk_join+0x478/0x6a0 [ 991.893309][T31301] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 991.893340][T31301] ? __pfx_tipc_sk_join+0x10/0x10 [ 991.893372][T31301] ? tipc_setsockopt+0x731/0x990 [ 991.893400][T31301] ? __local_bh_enable_ip+0xd0/0x130 [ 991.893425][T31301] tipc_setsockopt+0x73e/0x990 [ 991.893457][T31301] ? __pfx_tipc_setsockopt+0x10/0x10 [ 991.893483][T31301] ? __fget_files+0x2a/0x420 [ 991.893503][T31301] ? aa_sock_opt_perm+0xff/0x1a0 [ 991.893533][T31301] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 991.893557][T31301] ? __pfx_tipc_setsockopt+0x10/0x10 [ 991.893585][T31301] do_sock_setsockopt+0x17c/0x1b0 [ 991.893611][T31301] __x64_sys_setsockopt+0x13d/0x1b0 [ 991.893633][T31301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.893655][T31301] do_syscall_64+0x15f/0xf80 [ 991.893672][T31301] ? trace_irq_disable+0x3b/0x140 [ 991.893697][T31301] ? clear_bhb_loop+0x40/0x90 [ 991.893721][T31301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.893740][T31301] RIP: 0033:0x7f43f8f9ce59 [ 991.893758][T31301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.893775][T31301] RSP: 002b:00007f43f9e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 991.893797][T31301] RAX: ffffffffffffffda RBX: 00007f43f9215fa0 RCX: 00007f43f8f9ce59 [ 991.893811][T31301] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 991.893824][T31301] RBP: 00007f43f9e94090 R08: 0000000000000010 R09: 0000000000000000 [ 991.893836][T31301] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 991.893848][T31301] R13: 00007f43f9216038 R14: 00007f43f9215fa0 R15: 00007ffc0171f728 [ 991.893879][T31301] [ 992.672906][T31261] lo speed is unknown, defaulting to 1000 [ 992.780499][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6484'. [ 992.818034][T31320] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 992.843673][ T9532] IPVS: starting estimator thread 0... [ 993.046217][T25853] net_ratelimit: 86 callbacks suppressed [ 993.046239][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.063937][T31323] Bluetooth: MGMT ver 1.23 [ 993.081522][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 993.098761][T31323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6485'. [ 993.202111][T31321] IPVS: using max 33 ests per chain, 79200 per kthread [ 993.213196][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.220975][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 993.414279][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.565527][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.598367][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.633476][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.663536][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.703306][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 993.791978][T31343] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6490'. [ 994.122079][T31348] vlan2: entered allmulticast mode [ 994.127270][T31348] bond0: entered allmulticast mode [ 994.132500][T31348] bond_slave_0: entered allmulticast mode [ 994.138252][T31348] bond_slave_1: entered allmulticast mode [ 994.286134][T31348] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6493'. [ 994.447947][T31348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.472706][T31348] bond_slave_0: left allmulticast mode [ 994.498793][T31348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.568437][T31348] bond_slave_1: left allmulticast mode [ 994.576801][T31348] bond0 (unregistering): Released all slaves [ 995.403038][T31386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6500'. [ 995.555733][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6498'. [ 995.685288][T31372] syzkaller0: entered promiscuous mode [ 995.690808][T31372] syzkaller0: entered allmulticast mode [ 996.570581][T31390] batman_adv: batadv0: Interface activated: vlan0 [ 996.806660][T31390] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.850630][T31390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.978095][T31405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6503'. [ 997.136312][T31390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 997.149483][T31390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.182136][T31390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 997.202789][T31390] veth1_vlan: left promiscuous mode [ 997.249191][T31390] veth0_vlan: left promiscuous mode [ 997.257223][T31390] veth0_vlan: entered promiscuous mode [ 997.276896][T31390] veth1_vlan: entered promiscuous mode [ 997.368699][T31390] veth1_macvtap: left promiscuous mode [ 997.412846][T31390] veth0_macvtap: left promiscuous mode [ 997.425656][T31390] veth0_macvtap: entered promiscuous mode [ 997.464234][T31390] veth1_macvtap: entered promiscuous mode [ 997.479532][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.578416][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.601205][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.702611][T31390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.725759][T31390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.936090][T31390] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 997.961934][T31403] netlink: 'syz.0.6503': attribute type 11 has an invalid length. [ 998.003602][T25855] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.010770][T25855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.105523][T25856] net_ratelimit: 70 callbacks suppressed [ 998.105542][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.185620][T31409] netlink: 'syz.0.6504': attribute type 3 has an invalid length. [ 998.214504][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.263243][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.321914][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.340459][ T9745] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.368029][ T9745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.377005][ T9745] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.385891][ T9745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.441128][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.475416][T25856] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 998.507404][ T9745] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.517551][ T9745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.529477][ T9745] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.593380][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.613748][ T9745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.623281][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.684949][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.723384][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 998.851136][T31420] netlink: 'syz.0.6507': attribute type 10 has an invalid length. [ 998.961230][T31415] syzkaller0: entered promiscuous mode [ 998.974615][T31415] syzkaller0: entered allmulticast mode [ 999.117145][T31418] nbd: socks must be embedded in a SOCK_ITEM attr [ 999.591790][T31429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6510'. [ 999.626987][T31427] netlink: 'syz.5.6508': attribute type 13 has an invalid length. [ 999.635879][T31429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6510'. [ 999.660757][T31427] netlink: 'syz.5.6508': attribute type 17 has an invalid length. [ 999.772865][T31435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6508'. [ 999.905925][T31437] FAULT_INJECTION: forcing a failure. [ 999.905925][T31437] name failslab, interval 1, probability 0, space 0, times 0 [ 999.918567][T31437] CPU: 1 UID: 0 PID: 31437 Comm: syz.6.6512 Not tainted syzkaller #0 PREEMPT(full) [ 999.918593][T31437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.918605][T31437] Call Trace: [ 999.918613][T31437] [ 999.918624][T31437] dump_stack_lvl+0xe8/0x150 [ 999.918661][T31437] should_fail_ex+0x412/0x560 [ 999.918693][T31437] should_failslab+0xa8/0x100 [ 999.918724][T31437] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 999.918752][T31437] ? __alloc_skb+0x1d0/0x7d0 [ 999.918776][T31437] __alloc_skb+0x1d0/0x7d0 [ 999.918799][T31437] tipc_msg_create+0x51/0x4d0 [ 999.918834][T31437] tipc_group_proto_xmit+0xce/0x790 [ 999.918864][T31437] tipc_group_join+0x160/0x700 [ 999.918893][T31437] ? __pfx_tipc_group_join+0x10/0x10 [ 999.918911][T31437] ? tipc_sk_publish+0x1dc/0x3c0 [ 999.918942][T31437] ? tipc_nametbl_build_group+0x4c8/0x500 [ 999.918963][T31437] ? tipc_nametbl_build_group+0x2e/0x500 [ 999.919009][T31437] tipc_sk_join+0x478/0x6a0 [ 999.919035][T31437] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 999.919067][T31437] ? __pfx_tipc_sk_join+0x10/0x10 [ 999.919091][T31437] ? tipc_setsockopt+0x731/0x990 [ 999.919119][T31437] ? __local_bh_enable_ip+0xd0/0x130 [ 999.919144][T31437] tipc_setsockopt+0x73e/0x990 [ 999.919175][T31437] ? __pfx_tipc_setsockopt+0x10/0x10 [ 999.919201][T31437] ? __fget_files+0x2a/0x420 [ 999.919222][T31437] ? aa_sock_opt_perm+0xff/0x1a0 [ 999.919251][T31437] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 999.919277][T31437] ? __pfx_tipc_setsockopt+0x10/0x10 [ 999.919304][T31437] do_sock_setsockopt+0x17c/0x1b0 [ 999.919329][T31437] __x64_sys_setsockopt+0x13d/0x1b0 [ 999.919351][T31437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.919371][T31437] do_syscall_64+0x15f/0xf80 [ 999.919388][T31437] ? trace_irq_disable+0x3b/0x140 [ 999.919411][T31437] ? clear_bhb_loop+0x40/0x90 [ 999.919434][T31437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.919450][T31437] RIP: 0033:0x7fcec819ce59 [ 999.919469][T31437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.919486][T31437] RSP: 002b:00007fcec9118028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 999.919506][T31437] RAX: ffffffffffffffda RBX: 00007fcec8415fa0 RCX: 00007fcec819ce59 [ 999.919520][T31437] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 999.919533][T31437] RBP: 00007fcec9118090 R08: 0000000000000010 R09: 0000000000000000 [ 999.919545][T31437] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 999.919558][T31437] R13: 00007fcec8416038 R14: 00007fcec8415fa0 R15: 00007ffff9dab968 [ 999.919592][T31437] [ 1000.357537][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1000.378882][T31440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1001.491395][T31451] netlink: 211408 bytes leftover after parsing attributes in process `syz.0.6515'. [ 1001.792237][T31453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6515'. [ 1003.149906][ C1] net_ratelimit: 101 callbacks suppressed [ 1003.149946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1003.171050][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.264335][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.385378][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.495870][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.525246][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.558000][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.587878][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.623265][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.654024][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.153402][T25866] net_ratelimit: 110 callbacks suppressed [ 1008.153424][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.184690][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.221244][T25866] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.243309][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.296413][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.325242][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.353447][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.383260][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.413268][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.422657][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1008.466452][T31443] ip6gre1: entered allmulticast mode [ 1008.476001][T31443] team0: Device ip6gre1 is of different type [ 1008.846802][T31464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6518'. [ 1008.992053][T31458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.053913][T25856] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.082475][T25856] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.098677][T31471] syzkaller0: entered promiscuous mode [ 1009.107172][T31471] syzkaller0: entered allmulticast mode [ 1009.115610][T25856] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.128199][T25856] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.264643][T31475] §: renamed from sit0 (while UP) [ 1009.290578][T31477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6522'. [ 1009.632848][T31483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6524'. [ 1009.675301][T31458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.734894][T31486] netlink: 'syz.1.6525': attribute type 1 has an invalid length. [ 1009.845270][T31492] netlink: 'syz.0.6527': attribute type 13 has an invalid length. [ 1009.853136][T31492] netlink: 'syz.0.6527': attribute type 17 has an invalid length. [ 1010.320891][T31504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6531'. [ 1010.339880][T31504] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6531'. [ 1010.466032][T31492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1010.486098][T31492] bond3: left promiscuous mode [ 1010.490911][T31492] bridge2: left promiscuous mode [ 1010.496130][T31492] bond3: left allmulticast mode [ 1010.501009][T31492] bridge2: left allmulticast mode [ 1010.515010][T31500] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6529'. [ 1010.583755][T31507] ip6gre1: entered allmulticast mode [ 1010.635139][T31512] FAULT_INJECTION: forcing a failure. [ 1010.635139][T31512] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.637422][T31507] team0: Device ip6gre1 is of different type [ 1010.700548][T31512] CPU: 1 UID: 0 PID: 31512 Comm: syz.5.6534 Not tainted syzkaller #0 PREEMPT(full) [ 1010.700578][T31512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1010.700591][T31512] Call Trace: [ 1010.700600][T31512] [ 1010.700608][T31512] dump_stack_lvl+0xe8/0x150 [ 1010.700636][T31512] should_fail_ex+0x412/0x560 [ 1010.700670][T31512] should_failslab+0xa8/0x100 [ 1010.700701][T31512] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1010.700729][T31512] ? __alloc_skb+0x1d0/0x7d0 [ 1010.700753][T31512] __alloc_skb+0x1d0/0x7d0 [ 1010.700776][T31512] tipc_msg_create+0x51/0x4d0 [ 1010.700812][T31512] tipc_group_create_event+0x1f3/0x660 [ 1010.700844][T31512] ? __pfx_tipc_group_create_event+0x10/0x10 [ 1010.700884][T31512] tipc_sk_proto_rcv+0x25b/0x17d0 [ 1010.700915][T31512] ? tipc_group_filter_msg+0x5c/0x16c0 [ 1010.700939][T31512] ? tipc_loopback_trace+0x48/0x1b0 [ 1010.700969][T31512] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 1010.700993][T31512] ? __raw_spin_lock_init+0x45/0x100 [ 1010.701031][T31512] ? tipc_node_xmit+0x202/0xf10 [ 1010.701057][T31512] ? tipc_sk_filtering+0x13c/0x510 [ 1010.701086][T31512] tipc_sk_filter_rcv+0x312d/0x3370 [ 1010.701110][T31512] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1010.701160][T31512] ? rcu_is_watching+0x15/0xb0 [ 1010.701182][T31512] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1010.701218][T31512] ? tipc_node_distr_xmit+0xc5/0x400 [ 1010.701236][T31512] ? __asan_memset+0x22/0x50 [ 1010.701257][T31512] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 1010.701282][T31512] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1010.701320][T31512] tipc_sk_backlog_rcv+0x146/0x270 [ 1010.701348][T31512] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 1010.701382][T31512] ? __release_sock+0xa2/0x3a0 [ 1010.701407][T31512] ? __local_bh_enable_ip+0xd0/0x130 [ 1010.701430][T31512] ? __pfx_tipc_sk_backlog_rcv+0x10/0x10 [ 1010.701453][T31512] __release_sock+0x297/0x3a0 [ 1010.701485][T31512] release_sock+0x190/0x260 [ 1010.701514][T31512] tipc_setsockopt+0x7a9/0x990 [ 1010.701545][T31512] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1010.701569][T31512] ? __fget_files+0x2a/0x420 [ 1010.701590][T31512] ? aa_sock_opt_perm+0xff/0x1a0 [ 1010.701619][T31512] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1010.701642][T31512] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1010.701670][T31512] do_sock_setsockopt+0x17c/0x1b0 [ 1010.701694][T31512] __x64_sys_setsockopt+0x13d/0x1b0 [ 1010.701717][T31512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.701738][T31512] do_syscall_64+0x15f/0xf80 [ 1010.701756][T31512] ? trace_irq_disable+0x3b/0x140 [ 1010.701783][T31512] ? clear_bhb_loop+0x40/0x90 [ 1010.701806][T31512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.701825][T31512] RIP: 0033:0x7ff212d9ce59 [ 1010.701843][T31512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.701860][T31512] RSP: 002b:00007ff213c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1010.701880][T31512] RAX: ffffffffffffffda RBX: 00007ff213015fa0 RCX: 00007ff212d9ce59 [ 1010.701894][T31512] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 1010.701906][T31512] RBP: 00007ff213c65090 R08: 0000000000000010 R09: 0000000000000000 [ 1010.701918][T31512] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 1010.701930][T31512] R13: 00007ff213016038 R14: 00007ff213015fa0 R15: 00007ffc02172898 [ 1010.701969][T31512] [ 1011.483321][T31526] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6536'. [ 1011.495622][T31458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.534632][T31517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6535'. [ 1011.618001][T31517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.626869][T31517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.683885][T31517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.691295][T31517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.712018][T31517] batman_adv: batadv0: Interface deactivated: vlan0 [ 1011.718711][T31517] batman_adv: batadv0: Removing interface: vlan0 [ 1011.814487][T31537] rdma_rxe: rxe_newlink: failed to add wg1 [ 1011.925169][T31545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1012.301859][T31458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.368221][T31555] netlink: 'syz.0.6540': attribute type 1 has an invalid length. [ 1012.491893][T31555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1012.573035][T31565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6541'. [ 1012.582041][T31565] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1012.683105][T31559] bond4: (slave ip6gretap1): making interface the new active one [ 1012.693515][T31559] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1012.969072][T31578] netlink: 'syz.6.6544': attribute type 1 has an invalid length. [ 1013.032354][T25853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.124750][T31585] ip6gretap0: entered promiscuous mode [ 1013.148353][T31578] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1013.154354][T25853] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.210909][T25853] net_ratelimit: 117 callbacks suppressed [ 1013.210929][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.234384][T31585] netlink: 'syz.5.6546': attribute type 1 has an invalid length. [ 1013.287244][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.298488][T25853] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.330170][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.353463][T25853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.458226][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.466674][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1013.633266][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.650177][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1013.695390][T25853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.703253][T25853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.793270][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.797193][T31614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.872469][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1013.945890][T31625] __nla_validate_parse: 3 callbacks suppressed [ 1013.945908][T31625] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6552'. [ 1014.106165][T31628] block nbd6: not configured, cannot reconfigure [ 1014.154019][T31611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1014.232310][T31633] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1015.251249][T31654] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6561'. [ 1015.528969][T31662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6562'. [ 1015.551179][T31660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1015.818765][T31647] lo speed is unknown, defaulting to 1000 [ 1016.131231][T31692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1016.301953][T31663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6562'. [ 1016.481688][T31647] lo speed is unknown, defaulting to 1000 [ 1016.610045][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6573'. [ 1016.748625][ T35] wlan1: Trigger new scan to find an IBSS to join [ 1016.776525][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1017.781995][T31728] can: request_module (can-proto-0) failed. [ 1017.795075][T31728] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6579'. [ 1018.218772][T31743] ip6gre1: entered allmulticast mode [ 1018.251730][T31743] team0: Device ip6gre1 is of different type [ 1018.307047][T25856] net_ratelimit: 84 callbacks suppressed [ 1018.307070][T25856] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.424262][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.513834][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.573228][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.623344][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.673195][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.716879][ T35] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.727715][T31746] syzkaller0: entered promiscuous mode [ 1018.768752][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.769145][T31746] syzkaller0: entered allmulticast mode [ 1018.839054][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1018.849923][T25863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1019.062451][T31765] __nla_validate_parse: 3 callbacks suppressed [ 1019.062471][T31765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6588'. [ 1020.797886][T25854] wlan1: Trigger new scan to find an IBSS to join [ 1021.772245][T25867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.318574][T25867] net_ratelimit: 128 callbacks suppressed [ 1023.318595][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.403774][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.512415][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.554409][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.628865][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.750870][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.864993][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.883462][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.913958][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1023.944669][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.849716][T31806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1025.870555][T31806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1025.903320][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1026.320089][T31824] netlink: 'syz.3.6603': attribute type 13 has an invalid length. [ 1026.540762][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6602'. [ 1026.712783][T31783] lo speed is unknown, defaulting to 1000 [ 1026.729088][T31829] sch_tbf: peakrate 2173 is lower than or equals to rate 2972 ! [ 1027.196291][T31846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6606'. [ 1027.519453][T31835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.677878][T31842] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1027.690391][T31842] bond0 (unregistering): Released all slaves [ 1027.730108][T31783] lo speed is unknown, defaulting to 1000 [ 1028.097185][T31835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.354171][T31863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1028.411583][T25867] net_ratelimit: 93 callbacks suppressed [ 1028.411605][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.483196][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.515421][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.543237][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.583186][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.623190][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1028.630966][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1028.733857][T31878] ipt_ECN: cannot use operation on non-tcp rule [ 1028.760391][T31835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.773322][T31878] netlink: 'syz.6.6615': attribute type 1 has an invalid length. [ 1028.786743][T31878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1028.793996][T31878] IPv6: NLM_F_CREATE should be set when creating new route [ 1028.817408][T25867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.826527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.841040][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1029.260865][T31891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6621'. [ 1029.480581][T31835] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.500389][T31895] xt_CT: No such helper "netbios-ns" [ 1029.574118][T31901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6619'. [ 1029.985050][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6624'. [ 1030.370613][T31928] netlink: 'syz.6.6626': attribute type 1 has an invalid length. [ 1030.969646][T25863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.210326][T25855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.408684][T25854] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.464032][T25854] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.607195][T31963] netlink: 'syz.1.6632': attribute type 25 has an invalid length. [ 1031.615063][T31963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1031.656062][T25855] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.703722][T25854] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.705868][T31963] netlink: 'syz.1.6632': attribute type 25 has an invalid length. [ 1031.720315][T31963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1031.735405][T25854] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.772166][T25854] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.984983][T31973] syzkaller0: entered promiscuous mode [ 1032.010947][T31973] syzkaller0: entered allmulticast mode [ 1032.039496][T31978] veth1_vlan: left promiscuous mode [ 1032.068458][T31978] netlink: 'syz.6.6637': attribute type 2 has an invalid length. [ 1032.403450][T31976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6636'. [ 1032.694104][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6638'. [ 1032.899542][T32007] netlink: 'syz.5.6645': attribute type 4 has an invalid length. [ 1033.006170][T32014] netlink: 'syz.3.6646': attribute type 1 has an invalid length. [ 1033.031486][T32007] netlink: 'syz.5.6645': attribute type 4 has an invalid length. [ 1033.117796][T32014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.214164][T32021] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1033.372260][T32029] netlink: 181284 bytes leftover after parsing attributes in process `syz.0.6648'. [ 1033.478537][T25854] net_ratelimit: 88 callbacks suppressed [ 1033.478554][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.581526][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.692615][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.723266][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.743293][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.763347][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.793608][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.823154][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1033.929887][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1034.027510][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1034.092465][T32023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.308197][T32044] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1034.317264][T32044] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1035.474518][T32021] bond0: entered promiscuous mode [ 1035.486784][T32021] bond0: entered allmulticast mode [ 1035.523706][T32032] syzkaller0: entered promiscuous mode [ 1035.529304][T32032] syzkaller0: entered allmulticast mode [ 1035.570306][T25863] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.579222][T25863] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.595351][T25863] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.642093][T25863] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.822624][T25863] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.831548][T25863] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.899695][T32091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1035.913717][T25866] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.922631][T25866] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.108163][T32102] netlink: 412 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1036.643825][T32116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6662'. [ 1036.668289][T32126] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1036.688580][T32126] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1036.755571][T32133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6665'. [ 1036.970862][T32145] hsr0: entered promiscuous mode [ 1037.162686][T32150] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1037.195975][T32152] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6667'. [ 1037.392624][T32158] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6671'. [ 1037.744336][T25866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.757014][T25866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.820441][T25866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.829205][T25866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.087970][T32179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6673'. [ 1038.119175][T32179] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6673'. [ 1038.168104][T32179] vlan3: entered promiscuous mode [ 1038.178989][T32179] gretap0: entered promiscuous mode [ 1038.191784][T32179] vlan3: entered allmulticast mode [ 1038.211887][T32179] gretap0: entered allmulticast mode [ 1038.550341][T25865] net_ratelimit: 95 callbacks suppressed [ 1038.550364][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.561886][T32191] netlink: 'syz.0.6676': attribute type 1 has an invalid length. [ 1038.571755][T32191] netlink: 'syz.0.6676': attribute type 3 has an invalid length. [ 1038.590605][T32191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6676'. [ 1038.623287][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.643617][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.683139][T25863] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.768777][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.782769][T25854] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1038.854143][T32202] lo: Caught tx_queue_len zero misconfig [ 1038.859965][T32202] netlink: 'syz.3.6680': attribute type 3 has an invalid length. [ 1038.873571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.923458][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1038.939546][T32204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6681'. [ 1038.962381][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1039.011108][T25854] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1039.016181][T32204] netlink: 'syz.6.6681': attribute type 1 has an invalid length. [ 1039.036168][T32204] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6681'. [ 1039.519791][T32206] lo speed is unknown, defaulting to 1000 [ 1039.945708][T32206] lo speed is unknown, defaulting to 1000 [ 1040.671742][T32237] syzkaller0: entered promiscuous mode [ 1040.677575][T32237] syzkaller0: entered allmulticast mode [ 1040.951270][T32254] netlink: 'syz.3.6695': attribute type 1 has an invalid length. [ 1041.050921][T32254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1041.117616][T32254] macvlan2: entered promiscuous mode [ 1041.122967][T32254] macvlan2: entered allmulticast mode [ 1041.129545][T32254] bond1: entered allmulticast mode [ 1041.135181][T32254] bond1: entered promiscuous mode [ 1041.140782][T32254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1041.149699][T32254] team0: Port device macvlan2 added [ 1041.177177][T32254] bond1: (slave ip6gretap1): making interface the new active one [ 1041.184924][T32254] ip6gretap1: entered promiscuous mode [ 1041.204512][T32254] ip6gretap1: entered allmulticast mode [ 1041.211633][T32254] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1041.367764][T32263] sctp: [Deprecated]: syz.3.6695 (pid 32263) Use of int in maxseg socket option. [ 1041.367764][T32263] Use struct sctp_assoc_value instead [ 1041.601150][T32268] ip6gre1: entered allmulticast mode [ 1041.656492][T32268] team0: Device ip6gre1 is of different type [ 1041.966265][T32277] netlink: 'syz.1.6701': attribute type 1 has an invalid length. [ 1042.019480][T32283] __nla_validate_parse: 5 callbacks suppressed [ 1042.019500][T32283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1042.036037][T32283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6701'. [ 1042.046995][T32279] netlink: 'syz.3.6702': attribute type 1 has an invalid length. [ 1042.127286][T32277] bond4: entered promiscuous mode [ 1042.133817][T32277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1042.291090][T32279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1042.342174][T32285] bond4: (slave bridge1): making interface the new active one [ 1042.396977][T32285] bridge1: entered promiscuous mode [ 1042.404335][T32285] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1042.468298][T32286] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1042.699721][T32300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6706'. [ 1043.094674][T32315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6709'. [ 1043.553920][T25853] net_ratelimit: 104 callbacks suppressed [ 1043.553941][T25853] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.599568][T25853] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1043.733308][T25855] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.741076][T25855] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1043.866600][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1043.882660][T25865] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1044.110540][T25865] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1044.127392][T25865] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1044.244296][T25867] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1044.257048][T25867] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 1044.683437][T32337] Bluetooth: MGMT ver 1.23 [ 1044.709670][T32337] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 1044.806877][T32344] ip6gretap0: left promiscuous mode [ 1044.818295][T32344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.926125][T32344] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1044.965194][T25863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.972502][T25863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.055576][T32345] netlink: 'syz.5.6718': attribute type 15 has an invalid length. [ 1045.078201][T32362] xt_hashlimit: max too large, truncated to 1048576 [ 1045.197038][T32365] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6724'. [ 1045.209115][T32366] netlink: 'syz.3.6723': attribute type 1 has an invalid length. [ 1045.247520][T32366] bond3: entered promiscuous mode [ 1045.254610][T32366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1045.296358][T32366] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1045.308740][T32366] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1045.319418][T32366] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1045.332069][T32370] netlink: 'syz.5.6725': attribute type 1 has an invalid length. [ 1045.382353][T32367] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1045.396202][T32367] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1045.440572][T32370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.473215][T32373] bond1: (slave geneve2): making interface the new active one [ 1045.482661][T32373] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1045.494015][T25863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.512239][T25863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.536214][T25863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.554878][T25863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.705636][T32382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6728'. [ 1045.993804][ T30] INFO: task syz.4.6125:29733 blocked for more than 143 seconds. [ 1046.002260][ T30] Not tainted syzkaller #0 [ 1046.008066][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1046.019534][ T30] task:syz.4.6125 state:D stack:25704 pid:29733 tgid:29732 ppid:29190 task_flags:0x400040 flags:0x00080002 [ 1046.031592][ T30] Call Trace: [ 1046.034872][ T30] [ 1046.037816][ T30] __schedule+0x1821/0x5740 [ 1046.042456][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1046.047756][ T30] ? __pfx___schedule+0x10/0x10 [ 1046.061239][ T30] ? schedule+0x90/0x360 [ 1046.065564][ T30] schedule+0x164/0x360 [ 1046.069852][ T30] schedule_preempt_disabled+0x13/0x30 [ 1046.075360][ T30] __mutex_lock+0x7f7/0x1550 [ 1046.080002][ T30] ? __mutex_lock+0x608/0x1550 [ 1046.084796][ T30] ? nfsd_nl_version_get_doit+0x181/0xcd0 [ 1046.090548][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1046.095652][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1046.100335][ T30] ? genlmsg_put+0x137/0x2e0 [ 1046.107439][ T30] nfsd_nl_version_get_doit+0x181/0xcd0 [ 1046.113647][ T30] ? irqentry_exit+0x218/0x760 [ 1046.119333][ T30] ? trace_irq_disable+0x3b/0x140 [ 1046.126000][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1046.132150][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1046.138477][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1046.144154][ T30] ? __asan_memcpy+0x40/0x70 [ 1046.148776][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1046.155327][ T30] ? __sanitizer_cov_trace_const_cmp8+0x17/0x90 [ 1046.161615][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1046.166230][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.171267][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1046.177714][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1046.183202][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1046.187975][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.192996][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1046.198639][ T30] ? down_read+0x270/0x2e0 [ 1046.203293][ T30] ? genl_rcv+0xd/0x40 [ 1046.207407][ T30] genl_rcv+0x28/0x40 [ 1046.211382][ T30] netlink_unicast+0x75c/0x8e0 [ 1046.216338][ T30] netlink_sendmsg+0x813/0xb40 [ 1046.221142][ T30] ? irqentry_exit+0x218/0x760 [ 1046.226004][ T30] ? trace_irq_disable+0x3b/0x140 [ 1046.231030][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.237594][ T30] ? ____sys_sendmsg+0x959/0x9f0 [ 1046.242626][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1046.247413][ T30] ? __might_fault+0xaf/0x130 [ 1046.252089][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.257580][ T30] ? import_iovec+0x73/0xa0 [ 1046.262120][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1046.266812][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1046.271773][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.277043][ T30] ? futex_wait+0x2a2/0x390 [ 1046.281577][ T30] ? __fget_files+0x2a/0x420 [ 1046.286258][ T30] ? __fget_files+0x3a0/0x420 [ 1046.290960][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1046.296087][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1046.301637][ T30] ? rcu_is_watching+0x15/0xb0 [ 1046.306669][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.312786][ T30] do_syscall_64+0x15f/0xf80 [ 1046.317723][ T30] ? clear_bhb_loop+0x40/0x90 [ 1046.333229][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.339523][ T30] RIP: 0033:0x7f4e27d9ce59 [ 1046.344897][ T30] RSP: 002b:00007f4e28c78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.355711][ T30] RAX: ffffffffffffffda RBX: 00007f4e28015fa0 RCX: 00007f4e27d9ce59 [ 1046.365853][ T30] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1046.374811][ T30] RBP: 00007f4e27e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1046.384232][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.392282][ T30] R13: 00007f4e28016038 R14: 00007f4e28015fa0 R15: 00007ffe0d335858 [ 1046.400377][ T30] [ 1046.403862][ T30] [ 1046.403862][ T30] Showing all locks held in the system: [ 1046.411774][ T30] 1 lock held by khungtaskd/30: [ 1046.416671][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1046.427016][ T30] 2 locks held by syslogd/4976: [ 1046.431906][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1046.441832][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1046.450759][ T30] 2 locks held by getty/5382: [ 1046.455447][ T30] #0: ffff888035ece0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1046.465330][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1046.475507][ T30] 5 locks held by kworker/u8:28/25867: [ 1046.480990][ T30] 2 locks held by syz.2.5433/27032: [ 1046.495488][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.504440][ T30] #1: ffffffff8ec8b260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1046.515642][ T30] 2 locks held by syz.4.6125/29733: [ 1046.521184][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.530654][ T30] #1: ffffffff8ec8b260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x181/0xcd0 [ 1046.541564][ T30] 1 lock held by syz.6.6708/32306: [ 1046.547174][ T30] #0: ffff88804eb68840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1046.558703][ T30] 1 lock held by syz.0.6719/32347: [ 1046.565596][ T30] #0: ffff88803af9f140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 1046.576247][ T30] 4 locks held by syz.0.6719/32348: [ 1046.581780][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.591540][ T30] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1046.601241][ T30] #2: ffff88803af9f140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 1046.611042][ T30] #3: ffff8880321fa348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 1046.620575][ T30] 2 locks held by syz.1.6726/32372: [ 1046.626643][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.635756][ T30] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1046.645576][ T30] 2 locks held by syz.1.6726/32377: [ 1046.650893][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.660139][ T30] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1046.669767][ T30] 2 locks held by syz.5.6727/32380: [ 1046.675378][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.683874][ T30] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1046.692902][ T30] 2 locks held by syz.5.6727/32383: [ 1046.698337][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.706651][ T30] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1046.716583][ T30] 2 locks held by syz.5.6727/32389: [ 1046.721811][ T30] #0: ffffffff8fe42788 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1046.729994][ T30] #1: ffffffff8fe425c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1046.738983][ T30] [ 1046.741344][ T30] ============================================= [ 1046.741344][ T30] [ 1046.759185][ T30] NMI backtrace for cpu 1 [ 1046.759201][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1046.759213][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.759220][ T30] Call Trace: [ 1046.759225][ T30] [ 1046.759231][ T30] dump_stack_lvl+0xe8/0x150 [ 1046.759248][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1046.759262][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1046.759275][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1046.759290][ T30] sys_info+0x135/0x170 [ 1046.759301][ T30] watchdog+0xfd3/0x1030 [ 1046.759320][ T30] ? watchdog+0x1c9/0x1030 [ 1046.759338][ T30] kthread+0x389/0x470 [ 1046.759351][ T30] ? __pfx_watchdog+0x10/0x10 [ 1046.759365][ T30] ? __pfx_kthread+0x10/0x10 [ 1046.759378][ T30] ret_from_fork+0x514/0xb70 [ 1046.759392][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1046.759402][ T30] ? __switch_to+0xc79/0x1410 [ 1046.759419][ T30] ? __pfx_kthread+0x10/0x10 [ 1046.759433][ T30] ret_from_fork_asm+0x1a/0x30 [ 1046.759453][ T30] [ 1046.759478][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1046.885663][ C0] NMI backtrace for cpu 0 [ 1046.885683][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1046.885704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1046.885715][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1046.885756][ C0] Code: 3b 7c 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 71 1e 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1046.885773][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 1046.885789][ C0] RAX: 00000000003450d7 RBX: ffffffff819a958a RCX: 0000000080000001 [ 1046.885803][ C0] RDX: 0000000000000001 RSI: ffffffff8dfb69f3 RDI: ffffffff8c28b760 [ 1046.885815][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1046.885829][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1046.885845][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1046.885857][ C0] FS: 0000000000000000(0000) GS:ffff888125276000(0000) knlGS:0000000000000000 [ 1046.885872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1046.885884][ C0] CR2: 00005555789d04e8 CR3: 0000000034142000 CR4: 00000000003526f0 [ 1046.885902][ C0] Call Trace: [ 1046.885909][ C0] [ 1046.885916][ C0] default_idle+0x9/0x20 [ 1046.885936][ C0] default_idle_call+0x72/0xb0 [ 1046.885957][ C0] do_idle+0x36a/0x5f0 [ 1046.885990][ C0] ? __pfx_do_idle+0x10/0x10 [ 1046.886012][ C0] ? do_idle+0xc/0x5f0 [ 1046.886033][ C0] cpu_startup_entry+0x43/0x60 [ 1046.886053][ C0] rest_init+0x2de/0x300 [ 1046.886075][ C0] start_kernel+0x38a/0x3e0 [ 1046.886177][ C0] x86_64_start_reservations+0x24/0x30 [ 1046.886208][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1046.886232][ C0] common_startup_64+0x13e/0x147 [ 1046.886266][ C0] [ 1047.079009][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1047.085905][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1047.095182][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1047.105250][ T30] Call Trace: [ 1047.108523][ T30] [ 1047.111452][ T30] vpanic+0x56c/0xa60 [ 1047.115444][ T30] ? __pfx___schedule+0x10/0x10 [ 1047.120307][ T30] ? __pfx_vpanic+0x10/0x10 [ 1047.124831][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1047.131023][ T30] panic+0xc5/0xd0 [ 1047.134750][ T30] ? __pfx_panic+0x10/0x10 [ 1047.139176][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1047.144554][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1047.150748][ T30] watchdog+0x102c/0x1030 [ 1047.155090][ T30] ? watchdog+0x1c9/0x1030 [ 1047.159513][ T30] kthread+0x389/0x470 [ 1047.163583][ T30] ? __pfx_watchdog+0x10/0x10 [ 1047.168259][ T30] ? __pfx_kthread+0x10/0x10 [ 1047.172850][ T30] ret_from_fork+0x514/0xb70 [ 1047.177447][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.182565][ T30] ? __switch_to+0xc79/0x1410 [ 1047.187246][ T30] ? __pfx_kthread+0x10/0x10 [ 1047.191836][ T30] ret_from_fork_asm+0x1a/0x30 [ 1047.196610][ T30] [ 1047.200183][ T30] Kernel Offset: disabled [ 1047.204503][ T30] Rebooting in 86400 seconds..