last executing test programs: 2m23.4378998s ago: executing program 4 (id=5808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x4}, 0x8) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2m22.903835375s ago: executing program 4 (id=5812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000340)=0x10000000, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0x28, 0x0, &(0x7f00000001c0)="c1188e99b95d02ff4284860186ddce25da1df9896bddad855204c8a27a3c0a727391b2498b75d45f", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x4000000, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) listen(r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095", @ANYRESHEX=r4, @ANYBLOB="520e57e354b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) 2m22.650329392s ago: executing program 4 (id=5814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, r3, 0xffffffffffffffff, 0x7}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@empty, @loopback, @rand_addr=0x64010102}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r7 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@rose, @null, @rose, @netrom, @bcast, @netrom, @default, @netrom]}, &(0x7f0000000180)=0x48, 0x800) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f00000001c0)=0x7, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006c62b0686173685f73746174730013a900000000000000000000000000000000050003000b00"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @window={0x3, 0xfff9, 0xa}, @window={0x3, 0x42, 0x1}, @window={0x3, 0xfff1, 0x7}, @sack_perm, @window={0x3, 0x7, 0x6}, @timestamp, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0xcbc, 0xf}], 0xb) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400080000000000000093a9fc", @ANYRES32=0x0, @ANYBLOB="00080000075005002000128008000100677470001400028008000300010007000500050001000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 2m22.446447433s ago: executing program 4 (id=5817): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 2m22.135897724s ago: executing program 4 (id=5818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c03000035000701fffffffffeffffff057c00000800048004004980"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000005d50ecaa37007000000000000e700000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8b26, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5645, 0x0, 0x0, 0x0, 0x5}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x66}}, @map_val={0x18, 0x8, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x1ef, 0xb1, &(0x7f00000004c0)=""/177, 0x40f00, 0x58, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r13], &(0x7f0000000340)=[{0x0, 0x4, 0xb, 0x9}, {0x5, 0x4, 0x7}], 0x10, 0x2}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000780)={'tunl0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0x5, 0xd7, {{0x22, 0x4, 0x2, 0x14, 0x88, 0x64, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@empty}]}, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x2000aef8}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x71, 0x1, 0x4, [{@local, 0x100}, {@empty, 0x6}, {@empty, 0xfffffffe}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x9}, {@empty, 0x6b}, {@loopback, 0x4}]}, @noop, @rr={0x7, 0xb, 0xc2, [@remote, @rand_addr=0x64010101]}]}}}}}) getuid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x50) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r14, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) setsockopt$bt_BT_VOICE(r14, 0x112, 0xb, &(0x7f0000000040), 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2m8.261934762s ago: executing program 4 (id=5821): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kvm_halt_poll_ns\x00', r0}, 0x18) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) 2m7.749319449s ago: executing program 32 (id=5821): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kvm_halt_poll_ns\x00', r0}, 0x18) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) 5.203772828s ago: executing program 5 (id=6290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x11, 0x2, 0x0) close(r3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4$unix(r3, 0x0, 0x0, 0x80800) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r4, 0x0, 0x0, 0x400000000000000) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) shutdown(r3, 0x1) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) 5.202719344s ago: executing program 3 (id=6291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000180007800c00018003000140e000000108000800ff00000005000500020000000500010006"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0}, 0x90) 5.019217848s ago: executing program 3 (id=6292): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x300c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000680)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x11, 0x2, 0x0) close(r6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xf3f, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) accept4$unix(r6, 0x0, 0x0, 0x80800) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r7, 0x0, 0x0, 0x400000000000000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xdfc2, 0x2, [0x9, 0x10]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={r9, 0x5, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={r10, 0xcc, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x6}, @in6={0xa, 0x4e20, 0x6, @private0, 0xb}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x8}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x6, @remote}, @in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000540)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x15) select(0x40, &(0x7f0000000580)={0x6, 0xffff, 0x2, 0x100000000, 0x6, 0x1}, &(0x7f00000005c0)={0x6, 0x8, 0x15, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x3, 0x0, 0x9}, &(0x7f0000000600)={0x8, 0x1000, 0x1, 0x8, 0xb55e, 0x6, 0x8b, 0x8000000000000001}, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.202846136s ago: executing program 5 (id=6296): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x2, 0x8, 0x7f}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@getsa={0x60, 0x12, 0x200, 0x70bd2c, 0x25dfdbfd, {@in6=@local, 0x4d3, 0x2, 0xff}, [@srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @lifetime_val={0x24, 0x9, {0x40, 0x0, 0x0, 0x4}}]}, 0x60}}, 0x20000000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@getsa={0x60, 0x12, 0x200, 0x70bd2c, 0x25dfdbfd, {@in6=@local, 0x4d3, 0x2, 0xff}, [@srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @lifetime_val={0x24, 0x9, {0x40, 0x0, 0x0, 0x4}}]}, 0x60}}, 0x20000000) accept4(r3, 0x0, 0x0, 0x80000) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r5, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$l2tp(0x2, 0x2, 0x73) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r4, 0x0, 0x4004080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 4.062429007s ago: executing program 3 (id=6298): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 3.926473448s ago: executing program 5 (id=6299): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='F', 0x1}], 0x1, 0x0, 0x0, 0x400400d}], 0x1, 0x8080) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8}, 0x10) recvmmsg(r2, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000040)={@empty, @rand_addr=0x64010101}) 3.787073778s ago: executing program 3 (id=6303): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7f, 0x81, 0x9, 0xa, 0xab, 0xe, 0xb, 0x5, 0x6, 0xfffffff9, 0xe, 0x19, 0x18, 0x10, 0x4a, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x8044) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd7b}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xe, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 3.766528579s ago: executing program 5 (id=6304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0) r1 = socket(0xa, 0x3, 0x2) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000040)={0x7, 'veth1_to_team\x00', {0x491b210c}, 0x8001}) 3.637812608s ago: executing program 2 (id=6305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f00000003c0)={@broadcast, @empty}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)="262d74dd21bb17dd69b772", 0xb}], 0x1, 0x0, 0x10001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) getsockopt$inet6_buf(r7, 0x29, 0x4c, 0x0, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r6}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r8 = accept4(r7, 0x0, &(0x7f0000000080), 0x80000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf256f0000000a0006000802110000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x2400c014) 3.572903265s ago: executing program 5 (id=6307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xbd}]}) (async) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001c0600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020000901bb97375780000fe06d2e826cfc48e3a0ba874"], 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) (async) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000240)=0x79b7, 0x4) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f6"], 0x124a) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 3.468123628s ago: executing program 2 (id=6309): r0 = socket$inet6(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/254, 0xfe}], 0x1}, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='macvtap0\x00') sendto$inet6(r0, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000003}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x48, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x805}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/254, 0xfe}], 0x1}, 0x0) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), &(0x7f00000002c0)=0x4) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='macvtap0\x00') (async) sendto$inet6(r0, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000003}, 0x1c) (async) 3.00850686s ago: executing program 2 (id=6310): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000004c0)={0x10, 0x0, 0x10, 0x8c9e3802df995a44}, 0xc) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x5) listen(r3, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000e80cbf1853526a4b2dadcc0438f5bacb08c87210295030175718fa03cc50b5aa8028209ac3bfa5332233e8cbd9c55c2479a9f93523d270590"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x400c010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8, 0x7800, 0x7fffffff, 0x5, {{0x16, 0x4, 0x0, 0x10, 0x58, 0x68, 0x0, 0xc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x4, [{@multicast2, 0x128c4eda}]}, @noop, @end, @timestamp_addr={0x44, 0x34, 0x62, 0x1, 0x2, [{@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xfffff7a2}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffb0}]}, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xc0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r8, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x100, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x100}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) 2.886864119s ago: executing program 5 (id=6311): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x2002000) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02c8057d9cda44db0200000025bd70cc939d29a0b100"], 0x10}}, 0x810) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="080bf4e404000000050000000000008084100000", @ANYRES32, @ANYBLOB="000000240000000000000000000000fd9f325075773386ee98e28ac9eb1ce3835348fce126bc40374a4e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0xfffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.716264752s ago: executing program 2 (id=6312): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 2.524439084s ago: executing program 0 (id=6313): socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="009b26232f0a10be5c00"/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fb015159e6252964adba66c197f1bc4c0000000000000000070000008164bac717c3ec4db1bbf6d35b4e8d84d574c459c7f0a7a4c25d19aae84953c9253ae5cd4d528300396d0cc19d9a6c795ff00dc853caf1a39070ba258e4480bbfd51e66e2bf4de80017c963c4f50d1e4c7d739709b207ab84693e7a063c33f0e58617aa63f46d0d3a6cf03e998d02663c741f49f152ddd60cd3acecc4e3d099a314841d0d41ebd0e3b11e0a7cca8874578f3a1ca880613fb2b1eecf614af1e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.442966157s ago: executing program 2 (id=6314): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010021bd5000ffdbdf25180000000c003700000000000000000008004380"], 0x28}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x4d}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}]}, 0x30}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200100c4}, 0x20004055) 2.285792537s ago: executing program 0 (id=6316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000008000100000000000c000480050003000000000008f1010001000000400008800c00078008000600cb0000000c00078035000500636e95032400078008000500b7932e2b0800050078755c6a080005002bef295908000500ee7f8d3600"/106], 0x70}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) 2.278568743s ago: executing program 2 (id=6317): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x8850) unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x38}}, 0x24000854) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e18f97680a2e24f1b03ac3779a2fb0fbb0bc21cd4a8bb3022ca20570150c8fd77f7502cc96b919a9aaa5b1ddac283ea3a1d25a74dce425fb30f9797e691c7cd31b5f408a61080c3f59f3f45dccbf9094f38920d181956a84385eccbe46783a7a548d1ff98e9ab2a74e70ad8627701ebe1d7719c50a06d27d1a59837859a5a1749432ff526dc3f838cb806d837b08eb0ce31da0aed47b54757399ad3fcd14fe724"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.974126746s ago: executing program 0 (id=6318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={0x0, 0x39, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4049000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@newtfilter={0x550, 0x2c, 0x200, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x524, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_SEL={0x94, 0x5, {0x7, 0x4, 0x8, 0x800, 0xffff, 0xc8, 0x18, 0x8, [{0x4, 0x5, 0xd8, 0x5}, {0x81, 0x8, 0x8000000, 0x3}, {0x7fffffff, 0x0, 0x6, 0x2}, {0x3, 0x6, 0x8000}, {0x10001, 0x30, 0x80, 0x4}, {0x200, 0x6, 0xffffffff, 0x8}, {0xfffffeff, 0x3, 0x11, 0x10000}, {0x4, 0x7, 0x5, 0x1000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xf, 0x4}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_U32_POLICE={0x468, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x13}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0xfffffffb, 0x6, 0x2f, {0xff, 0x1, 0x1ff, 0x4, 0x1, 0x401}, {0x4, 0x2, 0x300, 0x3, 0x7, 0x7}, 0xfffffff8, 0x4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x100, 0xfffff63d, 0xffbffffc, 0x3, 0x3, 0x8, 0x7, 0x617b7e78, 0xfffffff7, 0xfffffff9, 0x10001, 0xd, 0x3f85, 0x3ff, 0x135b, 0x3, 0x6, 0xab8, 0x9, 0x8, 0x4143912f, 0x9, 0x3, 0xfffffffb, 0xfffff800, 0xc, 0x7, 0x8, 0x2, 0x6, 0x6, 0x1, 0x23, 0x1, 0x41, 0x0, 0x0, 0x6, 0x10001, 0x6, 0x9, 0x4, 0x95, 0x2000, 0x8, 0x97f, 0x9e70, 0x7, 0x1, 0x6, 0x6, 0xfffffff6, 0x4, 0x1, 0x5, 0x4, 0xc0000, 0x4, 0x5f, 0xfe, 0x0, 0xffffffff, 0xff, 0xffffffff, 0x480, 0x3, 0x1, 0xe0, 0x5, 0x2, 0x5, 0x6, 0x10, 0x1, 0x1, 0x10000, 0x7, 0x0, 0x1, 0x3, 0x3, 0x0, 0x1, 0x8, 0xd6, 0xb, 0x9, 0xc21, 0x6, 0xc16, 0x550fd9db, 0x47ff, 0x3, 0x1, 0x400, 0x101, 0x9, 0x3, 0x9, 0x8001, 0x7, 0x1, 0xc, 0x5, 0xfeb, 0xfffffff7, 0x0, 0x5da, 0x80000000, 0xff, 0xe6a, 0x4, 0x7, 0x4, 0x6, 0x3ff, 0x7, 0x2, 0xfffffff7, 0x800, 0x7, 0x40, 0x8, 0x400, 0x5, 0x3, 0x1, 0xa11, 0x0, 0xfff, 0x4, 0x200, 0x1, 0x4d3, 0x101, 0x7, 0x3, 0x7, 0xad0, 0x0, 0x4, 0x1, 0x7fffffff, 0x8, 0xfffffff9, 0x7, 0x6, 0x7, 0x6, 0x7, 0x6, 0x50b6138d, 0x0, 0x3ff, 0x61820b9a, 0x7, 0x10000, 0x7, 0x3abe, 0x3, 0x9, 0x1, 0xfffffff8, 0x7, 0x671, 0x1000, 0xfffffeff, 0x2, 0x9, 0x2, 0x101, 0xfffffff8, 0x80000001, 0x9, 0x6a, 0xf, 0x401, 0x2, 0xffff, 0x0, 0x1, 0x1, 0x2, 0x0, 0x2, 0x0, 0x5, 0x33c, 0xffffff0a, 0x3, 0x8, 0xfec0, 0x5, 0x1, 0x200, 0x8, 0x6, 0x10000, 0x2, 0x0, 0xd3, 0x7, 0xff, 0x7, 0x3, 0x7, 0xfffffff7, 0x4, 0x9, 0x1, 0xfffffffc, 0x7c, 0x2, 0x8af7, 0xec, 0x7, 0x5ae, 0x8001, 0x4, 0x10001, 0x5, 0x1, 0x7fffffff, 0x132, 0x3, 0x6, 0xf, 0xfffffff8, 0x8c1e, 0x1, 0xc, 0xe3f8, 0x2, 0x4, 0x0, 0x7, 0x900000, 0x3, 0x47d, 0xffffffff, 0x4, 0x4, 0x1000, 0x2, 0x2, 0x9, 0x2, 0x1, 0x7, 0x80000001, 0x1, 0x7, 0x3ff, 0x2, 0x6]}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0x8}}]}}]}, 0x550}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@allocspi={0x100, 0x16, 0x10, 0x70bd29, 0x25dfdbfe, {{{@in=@empty, @in6=@remote, 0x4e22, 0x8, 0x4e20, 0x6, 0x2, 0x80, 0x40, 0x62, 0x0, r5}, {@in6=@mcast2, 0x4d2, 0x46}, @in=@remote, {0x1000, 0xd, 0x5, 0x0, 0xc93c, 0xfffffffffffffffa, 0x6f, 0xffffffffffffffff}, {0x3, 0x1000, 0x5, 0x6}, {0x96c, 0x2, 0x7c}, 0x70bd28, 0x3500, 0xa, 0x4, 0x7, 0x40}, 0x6, 0x6}, [@replay_thresh={0x8, 0xb, 0xfffffff4}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 1.562882702s ago: executing program 0 (id=6319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='neigh_create\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.27332312s ago: executing program 1 (id=6320): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x56}, 0x10}, 0x2b) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r9) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r8, @ANYRES16=r10, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 1.122961923s ago: executing program 0 (id=6321): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060500000000000000000007"], 0x60}}, 0x20004000) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000010}}], 0x1, 0x40) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000090) syz_genetlink_get_family_id$nl80211(0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000280)=[{r1}, {r4, 0x2}, {r4}, {r5, 0x610}], 0x4, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB], 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) close(0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 1.037313631s ago: executing program 3 (id=6322): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x1001f, 0xb}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="270302", 0x3}], 0x1}, 0x4040080) r9 = socket$kcm(0x2, 0x5, 0x84) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESOCT=r9, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000008000a002d0e000008000700090000000800090000000000080002"], 0x4c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="7961fdffffff000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYRES32, @ANYBLOB="0c00990001fcffff2f0000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 898.487662ms ago: executing program 3 (id=6323): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)) close(r2) (async) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r3 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x61d1, 0x0) 847.113137ms ago: executing program 1 (id=6324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xfffffffffffffd28, 0x2, @broadcast}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81c20800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x204, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000010}, 0x1) 674.397887ms ago: executing program 1 (id=6325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESOCT=r1, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) sendmsg$sock(r2, &(0x7f0000000e80)={&(0x7f00000008c0)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffe, 0x2}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000980)="962c91de80181031f61b00af6bb41d9e9499d371efa346af39480357fe58a434bc425e47fb86c08feb24039b1050e763eb8a5ee60835379f26338f4359ea36a5a7f1986fc4e7fcd1132391", 0x4b}, {&(0x7f0000000a00)="26c2914028dc178f4644c02e6eeaa414188d9ee90b0e646a3414f9599cad3c2d5893d6f5eda2afe496c0ff3a099ef22cf031ff18ab60ced41a290acce72316bbf253e7d68913a1994d6c7c390d26da1bebe28c9e2ca4c71ed770b8837edad79de4ff577116b0bda7e60e4f389605", 0x6e}, {&(0x7f0000000740)}, {&(0x7f0000000a80)="90524be4de0cafbc2901175064bb9e272717ef1def2506b8670b401d4229b70164c94f22fcf1d61bc7ddd59e8f2f13c6a067d9009a40b1633f88db88c97fb353977017d6845f2c1fbe5c1705a2b933237d8b3069c67b76b14cd8477e7dac99ff395ed6922291b06710ae283cea40b601e73e89a73bfd137591b3dae86c4ef63f60fb5674e378fb7eaba867836b22ea1b3f7ffdf311a42b7a2c438dccc7d36ef557acf17b1d1c1c820df2becb86933b4a60a0ef864b1aab43ae2bb9a7547bbf3506746213c290bd4e3dce380c4173275c8c663e4a2fd5960f034935f1ba6a1b3772c80ab0e3bcffbfd80232739e48e8be08ff828b14", 0xf5}, {&(0x7f0000000b80)="4c87b2b55fbeba9de968f9bf166a6662e2836b083dfc21ee3ebc258fb0253e07d4dc4832acc315f55770a8b9a6a13db70be068ec0be445f26da4", 0x3a}, {&(0x7f0000000bc0)="99e42ab7f323b7e7d69ab7ef6b31ee1b4c38504adbe81132867f6e9401f47f2978f34fa31ce622f9b47cb22aa70a88e99587c660bc13c8d3e7ba66ed25cd8e3cb18aaa3a84bce3a202065dc2bd11773b0f656c86d71fecf323c14bde8190960c5fbe83298ef64fcf014f7cf9c0970e2507c02b", 0x73}, {&(0x7f0000000c40)="ab6b5c6c41674750382a566420da0c4a62ff42d599925b27b015363eafdfbe7ca00b3f051d1c0ea999b3e8c44d9197b96eb1e864bfcc514d3b1c42f9278475b75bb34cab4314895751f5a3eb6ea97c164a013c31f4cc6d6ab6a00e14b4e788b50b4936b4a740984c908015a46f00d4af5c393d14cd4e0c913fb8bbf2262bea983a8693999f08f90af52523da4adee5fb53ce9783719734c3129c2c1c62058e9107b63f47b167ad1217fd6b84ce55a521dbf9067c0fc0dfe5d28cd8351c51ba6d4bdd97dba3ca19c4f9adef4eeed1a1d955f18ae91f2f3d48c97f12cd518810234b13b6c9a6c59cbeabb7ed72a4f56260e86ba77658bcf5", 0xf7}], 0x7}, 0x84d224f5d357a18d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r3, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0xfffffffc}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xdc}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140005"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c400000004000000080000000000000903000000060000000000000b05000000000000000a00000dfe00000007000000fdffffff0a0000000300000008000000000000000c00000001000000090000000000000006000000030000000c000000030000000700000004000000020000000200400003000000020000000900000000000001000000000d006b040100000000000001000000007a00490304000000000000110100000008000000000000000100000d000000000b00000002000000000000000000000201000000002e3000"], &(0x7f0000000fc0)=""/115, 0xe0, 0x73, 0x0, 0xa5e, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1b00000000000000000000000e00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003a1fc593e0200"/28], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfad, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xcd}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x932d}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0xc, 0x1, &(0x7f00000003c0)=""/1, 0x41000, 0x14, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x3, 0x2}], 0x10, 0x6}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 525.888357ms ago: executing program 1 (id=6326): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f00008d1000/0x1000)=nil, 0x1000, 0x2000005, 0x3032, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x1ffffffffff, 0x4, 0x7f, 0xc, 0xffffffffffffff]}, &(0x7f0000000240)=0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x0, 0xe8, 0x0, 0x1, 0x4, 0x10000, @value=r2}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x8880) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf25090000000800060008000000080006001800000008000600060000003400038008000500ac1e010108000500e000000206000400060000000600070004000000060007004e230000080003000300000008000500f3ffffff"], 0x68}}, 0x45) close(0x3) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000380)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000004c0)=0x8001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffb8, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES64], 0xd0}}, 0x6543134d735d5d9a) 274.636881ms ago: executing program 1 (id=6327): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="d3c462879d29a55d6eb0b539a90440b78df39e7ae4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 166.477167ms ago: executing program 0 (id=6328): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x58, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x64604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_MAP={0x24, 0xe, {0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffff, 0x5, 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f00000001c0)=""/104, 0x134000, 0x1000, 0x800, 0x2}, 0x20) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000180)=0x2) 0s ago: executing program 1 (id=6329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000020000085000000410000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'gre0\x00'}}) r4 = socket(0x1d, 0x2, 0x6) r5 = epoll_create(0x2) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f00000027c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="20000000000000000000000007000000440c1d600000000300000003010000001c000000000000000000000008"], 0x40}}], 0x1, 0x4004040) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000001000000000040000000180100002020642500000000002020207b1a00fe00000000bfa10000000000000701e6ebe3edffffb702000008000000b7030000040000008500000006000000180100002020692500000000002020207b1af8ff00000000bfa10000000600000000000000ffffffb702000008000000b7030000910e000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1}, 0x94) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x20008000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) kernel console output (not intermixed with test programs): 8] tipc: Enabled bearer , priority 0 [ 875.319438][T27307] syzkaller0: entered promiscuous mode [ 875.324970][T27307] syzkaller0: entered allmulticast mode [ 875.373721][T27299] ip6_vti0 speed is unknown, defaulting to 1000 [ 875.398898][T27307] tipc: Resetting bearer [ 875.411249][T27304] tipc: Resetting bearer [ 875.438178][T27304] tipc: Disabling bearer [ 875.580507][T27328] netlink: 'syz.1.5712': attribute type 19 has an invalid length. [ 875.598037][T27328] __nla_validate_parse: 7 callbacks suppressed [ 875.598059][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5712'. [ 875.653405][T27332] syzkaller0: entered promiscuous mode [ 875.661337][T27332] syzkaller0: entered allmulticast mode [ 875.687466][T27299] lo speed is unknown, defaulting to 1000 [ 875.719848][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5710'. [ 875.984422][T27299] chnl_net:caif_netlink_parms(): no params data found [ 876.086303][T27299] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.093576][T27299] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.101315][T27299] bridge_slave_0: entered allmulticast mode [ 876.109468][T27299] bridge_slave_0: entered promiscuous mode [ 876.119196][T27299] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.126731][T27299] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.134001][T27299] bridge_slave_1: entered allmulticast mode [ 876.141842][T27299] bridge_slave_1: entered promiscuous mode [ 876.178692][T27299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.191307][T27299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.230340][T27299] team0: Port device team_slave_0 added [ 876.247165][T27299] team0: Port device team_slave_1 added [ 876.423748][T27299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.453203][T27299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.493817][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554ad800: rx timeout, send abort [ 876.506012][T27299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.528688][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5714'. [ 876.554204][T27299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.562271][T27299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.589235][T27299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.653069][T27351] syz_tun: entered allmulticast mode [ 876.708596][T27299] hsr_slave_0: entered promiscuous mode [ 876.715641][T27299] hsr_slave_1: entered promiscuous mode [ 876.723655][T27299] debugfs: 'hsr0' already exists in 'hsr' [ 876.730566][T27299] Cannot create hsr debugfs directory [ 876.973738][ T3836] bridge_slave_1: left allmulticast mode [ 876.980176][ T3836] bridge_slave_1: left promiscuous mode [ 876.986052][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.000927][ T3836] bridge_slave_0: left allmulticast mode [ 877.007192][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554ad800: abort rx timeout. Force session deactivation [ 877.047099][ T3836] bridge_slave_0: left promiscuous mode [ 877.053022][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.145671][T27362] netlink: 'syz.3.5719': attribute type 33 has an invalid length. [ 877.153915][ T5150] Bluetooth: hci0: command tx timeout [ 877.173970][T27362] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5719'. [ 878.338737][ T3836] bond0 (unregistering): left promiscuous mode [ 878.345012][ T3836] bond_slave_0: left promiscuous mode [ 878.352011][ T3836] bond_slave_1: left promiscuous mode [ 878.357685][ T3836] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 878.366103][ T3836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.376928][ T3836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.388055][ T3836] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 878.397194][ T3836] bond0 (unregistering): Released all slaves [ 878.412119][ T3836] bond1 (unregistering): Released all slaves [ 878.536627][ T3836] bond2 (unregistering): (slave veth7): Releasing active interface [ 878.545445][ T3836] bond2 (unregistering): Released all slaves [ 878.560015][ T3836] bond3 (unregistering): Released all slaves [ 878.574250][ T3836] bond4 (unregistering): Released all slaves [ 878.588841][ T3836] bond5 (unregistering): Released all slaves [ 878.609631][T27350] syz_tun: left allmulticast mode [ 878.647087][ T38] net_ratelimit: 12 callbacks suppressed [ 878.647109][ T38] bond7: (slave macvlan4): failed to get link speed/duplex [ 878.754532][ T3836] tipc: Disabling bearer [ 878.765819][ T3836] tipc: Left network mode [ 878.796005][T27389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5724'. [ 878.826867][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 878.937936][T27395] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5726'. [ 879.001010][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 879.227530][ T5150] Bluetooth: hci0: command tx timeout [ 879.247175][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 879.401974][T27299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 879.427488][T27421] x_tables: duplicate underflow at hook 3 [ 879.428444][T27299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 879.494535][T27299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 879.563521][T27299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 879.623592][T27432] wg1 speed is unknown, defaulting to 1000 [ 879.631202][ T38] bond7: (slave macvlan4): failed to get link speed/duplex [ 879.818815][T27432] wg1 speed is unknown, defaulting to 1000 [ 879.857173][T27432] wg1 speed is unknown, defaulting to 1000 [ 879.879189][T27432] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 879.891363][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 879.923902][T27432] wg1 speed is unknown, defaulting to 1000 [ 879.959569][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.001750][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.117129][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.118975][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 880.161803][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.242992][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806651a800: rx timeout, send abort [ 880.283840][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.316013][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.338074][ T5979] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.351228][ T5979] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.384048][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.384068][ T5979] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.434321][ T5979] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.452396][T27432] wg1 speed is unknown, defaulting to 1000 [ 880.466665][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 880.476428][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 880.654337][T27463] netem: change failed [ 880.751309][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806651a800: abort rx timeout. Force session deactivation [ 880.786535][T27299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.807588][ T38] bond7: (slave macvlan4): failed to get link speed/duplex [ 880.912010][T27299] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.936815][ T6166] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.944069][ T6166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.957372][T27468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 881.035740][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.043012][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.316387][ T5150] Bluetooth: hci0: command tx timeout [ 881.505103][ T3836] team0: left promiscuous mode [ 881.523695][ T3836] team_slave_0: left promiscuous mode [ 881.554901][ T3836] team_slave_1: left promiscuous mode [ 881.620139][T27487] netlink: 'syz.1.5745': attribute type 26 has an invalid length. [ 881.666367][ T3836] hsr_slave_0: left promiscuous mode [ 881.672919][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.687772][ T3836] batman_adv: batadv0: Removing interface: vlan2 [ 881.699093][T27492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5746'. [ 882.217560][ T3836] team0 (unregistering): Port device team_slave_1 removed [ 882.265556][ T3836] team0 (unregistering): Port device team_slave_0 removed [ 882.842816][T27493] tipc: Enabled bearer , priority 0 [ 882.851646][T27496] netlink: 'syz.2.5747': attribute type 3 has an invalid length. [ 882.862345][T27496] netlink: 'syz.2.5747': attribute type 1 has an invalid length. [ 882.870683][T27496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5747'. [ 882.880013][T27496] NCSI netlink: No device for ifindex 23016 [ 882.933394][T27493] tipc: Disabling bearer [ 883.009801][ T38] bond7: (slave macvlan4): failed to get link speed/duplex [ 883.155329][T27299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.198818][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5750'. [ 883.219766][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5750'. [ 883.386459][ T5150] Bluetooth: hci0: command tx timeout [ 883.628762][T27532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5754'. [ 883.702482][T27534] syzkaller1: entered promiscuous mode [ 883.708299][T27534] syzkaller1: entered allmulticast mode [ 883.744381][ T12] net_ratelimit: 4 callbacks suppressed [ 883.744404][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 883.842472][ T3836] IPVS: stop unused estimator thread 0... [ 883.910033][T27299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.929279][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5757'. [ 883.938376][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 884.000641][T27545] veth9: entered allmulticast mode [ 884.046796][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 884.157207][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 884.169244][T27299] veth0_vlan: entered promiscuous mode [ 884.209035][T27299] veth1_vlan: entered promiscuous mode [ 884.234073][T27549] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5759'. [ 884.257105][T27549] .70·: renamed from .71· (while UP) [ 884.280543][T27553] netlink: 'syz.2.5761': attribute type 2 has an invalid length. [ 884.287328][T27554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5759'. [ 884.297730][T27555] netlink: 'syz.2.5761': attribute type 2 has an invalid length. [ 884.300231][T27549] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 884.335976][T27553] !: entered promiscuous mode [ 884.346556][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 884.427943][T27299] veth0_macvtap: entered promiscuous mode [ 884.449702][T27299] veth1_macvtap: entered promiscuous mode [ 884.478743][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5762'. [ 884.496989][ T3836] bond7: (slave macvlan4): failed to get link speed/duplex [ 884.558362][T27299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.600921][T27299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.659355][ T3836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.690910][ T3836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.702794][T27573] netlink: 'syz.2.5763': attribute type 10 has an invalid length. [ 884.728353][ T3836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.754701][ T558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.822481][T27574] ip6_vti0 speed is unknown, defaulting to 1000 [ 884.916861][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 885.060457][ T558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.072612][ T558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.080376][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 885.216367][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 885.234690][ T6164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.248745][ T6164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.314042][T27568] ip6_vti0 speed is unknown, defaulting to 1000 [ 885.314967][T27574] lo speed is unknown, defaulting to 1000 [ 885.379914][T27583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 885.400874][T27583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 885.571898][T27569] delete_channel: no stack [ 886.089060][T27624] __nla_validate_parse: 4 callbacks suppressed [ 886.089082][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5775'. [ 886.425457][T27633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5778'. [ 886.555295][T27568] lo speed is unknown, defaulting to 1000 [ 886.665594][T27574] wg1 speed is unknown, defaulting to 1000 [ 886.671568][T27646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'. [ 886.862781][T27651] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.893348][T27651] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 886.956697][T27651] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 887.059438][T27662] netlink: 'syz.0.5786': attribute type 1 has an invalid length. [ 887.078379][T27662] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5786'. [ 887.095018][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5788'. [ 887.192193][T27651] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.205795][T27651] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 887.217262][T27651] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 887.232601][T27671] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5789'. [ 887.326458][T27670] bond7: (slave veth5): Enslaving as an active interface with an up link [ 887.351232][T27651] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.362199][T27651] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 887.373320][T27651] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 887.391996][T27568] wg1 speed is unknown, defaulting to 1000 [ 887.612022][T27679] netlink: 'syz.2.5792': attribute type 13 has an invalid length. [ 887.850900][T27651] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.863390][T27651] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 887.892956][T27651] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 888.000849][T27682] ip6_vti0 speed is unknown, defaulting to 1000 [ 888.058954][ T558] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.073977][ T558] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 888.084707][ T558] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 888.133585][ T558] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.149305][ T558] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 888.158373][T27687] ipt_REJECT: TCP_RESET invalid for non-tcp [ 888.165146][ T558] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 888.194696][ T558] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.205287][ T558] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 888.218615][ T558] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 888.245539][ T558] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.264496][ T558] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 888.284946][ T558] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 888.364080][T27692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5796'. [ 888.495459][T27682] lo speed is unknown, defaulting to 1000 [ 888.756563][ T5979] net_ratelimit: 22 callbacks suppressed [ 888.756586][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 888.807260][T27703] ip6_vti0 speed is unknown, defaulting to 1000 [ 888.896796][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 889.038157][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 889.157209][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 889.228344][T27682] wg1 speed is unknown, defaulting to 1000 [ 889.767974][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 890.003974][T27718] bond0: (slave rose0): Enslaving as an active interface with an up link [ 890.026917][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 890.036032][T27703] lo speed is unknown, defaulting to 1000 [ 890.043079][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'. [ 890.194685][T27724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5804'. [ 890.231328][T27724] Bluetooth: MGMT ver 1.23 [ 890.247402][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 890.408927][T27731] netlink: 'syz.3.5806': attribute type 1 has an invalid length. [ 890.416365][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 890.441372][T27724] ip6_vti0 speed is unknown, defaulting to 1000 [ 890.454987][T27703] wg1 speed is unknown, defaulting to 1000 [ 890.546551][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 890.692975][T27724] lo speed is unknown, defaulting to 1000 [ 890.712779][T27725] ip6_vti0 speed is unknown, defaulting to 1000 [ 890.727426][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 891.265923][T27760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5814'. [ 891.275210][T27760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5814'. [ 891.370274][T27764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5815'. [ 891.622583][T27725] lo speed is unknown, defaulting to 1000 [ 891.694624][T27724] wg1 speed is unknown, defaulting to 1000 [ 891.904052][T27776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5818'. [ 891.952428][T27771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5818'. [ 892.022280][T27778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5819'. [ 892.266225][ T5150] Bluetooth: hci0: command tx timeout [ 892.547965][T27725] wg1 speed is unknown, defaulting to 1000 [ 892.712933][T27789] netlink: 'syz.3.5824': attribute type 1 has an invalid length. [ 892.872236][T27789] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 892.969306][T21668] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 892.989920][T21668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 892.998485][T21668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 893.009656][T21668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 893.017676][T21668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 893.025374][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5825'. [ 893.046995][T27797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5825'. [ 893.243140][T27797] geneve6: entered promiscuous mode [ 893.249275][T27797] geneve6: entered allmulticast mode [ 893.296759][ T6162] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 893.321833][ T6162] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 893.405494][T27810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5827'. [ 893.464742][ T6162] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 893.484988][ T6162] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 893.494626][T27809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5828'. [ 893.659643][T27794] ip6_vti0 speed is unknown, defaulting to 1000 [ 893.788427][ T3435] net_ratelimit: 11 callbacks suppressed [ 893.788458][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 893.937686][ T6168] bond7: (slave macvlan4): failed to get link speed/duplex [ 894.045374][T27833] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 894.166618][ T6168] bond7: (slave macvlan4): failed to get link speed/duplex [ 894.326260][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 894.446808][ T6158] bond7: (slave macvlan4): failed to get link speed/duplex [ 894.467799][T27794] lo speed is unknown, defaulting to 1000 [ 894.475709][T27838] ip6_vti0 speed is unknown, defaulting to 1000 [ 894.587476][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 894.597920][T27846] openvswitch: netlink: Message has 8 unknown bytes. [ 894.699438][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 894.857814][ T6168] bond7: (slave macvlan4): failed to get link speed/duplex [ 895.006262][ T6168] bond7: (slave macvlan4): failed to get link speed/duplex [ 895.022560][T27794] wg1 speed is unknown, defaulting to 1000 [ 895.068711][T27838] lo speed is unknown, defaulting to 1000 [ 895.075732][T27836] ip6_vti0 speed is unknown, defaulting to 1000 [ 895.149200][T21668] Bluetooth: hci2: command tx timeout [ 895.785297][T27836] lo speed is unknown, defaulting to 1000 [ 895.839676][T27871] bridge_slave_0: left allmulticast mode [ 895.845668][T27871] bridge_slave_0: left promiscuous mode [ 895.852800][T27871] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.865408][T27871] bridge_slave_1: left allmulticast mode [ 895.877300][T27871] bridge_slave_1: left promiscuous mode [ 895.883353][T27871] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.904204][T27871] bond0: (slave bond_slave_0): Releasing backup interface [ 896.013787][T27871] bond0: (slave bond_slave_1): Releasing backup interface [ 896.033118][T27871] team0: Port device team_slave_0 removed [ 896.045645][T27871] team0: Port device team_slave_1 removed [ 896.054687][T27871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.062565][T27871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.071798][T27871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.080402][T27871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.164498][T27794] chnl_net:caif_netlink_parms(): no params data found [ 896.203070][T27838] wg1 speed is unknown, defaulting to 1000 [ 896.568212][T27794] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.575666][T27794] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.584299][T27794] bridge_slave_0: entered allmulticast mode [ 896.595100][T27794] bridge_slave_0: entered promiscuous mode [ 896.624554][T27794] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.632554][T27794] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.642516][T27794] bridge_slave_1: entered allmulticast mode [ 896.654758][T27794] bridge_slave_1: entered promiscuous mode [ 896.661677][T27903] netlink: 'syz.1.5850': attribute type 4 has an invalid length. [ 896.663750][T27896] ip6_vti0 speed is unknown, defaulting to 1000 [ 896.674924][T27904] netlink: 'syz.1.5850': attribute type 4 has an invalid length. [ 896.733049][T27794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.775401][T27794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.881821][T27794] team0: Port device team_slave_0 added [ 896.891634][T27794] team0: Port device team_slave_1 added [ 896.946027][T27896] lo speed is unknown, defaulting to 1000 [ 897.004691][T27836] wg1 speed is unknown, defaulting to 1000 [ 897.014783][T27794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.141038][T27794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.229001][T21668] Bluetooth: hci2: command tx timeout [ 897.232098][T27794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.296947][T27794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.319771][T27794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.353075][T27794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.490020][T27794] hsr_slave_0: entered promiscuous mode [ 897.497793][T27794] hsr_slave_1: entered promiscuous mode [ 897.504628][T27794] debugfs: 'hsr0' already exists in 'hsr' [ 897.511199][T27794] Cannot create hsr debugfs directory [ 897.683297][T27896] wg1 speed is unknown, defaulting to 1000 [ 898.464404][T27794] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 898.476345][T27794] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 898.605399][T27794] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 898.617084][T27794] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 898.642671][T27932] syzkaller0: entered promiscuous mode [ 898.656196][T27932] syzkaller0: entered allmulticast mode [ 898.736352][T27932] netlink: 'syz.2.5856': attribute type 3 has an invalid length. [ 898.750148][T27794] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 898.760075][T27932] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 898.760186][T27932] __nla_validate_parse: 4 callbacks suppressed [ 898.760202][T27932] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5856'. [ 898.814447][T27794] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 898.887332][ T6146] net_ratelimit: 7 callbacks suppressed [ 898.887353][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 898.949542][T27794] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 898.970543][T27794] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 899.086347][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 899.214678][T27947] netlink: 'syz.3.5860': attribute type 1 has an invalid length. [ 899.227722][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 899.235384][T27947] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5860'. [ 899.307878][T21668] Bluetooth: hci2: command tx timeout [ 899.347857][T27794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 899.425574][T27794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 899.905793][T27794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 899.963174][T27794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 900.031690][T27965] netlink: 'syz.3.5865': attribute type 39 has an invalid length. [ 900.236925][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 900.346582][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 900.455074][T27794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.488461][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 900.540305][T27794] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.574309][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.581582][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.651665][T27984] tipc: Enabled bearer , priority 0 [ 900.659128][T27987] netlink: 'syz.3.5869': attribute type 10 has an invalid length. [ 900.669498][T27987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.670866][T27988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5870'. [ 900.681942][T27987] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 900.698213][T27990] syzkaller0: entered promiscuous mode [ 900.716586][T27990] syzkaller0: entered allmulticast mode [ 900.742468][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.749719][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.798575][T27984] tipc: Resetting bearer [ 900.821990][T27983] tipc: Resetting bearer [ 900.867666][T27983] tipc: Disabling bearer [ 900.938316][T27997] xt_connbytes: Forcing CT accounting to be enabled [ 900.968652][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 900.998475][T28000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5873'. [ 901.130000][ T60] bond7: (slave macvlan4): failed to get link speed/duplex [ 901.283743][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 901.307343][ T3435] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.318794][ T3435] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.327245][ T3435] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.345618][ T3435] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.391312][T21668] Bluetooth: hci2: command tx timeout [ 901.418173][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 901.503986][T28017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5877'. [ 901.525398][T28017] ipvlan2: entered promiscuous mode [ 901.531799][T28017] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 901.743310][T27794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.050019][T28038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5882'. [ 902.410851][T27794] veth0_vlan: entered promiscuous mode [ 902.459045][T27794] veth1_vlan: entered promiscuous mode [ 902.569275][T27794] veth0_macvtap: entered promiscuous mode [ 902.592146][T27794] veth1_macvtap: entered promiscuous mode [ 902.653121][T28046] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5882'. [ 902.672802][T27794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.722950][T27794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.777298][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.806830][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.815738][ T1096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.898099][ T1096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.480738][T28055] netlink: 'syz.3.5884': attribute type 21 has an invalid length. [ 903.507530][T28055] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5884'. [ 903.733866][T28057] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20004 [ 904.088506][T28062] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 904.108476][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.117849][ T6155] net_ratelimit: 10 callbacks suppressed [ 904.117868][ T6155] bond7: (slave macvlan4): failed to get link speed/duplex [ 904.137044][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.256820][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 904.271966][T28064] netlink: 'syz.1.5889': attribute type 23 has an invalid length. [ 904.280373][T28064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5889'. [ 904.754067][T28072] batadv_slave_0: entered promiscuous mode [ 905.622578][T28079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5894'. [ 905.681818][T28081] netlink: 'syz.1.5893': attribute type 1 has an invalid length. [ 905.833014][ T38] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.867120][T28088] netlink: 'syz.2.5896': attribute type 1 has an invalid length. [ 905.879567][T28086] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 905.897670][T28086] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 905.979304][T28081] bond7: (slave gretap2): making interface the new active one [ 906.011974][T28081] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 906.066947][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 906.243156][T28098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5898'. [ 906.250501][ T38] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.349884][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 906.460716][ T38] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.618347][ T38] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.648203][T28113] sctp: [Deprecated]: syz.1.5900 (pid 28113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.648203][T28113] Use struct sctp_sack_info instead [ 906.696927][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 906.706540][ T6158] bond7: (slave macvlan4): failed to get link speed/duplex [ 906.708857][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 906.727182][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 906.736401][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 906.744705][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 906.759816][T28115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 906.817773][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 907.006383][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 907.018777][T28121] xt_socket: unknown flags 0x50 [ 907.027066][T28120] xt_socket: unknown flags 0x50 [ 907.116644][ T38] bridge_slave_1: left allmulticast mode [ 907.122363][ T38] bridge_slave_1: left promiscuous mode [ 907.156600][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.187453][ T38] bridge_slave_0: left allmulticast mode [ 907.193166][ T38] bridge_slave_0: left promiscuous mode [ 907.218053][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.359982][T28132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5906'. [ 907.883758][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.896967][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.908194][ T38] bond0 (unregistering): Released all slaves [ 908.013948][T28136] tipc: Resetting bearer [ 908.186800][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 908.224982][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.249968][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.260602][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.282633][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.293597][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.375204][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 908.434260][T28141] ip6_vti0 speed is unknown, defaulting to 1000 [ 908.498057][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 909.109604][ T38] hsr_slave_0: left promiscuous mode [ 909.136327][ T38] hsr_slave_1: left promiscuous mode [ 909.142979][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.157361][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.181198][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.201738][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.281645][ T38] veth1_macvtap: left promiscuous mode [ 909.288570][ T38] veth0_macvtap: left promiscuous mode [ 909.294291][ T38] veth1_vlan: left promiscuous mode [ 909.299772][ T38] veth0_vlan: left promiscuous mode [ 909.317581][T28176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5920'. [ 909.550220][T28186] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 909.562320][T28164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5917'. [ 910.192111][ T38] team0 (unregistering): Port device team_slave_1 removed [ 910.241859][ T38] team0 (unregistering): Port device team_slave_0 removed [ 910.349344][T21668] Bluetooth: hci2: command tx timeout [ 910.728621][T28141] lo speed is unknown, defaulting to 1000 [ 910.728659][T28162] ip6_vti0 speed is unknown, defaulting to 1000 [ 910.874619][T28206] bond0: (slave rose0): Releasing backup interface [ 910.917423][ T1096] net_ratelimit: 5 callbacks suppressed [ 910.917446][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 911.067366][ T6158] bond7: (slave macvlan4): failed to get link speed/duplex [ 911.187472][ T6155] bond7: (slave macvlan4): failed to get link speed/duplex [ 911.244491][T28162] lo speed is unknown, defaulting to 1000 [ 911.255037][T28217] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.296821][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 911.315980][T28222] netlink: 'syz.3.5929': attribute type 1 has an invalid length. [ 911.334960][T28223] netlink: 'syz.3.5929': attribute type 1 has an invalid length. [ 911.411872][T28222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 911.437144][T28141] wg1 speed is unknown, defaulting to 1000 [ 911.448005][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 912.151122][T28217] lo speed is unknown, defaulting to 1000 [ 912.173306][T28162] wg1 speed is unknown, defaulting to 1000 [ 912.181034][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 912.477646][T21668] Bluetooth: hci2: command tx timeout [ 912.807927][T28236] syzkaller0: entered promiscuous mode [ 912.813774][T28236] syzkaller0: entered allmulticast mode [ 912.835345][T28217] wg1 speed is unknown, defaulting to 1000 [ 912.841682][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 914.509591][ T5150] Bluetooth: hci2: command tx timeout [ 914.567781][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880566ef000: rx timeout, send abort [ 914.576294][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880566ee000: rx timeout, send abort [ 914.584760][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880566ef000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 914.599332][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880566ee000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 915.439331][T28141] chnl_net:caif_netlink_parms(): no params data found [ 915.466589][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 915.507709][T28249] xt_hashlimit: size too large, truncated to 1048576 [ 915.514461][T28249] xt_hashlimit: max too large, truncated to 1048576 [ 915.686750][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 915.924017][T28141] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.934250][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.974917][T28141] bridge_slave_0: entered allmulticast mode [ 916.019138][T28141] bridge_slave_0: entered promiscuous mode [ 916.067170][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 916.081174][T28141] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.107181][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.128500][T28141] bridge_slave_1: entered allmulticast mode [ 916.161956][T28141] bridge_slave_1: entered promiscuous mode [ 916.335740][T28271] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 916.355811][T28271] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 916.373841][T28271] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 916.426398][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 916.463721][T28141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.481046][T28141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.568285][T28141] team0: Port device team_slave_0 added [ 916.583602][T28141] team0: Port device team_slave_1 added [ 916.590313][ T5150] Bluetooth: hci2: command tx timeout [ 916.701511][T28141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.717093][T28141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.763793][T28141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.776839][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 916.786829][T28141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.793821][T28141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.847221][T28141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.957199][T28141] hsr_slave_0: entered promiscuous mode [ 916.965050][T28141] hsr_slave_1: entered promiscuous mode [ 916.973591][T28141] debugfs: 'hsr0' already exists in 'hsr' [ 916.979623][T28141] Cannot create hsr debugfs directory [ 916.988868][T28288] netlink: 'syz.2.5945': attribute type 2 has an invalid length. [ 917.021253][T28288] : entered promiscuous mode [ 917.118190][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 917.236286][ T6158] bond7: (slave macvlan4): failed to get link speed/duplex [ 917.465654][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 917.676896][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 917.770412][T28141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 917.792797][T28141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 917.831636][T28141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 917.858219][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 917.876004][T28141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 918.133343][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5958'. [ 918.147597][T28338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5959'. [ 918.243989][T28334] team0: entered promiscuous mode [ 918.261151][T28334] team0: entered allmulticast mode [ 918.269630][T28334] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.278517][T28346] No such timeout policy "syz0" [ 918.289736][T28345] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 918.299587][T28338] tunl0: Caught tx_queue_len zero misconfig [ 918.434378][T28356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5963'. [ 918.451961][T28141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.544192][T28141] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.578975][T28364] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.588296][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.595550][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.656820][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.664036][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.673823][T28372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5968'. [ 918.688235][ T38] bond7: (slave macvlan4): failed to get link speed/duplex [ 918.716567][T28371] sctp: [Deprecated]: syz.2.5967 (pid 28371) Use of int in maxseg socket option. [ 918.716567][T28371] Use struct sctp_assoc_value instead [ 918.934327][T28364] lo speed is unknown, defaulting to 1000 [ 918.934410][T28367] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.947558][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 918.992664][T28141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.233232][T28380] syzkaller1: entered promiscuous mode [ 919.246583][T28380] syzkaller1: entered allmulticast mode [ 919.617328][T28141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.643435][T28364] wg1 speed is unknown, defaulting to 1000 [ 919.816338][T28367] lo speed is unknown, defaulting to 1000 [ 920.392103][T28141] veth0_vlan: entered promiscuous mode [ 920.415316][ T30] audit: type=1107 audit(1765559354.581:9): pid=28411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 920.439682][T28412] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5977'. [ 920.451219][T28413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5978'. [ 920.452153][T28412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5977'. [ 920.471512][T28412] tipc: Invalid UDP bearer configuration [ 920.471570][T28412] tipc: Enabling of bearer rejected, failed to enable media [ 920.497108][T28141] veth1_vlan: entered promiscuous mode [ 920.513189][T28367] wg1 speed is unknown, defaulting to 1000 [ 920.632288][T28141] veth0_macvtap: entered promiscuous mode [ 920.805030][T28141] veth1_macvtap: entered promiscuous mode [ 921.199903][T28141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.297013][T28141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.328167][ T3435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.339541][ T3435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.363857][T28435] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5983'. [ 921.376750][ T3435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.396631][ T3836] net_ratelimit: 11 callbacks suppressed [ 921.396654][ T3836] bond7: (slave macvlan4): failed to get link speed/duplex [ 921.410534][ T3435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.587869][T28451] bond8: option arp_interval: invalid value (18446744073709551615) [ 921.627686][T28451] bond8: option arp_interval: allowed values 0 - 2147483647 [ 921.645711][T28451] bond8 (unregistering): Released all slaves [ 921.827232][ T6160] bond7: (slave macvlan4): failed to get link speed/duplex [ 922.086331][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.094287][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.217443][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.229042][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 922.249390][T28475] syzkaller0: entered promiscuous mode [ 922.254921][T28475] syzkaller0: entered allmulticast mode [ 922.260656][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.329262][T28484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5996'. [ 922.396497][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 922.492406][T28490] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 922.516541][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 922.544134][T28495] netlink: 'syz.0.6000': attribute type 10 has an invalid length. [ 922.926648][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 923.042309][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 923.088120][T28510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6003'. [ 923.114395][T17770] bond4: (slave syz_tun): Releasing active interface [ 923.196216][ T6168] bond7: (slave macvlan4): failed to get link speed/duplex [ 923.315218][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 923.334879][T21208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.347686][T21208] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.358944][T21208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 923.367983][T21208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.379266][T21208] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 923.474551][T28524] ip6_vti0 speed is unknown, defaulting to 1000 [ 923.489136][T28533] batadv_slave_0: entered promiscuous mode [ 923.505649][T28533] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6010'. [ 923.536386][ T6155] bond7: (slave macvlan4): failed to get link speed/duplex [ 923.607334][T28535] batadv_slave_0: left promiscuous mode [ 923.743181][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bb5800: rx timeout, send abort [ 923.791471][T28524] lo speed is unknown, defaulting to 1000 [ 924.251658][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055bb5800: abort rx timeout. Force session deactivation [ 924.330319][T28546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6013'. [ 924.339438][T28546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6013'. [ 924.364619][T28524] wg1 speed is unknown, defaulting to 1000 [ 924.366550][T28546] netlink: 'syz.0.6013': attribute type 20 has an invalid length. [ 924.455218][ T38] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.497671][ T38] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.526499][T21208] Bluetooth: hci0: command 0x0c1a tx timeout [ 924.536503][ T5150] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 924.553028][ T38] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.578622][ T38] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.610734][T28553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6015'. [ 924.628185][T28551] tipc: Enabling of bearer rejected, failed to enable media [ 924.644885][T28553] netlink: 'syz.3.6015': attribute type 1 has an invalid length. [ 924.676364][T28553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6015'. [ 924.809752][T28555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.842596][T28555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.984209][T28555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.001103][T28555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.199162][T28555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.215842][T28555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.381853][T28555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.393148][T28555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.466821][ T5150] Bluetooth: hci3: command tx timeout [ 925.545887][T28524] chnl_net:caif_netlink_parms(): no params data found [ 925.632558][T28583] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6021'. [ 925.662258][ T5979] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.672111][ T5979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.734272][ T5979] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.744353][ T5979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.767466][T28588] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 925.787696][T28583] ip6_vti0 speed is unknown, defaulting to 1000 [ 925.802684][ T5979] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.816852][ T5979] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.866743][ T5979] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 925.875412][ T5979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.920972][T28524] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.928950][T28524] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.936554][T28524] bridge_slave_0: entered allmulticast mode [ 925.957212][T28524] bridge_slave_0: entered promiscuous mode [ 925.973732][T28524] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.991449][T28524] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.002121][T28524] bridge_slave_1: entered allmulticast mode [ 926.011279][T28524] bridge_slave_1: entered promiscuous mode [ 926.111740][T28524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.134967][T28524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.159187][T28583] lo speed is unknown, defaulting to 1000 [ 926.200764][T28595] batadv1: entered promiscuous mode [ 926.248194][T28524] team0: Port device team_slave_0 added [ 926.265269][T28599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 926.278541][T28524] team0: Port device team_slave_1 added [ 926.317914][T28601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6025'. [ 926.503090][T28597] ip6_vti0 speed is unknown, defaulting to 1000 [ 926.512179][T28524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.523543][T28524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.557934][T28524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.623231][T28524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.642503][T28524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.708532][T28524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.728959][T28583] wg1 speed is unknown, defaulting to 1000 [ 926.731439][T28602] net_ratelimit: 10 callbacks suppressed [ 926.731462][T28602] bond7: (slave macvlan4): failed to get link speed/duplex [ 926.881587][T28524] hsr_slave_0: entered promiscuous mode [ 926.898190][T28524] hsr_slave_1: entered promiscuous mode [ 926.907745][T28524] debugfs: 'hsr0' already exists in 'hsr' [ 926.913536][T28524] Cannot create hsr debugfs directory [ 926.929062][T28602] bond7: (slave macvlan4): failed to get link speed/duplex [ 927.017440][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f705c00: rx timeout, send abort [ 927.040813][T28597] lo speed is unknown, defaulting to 1000 [ 927.040829][T28595] ip6_vti0 speed is unknown, defaulting to 1000 [ 927.048109][T28602] bond7: (slave macvlan4): failed to get link speed/duplex [ 927.239848][T28524] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.276664][T28524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.336403][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 927.373054][T28524] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.396723][T28524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.441711][T28597] wg1 speed is unknown, defaulting to 1000 [ 927.442116][T28595] lo speed is unknown, defaulting to 1000 [ 927.525714][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f705c00: abort rx timeout. Force session deactivation [ 927.547492][ T5150] Bluetooth: hci3: command tx timeout [ 927.603091][T28524] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.646398][T28524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.828025][T28524] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.842339][T28524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.866999][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 928.035465][T28595] wg1 speed is unknown, defaulting to 1000 [ 928.036603][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 928.170404][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6030'. [ 928.226639][T28616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6030'. [ 928.488224][T28621] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 928.606912][T28524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 928.640613][T28524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 928.674765][T28524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.707420][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 928.717976][T28524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 929.099356][T28524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.120024][T28638] ip6_vti0 speed is unknown, defaulting to 1000 [ 929.127078][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 929.190339][T28524] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.225077][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.232430][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.303367][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.310658][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.464766][T28524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 929.516550][ T6158] bond7: (slave macvlan4): failed to get link speed/duplex [ 929.528276][T28649] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 929.629996][ T5150] Bluetooth: hci3: command tx timeout [ 929.666786][ T6158] bond7: (slave macvlan4): failed to get link speed/duplex [ 929.798570][T28638] lo speed is unknown, defaulting to 1000 [ 929.889830][T28660] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 929.921105][T28524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.996130][T28524] veth0_vlan: entered promiscuous mode [ 930.013895][T28524] veth1_vlan: entered promiscuous mode [ 930.060467][T28524] veth0_macvtap: entered promiscuous mode [ 930.073944][T28524] veth1_macvtap: entered promiscuous mode [ 930.102361][T28524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.127085][T28524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.145209][ T6158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.167418][ T6146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.185697][T28638] wg1 speed is unknown, defaulting to 1000 [ 930.215397][ T6146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.248994][ T6146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.268726][T28666] ipvlan2: entered promiscuous mode [ 930.275869][T28666] bridge0: port 1(ipvlan2) entered blocking state [ 930.282772][T28666] bridge0: port 1(ipvlan2) entered disabled state [ 930.289852][T28666] ipvlan2: entered allmulticast mode [ 930.297381][T28666] ipvlan2: left allmulticast mode [ 930.339284][T28665] ipvlan2: entered promiscuous mode [ 930.346017][T28665] bridge0: port 1(ipvlan2) entered blocking state [ 930.355539][T28665] bridge0: port 1(ipvlan2) entered disabled state [ 930.362515][T28665] ipvlan2: entered allmulticast mode [ 930.369800][T28665] ipvlan2: left allmulticast mode [ 930.579571][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.608609][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.691303][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.704973][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.722207][T28671] netlink: 'syz.3.6043': attribute type 2 has an invalid length. [ 930.749926][T28671] : entered promiscuous mode [ 930.775315][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a71800: rx timeout, send abort [ 930.913558][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6043'. [ 931.139531][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880581a6c00: rx timeout, send abort [ 931.189115][T28678] FAULT_INJECTION: forcing a failure. [ 931.189115][T28678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 931.227543][T28678] CPU: 0 UID: 0 PID: 28678 Comm: syz.2.6044 Not tainted syzkaller #0 PREEMPT(full) [ 931.227591][T28678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 931.227611][T28678] Call Trace: [ 931.227620][T28678] [ 931.227629][T28678] dump_stack_lvl+0x189/0x250 [ 931.227660][T28678] ? __pfx____ratelimit+0x10/0x10 [ 931.227687][T28678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.227711][T28678] ? __pfx__printk+0x10/0x10 [ 931.227746][T28678] ? fs_reclaim_acquire+0x7d/0x100 [ 931.227785][T28678] should_fail_ex+0x414/0x560 [ 931.227815][T28678] prepare_alloc_pages+0x213/0x610 [ 931.227859][T28678] __alloc_frozen_pages_noprof+0x123/0x370 [ 931.227895][T28678] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 931.227941][T28678] ? __build_skb_around+0x22d/0x3c0 [ 931.227978][T28678] ? policy_nodemask+0x27c/0x720 [ 931.228019][T28678] alloc_pages_mpol+0x232/0x4a0 [ 931.228060][T28678] alloc_pages_noprof+0xa9/0x190 [ 931.228093][T28678] alloc_skb_with_frags+0x233/0x890 [ 931.228140][T28678] sock_alloc_send_pskb+0x84d/0x980 [ 931.228183][T28678] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 931.228213][T28678] ? __lock_acquire+0x6b6/0x2cf0 [ 931.228236][T28678] ? iov_iter_advance+0x8b/0x1c0 [ 931.228266][T28678] tun_get_user+0xa4e/0x3dc0 [ 931.228327][T28678] ? aa_file_perm+0x44c/0x1530 [ 931.228350][T28678] ? __pfx_tun_get_user+0x10/0x10 [ 931.228385][T28678] ? __lock_acquire+0x6b6/0x2cf0 [ 931.228408][T28678] ? kstrtoull+0x12f/0x1d0 [ 931.228439][T28678] ? ref_tracker_alloc+0x318/0x460 [ 931.228468][T28678] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 931.228501][T28678] ? tun_get+0x1c/0x2f0 [ 931.228537][T28678] ? tun_get+0x1c/0x2f0 [ 931.228565][T28678] ? tun_get+0x1c/0x2f0 [ 931.228599][T28678] tun_chr_write_iter+0x113/0x200 [ 931.228632][T28678] vfs_write+0x5c9/0xb30 [ 931.228665][T28678] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 931.228697][T28678] ? __pfx_vfs_write+0x10/0x10 [ 931.228734][T28678] ? __fget_files+0x2a/0x420 [ 931.228764][T28678] ksys_write+0x145/0x250 [ 931.228794][T28678] ? __pfx_ksys_write+0x10/0x10 [ 931.228824][T28678] ? do_syscall_64+0xbe/0xf80 [ 931.228857][T28678] do_syscall_64+0xfa/0xf80 [ 931.228885][T28678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.228907][T28678] ? clear_bhb_loop+0x60/0xb0 [ 931.228933][T28678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.228953][T28678] RIP: 0033:0x7fcc8b78f749 [ 931.228973][T28678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.228991][T28678] RSP: 002b:00007fcc8c5b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.229015][T28678] RAX: ffffffffffffffda RBX: 00007fcc8b9e5fa0 RCX: 00007fcc8b78f749 [ 931.229031][T28678] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 931.229054][T28678] RBP: 00007fcc8c5b6090 R08: 0000000000000000 R09: 0000000000000000 [ 931.229067][T28678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.229080][T28678] R13: 00007fcc8b9e6038 R14: 00007fcc8b9e5fa0 R15: 00007fff7e083c68 [ 931.229116][T28678] [ 931.539995][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061a71800: abort rx timeout. Force session deactivation [ 931.647892][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880581a6c00: abort rx timeout. Force session deactivation [ 931.707687][ T5150] Bluetooth: hci3: command tx timeout [ 931.806297][ T6164] net_ratelimit: 10 callbacks suppressed [ 931.806319][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 931.930533][T21208] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 931.942077][T21208] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 931.957837][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 931.966288][T21208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 931.974549][T21208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 931.984886][T21208] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 932.096946][T28689] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.103528][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 932.276461][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 932.396907][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 932.502542][T28704] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.510369][T28689] lo speed is unknown, defaulting to 1000 [ 932.529728][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 932.646779][T28602] bond7: (slave macvlan4): failed to get link speed/duplex [ 932.725258][T28715] netlink: 'syz.2.6052': attribute type 6 has an invalid length. [ 932.776752][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 932.926326][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 933.036986][T28602] bond7: (slave macvlan4): failed to get link speed/duplex [ 933.058395][T28689] wg1 speed is unknown, defaulting to 1000 [ 933.367941][T28719] ip6_vti0 speed is unknown, defaulting to 1000 [ 933.422172][T28704] lo speed is unknown, defaulting to 1000 [ 933.530723][T28738] xt_bpf: check failed: parse error [ 933.601559][T28740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.801727][T28704] wg1 speed is unknown, defaulting to 1000 [ 933.861726][T28689] chnl_net:caif_netlink_parms(): no params data found [ 933.894987][T28747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6059'. [ 933.904420][T28747] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 933.965670][T28719] lo speed is unknown, defaulting to 1000 [ 933.992097][T28749] netlink: 'syz.5.6060': attribute type 9 has an invalid length. [ 934.002758][T28749] netlink: 'syz.5.6060': attribute type 11 has an invalid length. [ 934.011909][T28749] netlink: 'syz.5.6060': attribute type 12 has an invalid length. [ 934.020822][T28749] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6060'. [ 934.036742][T21208] Bluetooth: hci5: command tx timeout [ 934.046946][T28749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6060'. [ 934.104624][T28752] FAULT_INJECTION: forcing a failure. [ 934.104624][T28752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.124516][T28752] CPU: 0 UID: 0 PID: 28752 Comm: syz.3.6061 Not tainted syzkaller #0 PREEMPT(full) [ 934.124545][T28752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.124559][T28752] Call Trace: [ 934.124567][T28752] [ 934.124577][T28752] dump_stack_lvl+0x189/0x250 [ 934.124606][T28752] ? __pfx____ratelimit+0x10/0x10 [ 934.124631][T28752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.124655][T28752] ? __pfx__printk+0x10/0x10 [ 934.124684][T28752] ? __might_fault+0xb0/0x130 [ 934.124722][T28752] should_fail_ex+0x414/0x560 [ 934.124752][T28752] _copy_from_iter+0x1cd/0x1630 [ 934.124783][T28752] ? sock_alloc_send_pskb+0x86b/0x980 [ 934.124813][T28752] ? __pfx__copy_from_iter+0x10/0x10 [ 934.124934][T28752] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 934.124966][T28752] skb_copy_datagram_from_iter+0xf5/0x720 [ 934.124992][T28752] ? __lock_acquire+0x6b6/0x2cf0 [ 934.125014][T28752] ? skb_put+0x11b/0x210 [ 934.125047][T28752] tun_get_user+0x1683/0x3dc0 [ 934.125101][T28752] ? aa_file_perm+0x44c/0x1530 [ 934.125124][T28752] ? __pfx_tun_get_user+0x10/0x10 [ 934.125158][T28752] ? __lock_acquire+0x6b6/0x2cf0 [ 934.125181][T28752] ? kstrtoull+0x12f/0x1d0 [ 934.125213][T28752] ? ref_tracker_alloc+0x318/0x460 [ 934.125242][T28752] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 934.125274][T28752] ? tun_get+0x1c/0x2f0 [ 934.125310][T28752] ? tun_get+0x1c/0x2f0 [ 934.125339][T28752] ? tun_get+0x1c/0x2f0 [ 934.125375][T28752] tun_chr_write_iter+0x113/0x200 [ 934.125409][T28752] vfs_write+0x5c9/0xb30 [ 934.125441][T28752] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 934.125473][T28752] ? __pfx_vfs_write+0x10/0x10 [ 934.125510][T28752] ? __fget_files+0x2a/0x420 [ 934.125540][T28752] ksys_write+0x145/0x250 [ 934.125569][T28752] ? __pfx_ksys_write+0x10/0x10 [ 934.125606][T28752] ? do_syscall_64+0xbe/0xf80 [ 934.125638][T28752] do_syscall_64+0xfa/0xf80 [ 934.125666][T28752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.125687][T28752] ? clear_bhb_loop+0x60/0xb0 [ 934.125713][T28752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.125733][T28752] RIP: 0033:0x7f43f2b8f749 [ 934.125753][T28752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.125772][T28752] RSP: 002b:00007f43f0df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 934.125794][T28752] RAX: ffffffffffffffda RBX: 00007f43f2de5fa0 RCX: 00007f43f2b8f749 [ 934.125809][T28752] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 934.125823][T28752] RBP: 00007f43f0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 934.125842][T28752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.125856][T28752] R13: 00007f43f2de6038 R14: 00007f43f2de5fa0 R15: 00007fffac60ae68 [ 934.125890][T28752] [ 934.702914][T28719] wg1 speed is unknown, defaulting to 1000 [ 934.704112][T28689] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.723260][T28689] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.731965][T28689] bridge_slave_0: entered allmulticast mode [ 934.764318][T28689] bridge_slave_0: entered promiscuous mode [ 934.833426][T28689] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.858206][T28689] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.885720][T28689] bridge_slave_1: entered allmulticast mode [ 934.921918][T28689] bridge_slave_1: entered promiscuous mode [ 935.173180][T28689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.221365][T28689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.290917][T28774] netlink: 'syz.3.6066': attribute type 3 has an invalid length. [ 935.304681][T28771] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.385856][T28689] team0: Port device team_slave_0 added [ 935.491661][T28771] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.579377][T28689] team0: Port device team_slave_1 added [ 935.718772][T28781] FAULT_INJECTION: forcing a failure. [ 935.718772][T28781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.732762][T28781] CPU: 1 UID: 0 PID: 28781 Comm: syz.3.6068 Not tainted syzkaller #0 PREEMPT(full) [ 935.732792][T28781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 935.732805][T28781] Call Trace: [ 935.732814][T28781] [ 935.732824][T28781] dump_stack_lvl+0x189/0x250 [ 935.732853][T28781] ? __pfx____ratelimit+0x10/0x10 [ 935.732879][T28781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 935.732903][T28781] ? __pfx__printk+0x10/0x10 [ 935.732945][T28781] should_fail_ex+0x414/0x560 [ 935.732975][T28781] _copy_to_user+0x31/0xb0 [ 935.733007][T28781] simple_read_from_buffer+0xe1/0x170 [ 935.733043][T28781] proc_fail_nth_read+0x1b3/0x220 [ 935.733075][T28781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 935.733106][T28781] ? rw_verify_area+0x2a6/0x4d0 [ 935.733130][T28781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 935.733159][T28781] vfs_read+0x200/0xa30 [ 935.733183][T28781] ? fdget_pos+0x247/0x320 [ 935.733207][T28781] ? __pfx___mutex_lock+0x10/0x10 [ 935.733235][T28781] ? __pfx_vfs_read+0x10/0x10 [ 935.733262][T28781] ? __fget_files+0x2a/0x420 [ 935.733286][T28781] ? __fget_files+0x3a0/0x420 [ 935.733303][T28781] ? __fget_files+0x2a/0x420 [ 935.733332][T28781] ksys_read+0x145/0x250 [ 935.733360][T28781] ? __pfx_ksys_read+0x10/0x10 [ 935.733388][T28781] ? do_syscall_64+0xbe/0xf80 [ 935.733418][T28781] do_syscall_64+0xfa/0xf80 [ 935.733447][T28781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.733468][T28781] ? clear_bhb_loop+0x60/0xb0 [ 935.733493][T28781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.733513][T28781] RIP: 0033:0x7f43f2b8e15c [ 935.733533][T28781] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 935.733551][T28781] RSP: 002b:00007f43f0df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 935.733573][T28781] RAX: ffffffffffffffda RBX: 00007f43f2de5fa0 RCX: 00007f43f2b8e15c [ 935.733588][T28781] RDX: 000000000000000f RSI: 00007f43f0df60a0 RDI: 0000000000000004 [ 935.733602][T28781] RBP: 00007f43f0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 935.733615][T28781] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 935.733719][T28781] R13: 00007f43f2de6038 R14: 00007f43f2de5fa0 R15: 00007fffac60ae68 [ 935.733755][T28781] [ 936.014584][T28771] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.057957][T28786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6067'. [ 936.110427][T21208] Bluetooth: hci5: command tx timeout [ 936.137140][T28689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.144121][T28689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.187424][T28689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.238991][T28771] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.258360][T28689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.279278][T28689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.311854][T28793] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6070'. [ 936.312828][T28689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.375975][T28794] FAULT_INJECTION: forcing a failure. [ 936.375975][T28794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.415764][T28794] CPU: 1 UID: 0 PID: 28794 Comm: syz.0.6071 Not tainted syzkaller #0 PREEMPT(full) [ 936.415796][T28794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 936.415809][T28794] Call Trace: [ 936.415818][T28794] [ 936.415828][T28794] dump_stack_lvl+0x189/0x250 [ 936.415857][T28794] ? __pfx____ratelimit+0x10/0x10 [ 936.415884][T28794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.415907][T28794] ? __pfx__printk+0x10/0x10 [ 936.415937][T28794] ? __might_fault+0xb0/0x130 [ 936.415976][T28794] should_fail_ex+0x414/0x560 [ 936.416004][T28794] _copy_from_iter+0x1cd/0x1630 [ 936.416043][T28794] ? __pfx__copy_from_iter+0x10/0x10 [ 936.416067][T28794] ? sock_alloc_send_pskb+0x86b/0x980 [ 936.416101][T28794] ? __pfx__copy_from_iter+0x10/0x10 [ 936.416130][T28794] ? page_copy_sane+0x4e/0x280 [ 936.416157][T28794] copy_page_from_iter+0xdd/0x170 [ 936.416190][T28794] skb_copy_datagram_from_iter+0x306/0x720 [ 936.416228][T28794] tun_get_user+0x1683/0x3dc0 [ 936.416281][T28794] ? aa_file_perm+0x44c/0x1530 [ 936.416304][T28794] ? __pfx_tun_get_user+0x10/0x10 [ 936.416338][T28794] ? __lock_acquire+0x6b6/0x2cf0 [ 936.416362][T28794] ? kstrtoull+0x12f/0x1d0 [ 936.416394][T28794] ? ref_tracker_alloc+0x318/0x460 [ 936.416422][T28794] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 936.416454][T28794] ? tun_get+0x1c/0x2f0 [ 936.416490][T28794] ? tun_get+0x1c/0x2f0 [ 936.416520][T28794] ? tun_get+0x1c/0x2f0 [ 936.416555][T28794] tun_chr_write_iter+0x113/0x200 [ 936.416588][T28794] vfs_write+0x5c9/0xb30 [ 936.416620][T28794] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 936.416652][T28794] ? __pfx_vfs_write+0x10/0x10 [ 936.416696][T28794] ? __fget_files+0x2a/0x420 [ 936.416726][T28794] ksys_write+0x145/0x250 [ 936.416755][T28794] ? __pfx_ksys_write+0x10/0x10 [ 936.416786][T28794] ? do_syscall_64+0xbe/0xf80 [ 936.416817][T28794] do_syscall_64+0xfa/0xf80 [ 936.416845][T28794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.416866][T28794] ? clear_bhb_loop+0x60/0xb0 [ 936.416892][T28794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.416913][T28794] RIP: 0033:0x7f302db8f749 [ 936.416932][T28794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.416951][T28794] RSP: 002b:00007f302ea19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 936.416973][T28794] RAX: ffffffffffffffda RBX: 00007f302dde5fa0 RCX: 00007f302db8f749 [ 936.416989][T28794] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 936.417003][T28794] RBP: 00007f302ea19090 R08: 0000000000000000 R09: 0000000000000000 [ 936.417016][T28794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.417029][T28794] R13: 00007f302dde6038 R14: 00007f302dde5fa0 R15: 00007fffe72fddb8 [ 936.417065][T28794] [ 936.729642][T28689] hsr_slave_0: entered promiscuous mode [ 936.736900][T28689] hsr_slave_1: entered promiscuous mode [ 936.744827][T28689] debugfs: 'hsr0' already exists in 'hsr' [ 936.752086][T28689] Cannot create hsr debugfs directory [ 936.778918][ T6162] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.892353][T28802] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6073'. [ 936.930779][ T1096] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.981253][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.058634][ T5984] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.089513][T28806] batadv1: entered promiscuous mode [ 937.096622][T28806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 937.333124][T28689] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.344750][T28689] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 937.388663][ T6146] net_ratelimit: 9 callbacks suppressed [ 937.388687][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 937.442794][T28689] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.476468][T28689] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 937.613490][T28830] netlink: 'syz.2.6083': attribute type 1 has an invalid length. [ 937.630005][T28829] FAULT_INJECTION: forcing a failure. [ 937.630005][T28829] name failslab, interval 1, probability 0, space 0, times 0 [ 937.643216][T28829] CPU: 0 UID: 0 PID: 28829 Comm: syz.5.6084 Not tainted syzkaller #0 PREEMPT(full) [ 937.643247][T28829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 937.643260][T28829] Call Trace: [ 937.643273][T28829] [ 937.643282][T28829] dump_stack_lvl+0x189/0x250 [ 937.643303][T28829] ? __pfx____ratelimit+0x10/0x10 [ 937.643323][T28829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.643340][T28829] ? __pfx__printk+0x10/0x10 [ 937.643366][T28829] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 937.643388][T28829] should_fail_ex+0x414/0x560 [ 937.643410][T28829] should_failslab+0xa8/0x100 [ 937.643433][T28829] ? __pfx_ip6_dst_gc+0x10/0x10 [ 937.643459][T28829] kmem_cache_alloc_noprof+0x74/0x6f0 [ 937.643478][T28829] ? dst_alloc+0x105/0x170 [ 937.643496][T28829] ? __pfx_ip6_dst_gc+0x10/0x10 [ 937.643515][T28829] dst_alloc+0x105/0x170 [ 937.643535][T28829] ip6_pol_route+0xa21/0x1180 [ 937.643556][T28829] ? ip6_pol_route+0x162/0x1180 [ 937.643579][T28829] ? __pfx_ip6_pol_route+0x10/0x10 [ 937.643608][T28829] ? ip6t_do_table+0x1376/0x1560 [ 937.643627][T28829] fib6_rule_lookup+0x52f/0x6f0 [ 937.643650][T28829] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 937.643671][T28829] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 937.643703][T28829] ? ip6t_do_table+0x1db/0x1560 [ 937.643726][T28829] ip6_route_input+0x6de/0xad0 [ 937.643752][T28829] ? __pfx_ip6_route_input+0x10/0x10 [ 937.643781][T28829] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 937.643816][T28829] ? ip6_rcv_finish_core+0x222/0x420 [ 937.643834][T28829] ip6_rcv_finish+0x141/0x2e0 [ 937.643852][T28829] NF_HOOK+0x30c/0x3a0 [ 937.643866][T28829] ? skb_orphan+0x4f/0xd0 [ 937.643882][T28829] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 937.643896][T28829] ? NF_HOOK+0x9a/0x3a0 [ 937.643911][T28829] ? __pfx_NF_HOOK+0x10/0x10 [ 937.643928][T28829] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 937.643952][T28829] __netif_receive_skb+0xd3/0x380 [ 937.643976][T28829] ? netif_receive_skb+0x105/0x750 [ 937.643993][T28829] netif_receive_skb+0x1bb/0x750 [ 937.644011][T28829] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 937.644027][T28829] ? __pfx_netif_receive_skb+0x10/0x10 [ 937.644045][T28829] ? skb_partial_csum_set+0x107/0x360 [ 937.644069][T28829] ? tun_rx_batched+0x160/0x730 [ 937.644094][T28829] tun_rx_batched+0x1b9/0x730 [ 937.644132][T28829] ? __pfx_tun_rx_batched+0x10/0x10 [ 937.644166][T28829] ? tun_get_user+0x266d/0x3dc0 [ 937.644207][T28829] ? tun_get_user+0x266d/0x3dc0 [ 937.644230][T28829] tun_get_user+0x2aa3/0x3dc0 [ 937.644268][T28829] ? aa_file_perm+0x44c/0x1530 [ 937.644285][T28829] ? __pfx_tun_get_user+0x10/0x10 [ 937.644309][T28829] ? __lock_acquire+0x6b6/0x2cf0 [ 937.644326][T28829] ? kstrtoull+0x12f/0x1d0 [ 937.644349][T28829] ? ref_tracker_alloc+0x318/0x460 [ 937.644370][T28829] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 937.644393][T28829] ? tun_get+0x1c/0x2f0 [ 937.644418][T28829] ? tun_get+0x1c/0x2f0 [ 937.644439][T28829] ? tun_get+0x1c/0x2f0 [ 937.644471][T28829] tun_chr_write_iter+0x113/0x200 [ 937.644495][T28829] vfs_write+0x5c9/0xb30 [ 937.644518][T28829] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 937.644540][T28829] ? __pfx_vfs_write+0x10/0x10 [ 937.644567][T28829] ? __fget_files+0x2a/0x420 [ 937.644588][T28829] ksys_write+0x145/0x250 [ 937.644609][T28829] ? __pfx_ksys_write+0x10/0x10 [ 937.644630][T28829] ? do_syscall_64+0xbe/0xf80 [ 937.644654][T28829] do_syscall_64+0xfa/0xf80 [ 937.644674][T28829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.644689][T28829] ? clear_bhb_loop+0x60/0xb0 [ 937.644709][T28829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.644724][T28829] RIP: 0033:0x7f75f118f749 [ 937.644738][T28829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.644751][T28829] RSP: 002b:00007f75ef3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 937.644767][T28829] RAX: ffffffffffffffda RBX: 00007f75f13e5fa0 RCX: 00007f75f118f749 [ 937.644779][T28829] RDX: 0000000000000ffe RSI: 00002000000000c0 RDI: 0000000000000003 [ 937.644788][T28829] RBP: 00007f75ef3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 937.644798][T28829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.644807][T28829] R13: 00007f75f13e6038 R14: 00007f75f13e5fa0 R15: 00007ffe7d141028 [ 937.644832][T28829] [ 937.646546][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 938.173327][T28689] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.193079][T21208] Bluetooth: hci5: command tx timeout [ 938.207788][T28689] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 938.232765][T28830] ip6_vti0 speed is unknown, defaulting to 1000 [ 938.246830][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 938.325227][T28689] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.361006][T28689] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 938.396257][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 938.516462][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 938.699395][T28855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6090'. [ 938.722642][T28830] lo speed is unknown, defaulting to 1000 [ 938.732220][T28689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 938.856802][T28689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 938.894108][T28689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 938.938330][T28689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 938.967151][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 939.117281][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 939.163018][T28689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.212295][T28689] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.253610][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.260913][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.282034][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.289319][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.310559][T28830] wg1 speed is unknown, defaulting to 1000 [ 939.318735][T28874] netlink: 'syz.0.6092': attribute type 23 has an invalid length. [ 939.552386][T28876] ip6_vti0 speed is unknown, defaulting to 1000 [ 939.566481][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 939.677292][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 939.788290][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 939.923875][T28689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.931981][T28886] netlink: 'syz.3.6094': attribute type 1 has an invalid length. [ 939.956504][T28886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6094'. [ 940.060186][T28689] veth0_vlan: entered promiscuous mode [ 940.140029][T28689] veth1_vlan: entered promiscuous mode [ 940.218732][T28689] veth0_macvtap: entered promiscuous mode [ 940.242302][T28689] veth1_macvtap: entered promiscuous mode [ 940.273602][T21208] Bluetooth: hci5: command tx timeout [ 940.316701][T28689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.339113][T28689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.370899][ T5979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.381188][ T5979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.397359][ T5979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.407547][ T5979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.414250][T28876] lo speed is unknown, defaulting to 1000 [ 940.508002][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6096'. [ 940.591299][T28894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6096'. [ 940.798310][T28894] bond0: (slave bond_slave_0): Releasing backup interface [ 940.850011][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.862959][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.937138][T28876] wg1 speed is unknown, defaulting to 1000 [ 941.020485][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.058268][T28907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6100'. [ 941.060045][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.094967][T28907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6100'. [ 941.184187][T28907] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 941.751494][T28922] ip6_vti0 speed is unknown, defaulting to 1000 [ 941.888323][T28936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6107'. [ 942.264921][T28952] syzkaller0: entered promiscuous mode [ 942.273624][T28952] syzkaller0: entered allmulticast mode [ 942.402978][T28960] netlink: 'syz.3.6113': attribute type 10 has an invalid length. [ 942.412860][T28960] : left promiscuous mode [ 942.419559][T28960] : entered promiscuous mode [ 942.429169][T28960] team0: Device 5 failed to register rx_handler [ 942.470057][T28949] ip6_vti0 speed is unknown, defaulting to 1000 [ 942.471381][T28922] lo speed is unknown, defaulting to 1000 [ 942.487767][ T3435] net_ratelimit: 9 callbacks suppressed [ 942.487786][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 942.512061][T28964] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 942.626449][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 942.736314][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 942.886624][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 942.929658][T28973] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 944.179406][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055cdac00: rx timeout, send abort [ 944.687758][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055cdac00: abort rx timeout. Force session deactivation [ 945.292521][T28949] lo speed is unknown, defaulting to 1000 [ 945.293476][T28922] wg1 speed is unknown, defaulting to 1000 [ 945.377268][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 945.473847][T29008] IPv6: NLM_F_CREATE should be specified when creating new route [ 945.512449][T29012] netlink: 'syz.0.6128': attribute type 2 has an invalid length. [ 945.580686][T29017] netlink: 'syz.0.6128': attribute type 2 has an invalid length. [ 945.599087][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 945.663280][T29012] ip6_vti0 speed is unknown, defaulting to 1000 [ 945.720796][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 945.846559][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 945.966622][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 946.076389][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 946.221200][T29012] lo speed is unknown, defaulting to 1000 [ 946.240885][T28949] wg1 speed is unknown, defaulting to 1000 [ 946.261357][T29027] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 946.723700][T29012] wg1 speed is unknown, defaulting to 1000 [ 946.894801][T29030] tipc: Enabling of bearer rejected, already enabled [ 947.149861][T29030] tipc: Resetting bearer [ 947.447750][T29036] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6134'. [ 947.508801][ T6164] net_ratelimit: 5 callbacks suppressed [ 947.508824][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 947.510754][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ffe400: rx timeout, send abort [ 947.536955][T29037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6134'. [ 947.617936][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 947.635660][T29039] netlink: 'syz.2.6135': attribute type 1 has an invalid length. [ 947.651844][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6134'. [ 947.769433][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 947.809512][T29041] veth1_to_hsr: entered promiscuous mode [ 947.815224][T29041] veth1_to_hsr: entered allmulticast mode [ 947.951969][T29039] bond1 (unregistering): Released all slaves [ 948.036493][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ffe400: abort rx timeout. Force session deactivation [ 948.052124][T29048] syzkaller1: entered promiscuous mode [ 948.059198][T29048] syzkaller1: entered allmulticast mode [ 948.123449][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 948.183199][T29052] tipc: Started in network mode [ 948.198643][T29052] tipc: Node identity 5692be022aeb, cluster identity 4711 [ 948.206910][T29052] tipc: Enabled bearer , priority 0 [ 948.214900][T29052] syzkaller0: entered promiscuous mode [ 948.221512][T29052] syzkaller0: entered allmulticast mode [ 948.307337][T29052] tipc: Resetting bearer [ 948.342334][T29058] team0: Port device bridge1 added [ 948.349581][T29051] tipc: Resetting bearer [ 948.400910][T29051] tipc: Disabling bearer [ 948.425388][T29069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6143'. [ 948.496544][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 948.616551][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 948.685545][T29085] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 948.728985][T29076] ip6_vti0 speed is unknown, defaulting to 1000 [ 948.752422][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 948.886241][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 949.006251][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 949.116335][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 949.389256][T29076] lo speed is unknown, defaulting to 1000 [ 949.513309][T20252] IPVS: starting estimator thread 0... [ 949.646673][T29107] IPVS: using max 29 ests per chain, 69600 per kthread [ 949.909497][T29076] wg1 speed is unknown, defaulting to 1000 [ 949.926811][T29115] nbd: couldn't find device at index 536870912 [ 949.933078][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e3f000: rx timeout, send abort [ 950.103243][T29125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6163'. [ 950.114310][T29125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6163'. [ 950.212016][T29129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6162'. [ 950.243279][T29131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6164'. [ 950.263380][T29132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6162'. [ 950.382050][T29127] ip6_vti0 speed is unknown, defaulting to 1000 [ 950.433137][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e3f000: abort rx timeout. Force session deactivation [ 950.654520][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6169'. [ 951.206878][T29127] lo speed is unknown, defaulting to 1000 [ 951.528608][T29160] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 951.585922][T29160] bond1: (slave lo): speed changed to 0 on port 1 [ 951.595112][T29160] bond1: (slave lo): Enslaving as a backup interface with an up link [ 951.601327][T29162] Cannot find del_set index 4 as target [ 951.611872][T29127] wg1 speed is unknown, defaulting to 1000 [ 952.362962][T29186] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.445668][T29179] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.464886][T29179] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.528350][T29194] __nla_validate_parse: 2 callbacks suppressed [ 952.528373][T29194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6176'. [ 952.605643][T29179] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.617380][T29179] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.649618][T29186] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.741705][T29179] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.784317][T29179] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.901721][T29186] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.979554][T29179] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.003053][T29179] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.049317][T29186] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.136313][ T5979] net_ratelimit: 22 callbacks suppressed [ 953.136336][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 953.169161][T29203] mac80211_hwsim hwsim54 wlan1: Caught tx_queue_len zero misconfig [ 953.188594][T29204] ip6tnl1: entered promiscuous mode [ 953.203781][T29204] ip6tnl1: entered allmulticast mode [ 953.269749][ T5979] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.283944][ T5979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.292872][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 953.314357][ T1120] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.326817][ T1120] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.363284][ T1120] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.395869][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.428404][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.438880][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.457964][ T1120] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.467476][ T1120] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.497915][ T1120] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.541148][ T1120] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.596855][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 953.665646][T29222] sctp: [Deprecated]: syz.0.6183 (pid 29222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 953.665646][T29222] Use struct sctp_sack_info instead [ 953.737341][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 953.867170][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 953.996651][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 954.107455][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 954.216422][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 954.326636][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 954.436409][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.236508][ T1096] net_ratelimit: 33 callbacks suppressed [ 958.236531][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.366709][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.476667][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.586433][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.696701][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.806601][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 958.916759][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 959.026637][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 959.136648][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 959.246720][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 963.336655][ T12] net_ratelimit: 36 callbacks suppressed [ 963.336680][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 963.456760][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 963.566423][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 963.676566][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 963.787652][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 963.896447][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 964.006349][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 964.116385][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 964.226338][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 964.336343][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 968.356870][ T5979] net_ratelimit: 35 callbacks suppressed [ 968.356894][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 968.476466][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 968.586757][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 968.706628][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 968.816699][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 968.936499][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 969.056405][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 969.166357][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 969.276567][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 969.386739][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 973.416705][ T5979] net_ratelimit: 35 callbacks suppressed [ 973.416729][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 973.536535][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 973.646587][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 973.756423][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 973.866328][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 973.976325][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 974.096383][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 974.216389][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 974.326403][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 974.436771][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 978.456668][ T6162] net_ratelimit: 35 callbacks suppressed [ 978.456690][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 978.576536][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 978.686855][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 978.806614][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 978.916658][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 979.026731][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 979.136348][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 979.246490][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 979.366404][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 979.476601][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 983.486857][ T1096] net_ratelimit: 35 callbacks suppressed [ 983.486882][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 983.606751][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 983.716416][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 983.826508][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 983.936610][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 984.046551][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 984.156722][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 984.276932][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 984.386857][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 984.496392][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 988.506521][ T6166] net_ratelimit: 35 callbacks suppressed [ 988.506545][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 988.636534][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 988.746735][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 988.856521][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 988.966297][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 989.076337][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 989.186681][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 989.296453][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 989.407460][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 989.516629][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 993.596717][ T1096] net_ratelimit: 36 callbacks suppressed [ 993.596741][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 993.716607][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 993.826646][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 993.936398][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 994.046580][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 994.156623][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 994.266629][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 994.386534][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 994.496311][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 994.606333][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 998.696578][ T1120] net_ratelimit: 36 callbacks suppressed [ 998.696602][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 998.816612][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 998.936607][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.046429][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.156537][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.266730][ T1120] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.376455][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.486593][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.596653][ T1096] bond7: (slave macvlan4): failed to get link speed/duplex [ 999.706700][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1000.436426][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 1003.726379][ T6169] net_ratelimit: 35 callbacks suppressed [ 1003.726403][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 1003.856331][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 1003.966424][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.076638][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.186467][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.306428][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.416432][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.526505][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.646301][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1004.756539][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 1008.796642][ T6166] net_ratelimit: 35 callbacks suppressed [ 1008.796666][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 1008.916363][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.026550][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.136747][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.247109][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.366568][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.486348][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.596443][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.706993][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1009.816430][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1013.816580][ T36] net_ratelimit: 35 callbacks suppressed [ 1013.816627][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1013.936692][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.056601][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.166406][ T6166] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.276553][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.386760][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.496321][ T558] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.616589][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.726438][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1014.846510][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1017.391846][T29240] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1017.416665][T29239] syzkaller1: entered promiscuous mode [ 1017.427147][T29239] syzkaller1: entered allmulticast mode [ 1017.655634][T29260] netlink: 'syz.2.6193': attribute type 6 has an invalid length. [ 1017.685516][T29260] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6193'. [ 1017.791158][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.824448][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.838144][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.853458][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.869183][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.884884][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.898391][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.913946][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.934242][T29273] tipc: Started in network mode [ 1017.949063][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.971160][T29273] tipc: Node identity b6e8b8adf7e6, cluster identity 9 [ 1017.987241][T29266] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1017.993970][T29273] tipc: Enabled bearer , priority 0 [ 1018.007955][T29274] syzkaller0: entered promiscuous mode [ 1018.013471][T29274] syzkaller0: entered allmulticast mode [ 1018.095272][T29274] tipc: Resetting bearer [ 1018.161557][T29272] tipc: Resetting bearer [ 1018.213809][T29272] tipc: Disabling bearer [ 1018.305128][T29290] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6203'. [ 1018.428950][T29299] netlink: 'syz.5.6204': attribute type 1 has an invalid length. [ 1018.478099][T20252] IPVS: starting estimator thread 0... [ 1018.539234][T29308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6207'. [ 1018.540114][T29300] bond2: (slave geneve2): making interface the new active one [ 1018.560075][T29300] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1018.569665][ T12] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1018.593221][ T12] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1018.616322][T29305] IPVS: using max 26 ests per chain, 62400 per kthread [ 1018.641197][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806bb32000: rx timeout, send abort [ 1018.669291][ T12] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1018.703805][ T12] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1018.771280][T29315] tipc: Enabled bearer , priority 0 [ 1018.793408][T29315] syzkaller0: entered promiscuous mode [ 1018.801114][T29315] syzkaller0: entered allmulticast mode [ 1018.830385][ T5979] net_ratelimit: 30 callbacks suppressed [ 1018.830408][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1018.860023][T29312] tipc: Resetting bearer [ 1018.932470][T29312] tipc: Disabling bearer [ 1018.958404][T29328] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1018.972608][T29328] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1019.052511][T29327] ip6_vti0 speed is unknown, defaulting to 1000 [ 1019.066267][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.089066][T29331] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6213'. [ 1019.149516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806bb32000: abort rx timeout. Force session deactivation [ 1019.187150][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.334766][ T5984] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.408383][T29342] syzkaller0: entered promiscuous mode [ 1019.415511][T29342] syzkaller0: entered allmulticast mode [ 1019.457254][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.531618][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6217'. [ 1019.586554][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.634187][T29327] lo speed is unknown, defaulting to 1000 [ 1019.706421][ T12] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.868071][T29361] netlink: 428 bytes leftover after parsing attributes in process `syz.0.6223'. [ 1019.886657][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 1019.900770][T29361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6223'. [ 1020.033228][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1020.058899][T29327] wg1 speed is unknown, defaulting to 1000 [ 1020.199473][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1020.235424][T29376] 8021q: VLANs not supported on nlmon0 [ 1020.311023][T29379] ip6_vti0 speed is unknown, defaulting to 1000 [ 1020.671496][T29394] netlink: 'syz.2.6234': attribute type 1 has an invalid length. [ 1020.730357][T29395] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1020.778562][T29395] block nbd6: shutting down sockets [ 1020.804569][T29397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1020.978500][T29397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1021.027925][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6236'. [ 1021.151892][T29400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1021.230722][T29400] bond1: (slave geneve2): making interface the new active one [ 1021.243126][T29400] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1021.335615][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1021.361432][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1021.380096][T29379] lo speed is unknown, defaulting to 1000 [ 1021.383017][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1021.443578][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1021.479821][T29402] ip6_vti0 speed is unknown, defaulting to 1000 [ 1021.763368][T29425] netlink: 'syz.5.6243': attribute type 13 has an invalid length. [ 1021.772354][T29425] netlink: 'syz.5.6243': attribute type 17 has an invalid length. [ 1021.952892][T29433] syzkaller1: entered promiscuous mode [ 1021.971002][T29433] syzkaller1: entered allmulticast mode [ 1022.008256][T29402] lo speed is unknown, defaulting to 1000 [ 1022.019368][T29379] wg1 speed is unknown, defaulting to 1000 [ 1022.063776][T29440] batadv1: entered promiscuous mode [ 1022.558772][T29402] wg1 speed is unknown, defaulting to 1000 [ 1022.659805][T29453] batadv1: entered promiscuous mode [ 1022.939394][T29464] __nla_validate_parse: 2 callbacks suppressed [ 1022.939415][T29464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1022.989528][T29464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1023.017861][T29462] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6251'. [ 1023.377220][T29476] ip6_vti0 speed is unknown, defaulting to 1000 [ 1023.654471][T29493] netlink: 'syz.3.6258': attribute type 2 has an invalid length. [ 1023.703061][T29493] netlink: 'syz.3.6258': attribute type 8 has an invalid length. [ 1023.715476][T29497] tipc: Enabling of bearer rejected, already enabled [ 1023.760415][T29493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6258'. [ 1023.906156][ T36] net_ratelimit: 18 callbacks suppressed [ 1023.906180][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.077289][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.186519][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.216947][T29476] lo speed is unknown, defaulting to 1000 [ 1024.337421][ T6162] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.456233][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.576267][ T6146] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.707273][ T5979] bond7: (slave macvlan4): failed to get link speed/duplex [ 1024.714836][T29522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1024.761057][T29476] wg1 speed is unknown, defaulting to 1000 [ 1024.815387][T29527] ip6_vti0 speed is unknown, defaulting to 1000 [ 1025.222553][T29527] lo speed is unknown, defaulting to 1000 [ 1025.440267][ T6164] bond7: (slave macvlan4): failed to get link speed/duplex [ 1025.563097][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1025.707336][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 1025.725562][T29565] ip6_vti0 speed is unknown, defaulting to 1000 [ 1025.735252][T29527] wg1 speed is unknown, defaulting to 1000 [ 1025.993762][T29576] netlink: 21184 bytes leftover after parsing attributes in process `syz.1.6279'. [ 1026.100896][T29570] ip6_vti0 speed is unknown, defaulting to 1000 [ 1026.199443][T29584] netlink: 'syz.1.6281': attribute type 1 has an invalid length. [ 1026.276828][T29584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1026.290178][T29584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1026.408153][T29584] bond1: (slave bridge1): making interface the new active one [ 1026.448045][T29584] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1026.688499][T29592] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.732110][T29592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.788259][T29595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'. [ 1026.806549][T29595] netlink: 'syz.0.6283': attribute type 5 has an invalid length. [ 1026.834766][T29595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6283'. [ 1026.938874][T29595] geneve2: entered promiscuous mode [ 1026.944415][T29595] geneve2: entered allmulticast mode [ 1026.956770][T29565] lo speed is unknown, defaulting to 1000 [ 1026.969184][ T6162] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1027.010754][T29592] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.031074][T29592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.080566][T29570] lo speed is unknown, defaulting to 1000 [ 1027.096264][ T5984] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1027.370743][T29600] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6285'. [ 1027.523050][T29565] wg1 speed is unknown, defaulting to 1000 [ 1027.667884][T29604] netlink: 'syz.5.6287': attribute type 2 has an invalid length. [ 1027.805166][T29604] : entered promiscuous mode [ 1027.940067][T29570] wg1 speed is unknown, defaulting to 1000 [ 1028.266947][ T5150] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1028.273194][T21208] Bluetooth: hci0: command 0x0c1a tx timeout [ 1028.617705][T29611] ip6_vti0 speed is unknown, defaulting to 1000 [ 1028.892006][T29592] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.921621][T29592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.954127][T29592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1029.008108][ T6125] net_ratelimit: 18 callbacks suppressed [ 1029.008132][ T6125] bond7: (slave macvlan4): failed to get link speed/duplex [ 1029.048339][T29592] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.066192][T29592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.086380][T29592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1029.119709][T29611] lo speed is unknown, defaulting to 1000 [ 1029.156303][ T3836] bond7: (slave macvlan4): failed to get link speed/duplex [ 1029.247045][ T3836] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.265858][ T3836] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1029.284936][ T3836] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1029.347524][ T3836] bond7: (slave macvlan4): failed to get link speed/duplex [ 1029.356849][ T6164] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.367983][ T6164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1029.376827][ T6164] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1029.414167][ T6164] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.428759][ T6164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1029.446213][ T6164] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1029.483473][ T6164] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1029.508988][ T6164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1029.526608][ T6164] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1029.548730][ T3435] bond7: (slave macvlan4): failed to get link speed/duplex [ 1029.629390][T29611] wg1 speed is unknown, defaulting to 1000 [ 1029.811771][T29646] __nla_validate_parse: 2 callbacks suppressed [ 1029.811793][T29646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6297'. [ 1029.888773][T29646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6297'. [ 1029.966369][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1030.122902][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1030.136715][T29660] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1030.145763][T29660] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1030.175354][T29660] netlink: 540 bytes leftover after parsing attributes in process `syz.5.6304'. [ 1030.184608][ T6125] bond7: (slave macvlan4): failed to get link speed/duplex [ 1030.207460][T29666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6302'. [ 1030.287003][ T36] bond7: (slave macvlan4): failed to get link speed/duplex [ 1030.396840][ T6169] bond7: (slave macvlan4): failed to get link speed/duplex [ 1030.615984][T29690] : renamed from bond_slave_0 (while UP) [ 1030.726231][ T60] bond7: (slave macvlan4): failed to get link speed/duplex [ 1030.836343][ T60] bond7: (slave macvlan4): failed to get link speed/duplex [ 1031.157307][T29699] ip6_vti0 speed is unknown, defaulting to 1000 [ 1031.158754][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 1031.711125][T29716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1031.731187][T29716] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1031.817165][T29716] netlink: 'syz.1.6315': attribute type 1 has an invalid length. [ 1031.870526][T29716] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1031.957518][T29724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6318'. [ 1032.158502][T29699] lo speed is unknown, defaulting to 1000 [ 1032.159660][T29722] ip6_vti0 speed is unknown, defaulting to 1000 [ 1032.867815][T29699] wg1 speed is unknown, defaulting to 1000 [ 1032.901231][T29722] lo speed is unknown, defaulting to 1000 [ 1033.146404][T29742] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1033.176924][T29748] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1033.205177][T29747] ip6_vti0 speed is unknown, defaulting to 1000 [ 1033.485094][T29747] lo speed is unknown, defaulting to 1000 [ 1033.525105][T29722] wg1 speed is unknown, defaulting to 1000 [ 1033.861533][T29741] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1033.873538][T29741] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1033.881982][T29741] CPU: 0 UID: 0 PID: 29741 Comm: syz.3.6323 Not tainted syzkaller #0 PREEMPT(full) [ 1033.891385][T29741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.901467][T29741] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1033.907212][T29741] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 0d e5 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 e5 e4 ab f7 4d 8b 75 00 4d 8d a7 30 [ 1033.926828][T29741] RSP: 0018:ffffc9000e8e7ba8 EFLAGS: 00010046 [ 1033.932912][T29741] RAX: 0000000000000000 RBX: ffff88804b321000 RCX: dffffc0000000000 [ 1033.940896][T29741] RDX: 0000000000000000 RSI: ffffffff8bbfc640 RDI: ffff88804b321000 [ 1033.948886][T29741] RBP: ffff88804aeca000 R08: ffffffff8e6958b3 R09: 1ffffffff1cd2b16 [ 1033.956874][T29741] R10: dffffc0000000000 R11: fffffbfff1cd2b17 R12: ffff8880270e4650 [ 1033.964861][T29741] R13: 0000000000000000 R14: ffff88804b321030 R15: ffff8880270e4000 [ 1033.972849][T29741] FS: 000055555bfcf500(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 1033.981798][T29741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.988391][T29741] CR2: 00005555739c25c8 CR3: 000000003e3be000 CR4: 00000000003526f0 [ 1033.996373][T29741] Call Trace: [ 1033.999661][T29741] [ 1034.002616][T29741] lec_push+0x3cb/0x1860 [ 1034.006899][T29741] ? __pfx_lec_push+0x10/0x10 [ 1034.011594][T29741] vcc_release+0x15f/0x580 [ 1034.016139][T29741] sock_close+0xc3/0x240 [ 1034.020402][T29741] ? __pfx_sock_close+0x10/0x10 [ 1034.025259][T29741] __fput+0x44c/0xa70 [ 1034.029257][T29741] task_work_run+0x1d4/0x260 [ 1034.033901][T29741] ? __pfx_task_work_run+0x10/0x10 [ 1034.039028][T29741] ? __se_sys_close_range+0x4ed/0x650 [ 1034.044521][T29741] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1034.050100][T29741] exit_to_user_mode_loop+0xff/0x4f0 [ 1034.055407][T29741] ? rcu_is_watching+0x15/0xb0 [ 1034.060197][T29741] do_syscall_64+0x2e3/0xf80 [ 1034.064814][T29741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.071062][T29741] ? clear_bhb_loop+0x60/0xb0 [ 1034.075774][T29741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.081678][T29741] RIP: 0033:0x7f43f2b8f749 [ 1034.086100][T29741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.105725][T29741] RSP: 002b:00007fffac60afc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1034.114170][T29741] RAX: 0000000000000000 RBX: 00007f43f2de7da0 RCX: 00007f43f2b8f749 [ 1034.122182][T29741] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1034.130515][T29741] RBP: 00007f43f2de7da0 R08: 0000000000000000 R09: 00000012ac60b2bf [ 1034.138496][T29741] R10: 00007f43f2de7cb0 R11: 0000000000000246 R12: 00000000000fc64a [ 1034.146476][T29741] R13: 00007f43f2de6180 R14: ffffffffffffffff R15: 00007fffac60b0e0 [ 1034.154468][T29741] [ 1034.157507][T29741] Modules linked in: [ 1034.161454][T29741] ---[ end trace 0000000000000000 ]--- [ 1034.166944][T29741] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 1034.172692][T29741] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 0d e5 ab f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 e5 e4 ab f7 4d 8b 75 00 4d 8d a7 30 [ 1034.192335][T29741] RSP: 0018:ffffc9000e8e7ba8 EFLAGS: 00010046 [ 1034.198418][T29741] RAX: 0000000000000000 RBX: ffff88804b321000 RCX: dffffc0000000000 [ 1034.206408][T29741] RDX: 0000000000000000 RSI: ffffffff8bbfc640 RDI: ffff88804b321000 [ 1034.214398][T29741] RBP: ffff88804aeca000 R08: ffffffff8e6958b3 R09: 1ffffffff1cd2b16 [ 1034.222409][T29741] R10: dffffc0000000000 R11: fffffbfff1cd2b17 R12: ffff8880270e4650 [ 1034.230491][T29741] R13: 0000000000000000 R14: ffff88804b321030 R15: ffff8880270e4000 [ 1034.238502][T29741] FS: 000055555bfcf500(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 1034.247439][T29741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1034.254102][T29741] CR2: 00005555739c25c8 CR3: 000000003e3be000 CR4: 00000000003526f0 [ 1034.262117][T29741] Kernel panic - not syncing: Fatal exception [ 1034.268577][T29741] Kernel Offset: disabled [ 1034.272911][T29741] Rebooting in 86400 seconds..