last executing test programs: 19m31.901951332s ago: executing program 32 (id=4474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001080)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000010c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001100)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x139, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x125, 0x0, @wg=@data={0x4, 0x9, 0x5, "4fc83610e883854e33fc599250b42f449a26b6257830db9397bd5b5b21661f2c9316d3c81405ca3e697c5bd9fbc6145e7aff6fa5de083d9f09df2e2b19878398af31724b1a5600299eb180c16d86c1168d5f041b521d48833bdd47664523e48c3749e18f34a4366b4fca02b882f43bfdd5085674765b5104ac030ae983ea7aec002c9da08d779f34f97d39e6c110e32d1324611425e7052ea217210ca87a0e62c25e8f8b2d3e5899f8193cac52b50465e774ba4311d2b5ff51fcc449a383bd6fa7f9d87b5e32c8c7b89928d5be9a81c08357a5a11c017e3971d28f5d8dd4a9e462331e2c6a10ed7607bdb584ca26b2e589844afbf0d88e76b4a69f564f4b960c54fad1d66e7e5a9f5cf0e0d2be"}}}}, 0x147) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15m45.810176956s ago: executing program 33 (id=5090): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, 0x0}, 0x1c) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0xcee5f433653f8918, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x55) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x1, {0x0, 0xf0}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 15m45.495570719s ago: executing program 34 (id=5088): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x2400c094) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001480)={&(0x7f00000014c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001600)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001640)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)={0x24, r3, 0x331, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) 15m45.25870924s ago: executing program 35 (id=5089): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) sendmmsg$sock(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) close(0x4) 15m44.794051196s ago: executing program 36 (id=5091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20a201, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000580), 0x56) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000700)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 15m44.38521537s ago: executing program 37 (id=5092): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x802, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000900)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000940)=0x1, 0x2b) bind$inet6(r1, &(0x7f0000000980)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000009c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x1000}}}}}}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 14m23.576063448s ago: executing program 38 (id=5182): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693", 0x4}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="93", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xf3, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x8c, &(0x7f0000000200)=""/140, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x2}, 0x8) 12m18.102428627s ago: executing program 6 (id=5492): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000180), 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xfd96, &(0x7f00000003c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0xfffffffffffffd56, 0x10, &(0x7f0000000500), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xfd96, &(0x7f00000003c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0xfffffffffffffd56, 0x10, &(0x7f0000000500), 0x1dd}, 0x48) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x140e, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000340)=[{&(0x7f0000000380)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 12m16.916515979s ago: executing program 6 (id=5494): socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000b40), 0x4000000000001f2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb01001800000000000000dc000000dc0000000c0000000a000000050000130400000003001100ff030000080000000400000006000000d0c0000006000000c098ffd99a88144eeabedca4af4a8801000000080000000600000002000000001000000c0000000400000006000000000000000200000d00000000000000000200000007000000000000000400000002000084000000000800000004000000000000000c00000000000000fb238725100000000000000c010000000c00000000000010020000000f000000040000000000000900000000000000000000001000000000000000400000000e000000ec008003000000002e30616100305f302e2e0029a9e14bb6a1a3c42d6d9c62439676d2e17547bf9eb07e353bdc85b3b59ccefb647537571ddee26d2e15854504b2af9e0a724cd507c5b3435b677215e0b63a54ebbd5e64138f53db91030d13b71823c1b9253ee313b3ef38b4dcff2f109234b2c7e2117bbc1515c6417f4be876c28013c492b4f091003cad4254ba54352ec05c2e7c794b071a188844f073a66b57953baa33cd27c04d1b4a9629"], &(0x7f0000000500)=""/232, 0x100, 0xe8, 0x0, 0x9, 0x10000}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x20008880) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r1}, 0x94) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000640)=0x6e, 0x81800) ioctl$NILFS_IOCTL_GET_CPINFO(r6, 0x80186e82, &(0x7f00000007c0)={&(0x7f0000000cc0)=[{0x2, 0x0, 0x5, 0x40000000, 0x6, 0x3ff, 0xfffffffffffffffd, 0x7}, {0x1, 0x0, 0x3, 0xc4b5, 0x7, 0x364, 0x9, 0x7fffffff}, {0x3, 0x0, 0xfffffffffffff493, 0x0, 0x9, 0xffffffffffff0001, 0x4, 0x1}, {0x2, 0x0, 0xe, 0xd8d, 0xb, 0x6, 0x7, 0x8000000000000001}, {0x3, 0x0, 0x7, 0x4, 0x7, 0x8, 0x7, 0x3}], 0x5, 0x38, 0x1, 0x1}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000240)={0x6, 0x8000}, 0x4) socket(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000bc0)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c00)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c40)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c80)) 12m16.016414039s ago: executing program 6 (id=5496): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x2a, 0x7, 0x0, 0x1, 0x17}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01000000"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x124}}, 0x0) 12m11.765621747s ago: executing program 6 (id=5503): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000b80)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100030000009500000000000000b7080000000000007b8afbff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf98000000000000560800000000000085000000bc000000b70000000200000095"], &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x3206}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f00000008c0)=0x7) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000200)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xf0, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x1, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0xfd, 0x2}], 0x80) syz_emit_ethernet(0x77, &(0x7f0000000280)={@broadcast, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @esp={{0x9, 0x4, 0x2, 0x6, 0x65, 0x66, 0x0, 0xa2, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010101, {[@timestamp_addr={0x44, 0xc, 0x54, 0x1, 0x4, [{@broadcast, 0xb0}]}, @noop]}}, {0x4d3, 0x88, @basic, "a89b6df7", 0xffffffffffffffa5}}}}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3cf1ffff0f0013070000000000000000fc020000000000000000000000000000f730000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0x13c}}, 0x0) r10 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xdf2b, '\x00', 0x0, r10, 0x0, 0x4, 0x2}, 0x50) sendmmsg$inet_sctp(r10, &(0x7f00000003c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)="03", 0x1}], 0x1}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000880)={0x1d, r12, 0x3, {0x1, 0xff, 0x1}, 0xff}, 0x18) sendmmsg$inet_sctp(r10, &(0x7f0000000780)=[{&(0x7f00000007c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800), 0x0, &(0x7f0000000840)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 12m11.512359248s ago: executing program 39 (id=5463): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0xc, 0x60400, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) 12m10.767916267s ago: executing program 6 (id=5506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400"], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000d40)=""/259, 0x103}, {&(0x7f0000000e80)=""/4105, 0x1009}, {&(0x7f0000001ec0)=""/114, 0x72}, {&(0x7f0000001f40)=""/4094, 0xffe}, {&(0x7f0000003040)=""/119, 0x77}, {&(0x7f00000030c0)=""/107, 0x6b}, {&(0x7f0000003140)=""/4084, 0xff4}, {&(0x7f0000004140)=""/246, 0xf6}, {&(0x7f0000004240)=""/142, 0x8e}, {&(0x7f0000004300)=""/24, 0x18}, {&(0x7f0000004340)=""/55, 0x37}, {&(0x7f0000004380)=""/214, 0xd6}], 0xc}, 0x40000180) 12m9.757738306s ago: executing program 6 (id=5507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000940)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x18, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf92"}}}}, 0x73) 11m56.882689877s ago: executing program 40 (id=5502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000880), 0x56) sendmsg$kcm(r9, &(0x7f00000008c0)={&(0x7f0000000900)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)="27030200dc0f14000e0007000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000040000000", 0x2e}], 0x1}, 0x4005) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 11m55.762826669s ago: executing program 41 (id=5505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140005004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m54.335208705s ago: executing program 42 (id=5507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000940)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x18, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf92"}}}}, 0x73) 2m36.910327241s ago: executing program 5 (id=8110): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xe67}, 0x8) syz_emit_ethernet(0xfe, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0xc8, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x84, 0x0, [], "e5db538e222f85858521a48cc2fdd464dff9e29ac5b29e382c43f52e891bdccda3d12c4a0ad40a81581fbd5de3ce18eca60e1a9f7b5155a16807890152a00959bf667d3b101b64a6fa36255873110dbf78bd1d7543ca1231ad965bc0d0ffe6d0ca79b5c37265594caaf2d34f44c5cb1ff39ed821d2b30f123dff001fb1edf6df3b09a4cd"}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000100)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0xfc, [0x7, 0x3, 0x4, 0xfff, 0x5, 0x5], 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/252}, &(0x7f0000000300)=0x78) 2m36.471360318s ago: executing program 5 (id=8115): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x60000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 2m36.106275919s ago: executing program 5 (id=8119): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x41, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "01"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x118}}, 0x0) 2m33.957574548s ago: executing program 5 (id=8130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="382eaf917ff0", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0xb7, 0x9}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2m33.076836216s ago: executing program 5 (id=8134): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="382eaf917ff0", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0xb7, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 10) 2m32.362429267s ago: executing program 5 (id=8138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000029000100000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m25.802120336s ago: executing program 4 (id=8181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000001280)=""/4100, 0x1004}, {&(0x7f00000022c0)=""/158, 0x9e}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf98}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4ff}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/4082, 0xff2}, {&(0x7f00000043c0)=""/242, 0xf2}], 0x3}, 0x4}], 0x7, 0x0, 0x0) 2m25.398343278s ago: executing program 4 (id=8186): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}}, 0x4080) 2m25.047655418s ago: executing program 4 (id=8190): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="382eaf917ff0", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0xb7, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 16) 2m24.689507428s ago: executing program 4 (id=8192): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0}, 0x0) 2m24.318402437s ago: executing program 4 (id=8194): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x1c, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x128}]}]}, 0x1c}, 0x1, 0x0, 0x3f000000, 0x42804}, 0x84) 2m24.021393703s ago: executing program 4 (id=8199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000290001000000000000002f0012000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m22.64948929s ago: executing program 2 (id=8208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x230, 0x700001b, 0x148, 0x230, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x88, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}, 0x1, 0x600000000000000}, 0x0) 2m22.404258369s ago: executing program 2 (id=8209): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x0, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x1f4}, 0x0) 2m22.222298587s ago: executing program 2 (id=8210): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 2m22.156569755s ago: executing program 2 (id=8212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x1c, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x128}]}]}, 0x1c}, 0x1, 0x0, 0x40000000, 0x42804}, 0x84) 2m16.881686257s ago: executing program 43 (id=8138): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000029000100000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m8.767525245s ago: executing program 44 (id=8199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000290001000000000000002f0012000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m43.889923522s ago: executing program 2 (id=8213): socket$nl_audit(0x10, 0x3, 0x9) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="0b03feff4f12021202004788aa", 0xd, 0x0, &(0x7f0000000440), 0x14) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000600)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x1}, 0x94) pipe(0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2ee5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000000c80)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000cc0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000d00)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x410) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x8, 0xd2e, 0x5, 0x40180, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xf}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ac51030000000400000000000000ff000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b1050000850000000600000085100000f8fffffff4f5b1f7e02b6a00dbbf0d20deddcaec22cb563ce18b1fc7a6f15292614bc9fb1bcab348"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000008c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xd, 0x9, 0x2}, 0x10, 0x2b62f, 0xffffffffffffffff, 0x4, &(0x7f00000009c0)=[r5], &(0x7f0000000a00)=[{0x5, 0x4, 0x3, 0xa}, {0x1, 0x1, 0x3, 0x8}, {0x4, 0x2, 0xf}, {0x0, 0x101, 0x6, 0xa}], 0x10, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf25010000000000000008410000004c0018000000307564700000000000000000000000000000000000000000000000e5ffffffffffffff000000000000000000907200"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1m42.218149341s ago: executing program 2 (id=8319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000029000100000000000000008c12000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m27.284313447s ago: executing program 8 (id=8367): r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, 'wg1\x00'}}, 0x1e) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@get={0x1, &(0x7f00000003c0)=""/119, 0x58a}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000180)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000200)) write$ppp(r2, &(0x7f0000000240)='\x00\x00', 0x2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7610}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 1m26.493613078s ago: executing program 45 (id=8319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000029000100000000000000008c12000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m25.658962681s ago: executing program 8 (id=8372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4050) 1m24.986176256s ago: executing program 8 (id=8375): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket(0x2d, 0x2, 0x0) setsockopt(r1, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r1, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) 1m24.509579964s ago: executing program 8 (id=8377): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f00000003c0)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0, 0x0, 0x1100}, 0x50) 1m24.178345744s ago: executing program 8 (id=8378): socket$nl_audit(0x10, 0x3, 0x9) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000440), 0x14) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000600)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x1}, 0x94) pipe(0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2ee5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f0000000c80)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000cc0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000d00)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x410) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x8, 0xd2e, 0x5, 0x40180, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xf}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ac51030000000400000000000000ff000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b1050000850000000600000085100000f8fffffff4f5b1f7e02b6a00dbbf0d20deddcaec22cb563ce18b1fc7a6f15292614bc9fb1bcab348"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000008c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xd, 0x9, 0x2}, 0x10, 0x2b62f, 0xffffffffffffffff, 0x4, &(0x7f00000009c0)=[r5], &(0x7f0000000a00)=[{0x5, 0x4, 0x3, 0xa}, {0x1, 0x1, 0x3, 0x8}, {0x4, 0x2, 0xf}, {0x0, 0x101, 0x6, 0xa}], 0x10, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf25010000000000000008410000004c0018000000307564700000000000000000000000000000000000000000000000e5ffffffffffffff000000000000000000907200"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1m22.763842544s ago: executing program 8 (id=8380): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000290001000000000000000000122f0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m7.255046815s ago: executing program 46 (id=8380): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000290001000000000000000000122f0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 32.914427056s ago: executing program 3 (id=8536): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "9d2218", 0x46, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "e2f3"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x0, 0x2, 0x4, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x0, 0x7}, 0x2, {0x0, 0x0, 0x3, 0xa, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 31.550486816s ago: executing program 3 (id=8542): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x3, 0xff, 0x2}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="3874517c2edc", 0xfdef}, {0x0}], 0x2) (fail_nth: 3) 30.510281569s ago: executing program 3 (id=8546): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x230, 0x700001b, 0x148, 0x230, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x88, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0xfeffffffffffffff) 29.658455315s ago: executing program 3 (id=8549): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) 29.036291063s ago: executing program 3 (id=8550): socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4001, 0xd00, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 27.723084459s ago: executing program 3 (id=8557): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r0, &(0x7f0000000100)=""/68, 0x44) write(r2, &(0x7f0000000200)="4ede", 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000440)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000c83afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000000000000000000214002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee789a157e29b96e0ef93a9dbc1a8096375d96f244eda9dd1b1435ac7241701e58e05d46b50b0a12c58673757640be944806693a698a9bba6018624eefa98f28e3cfee5d951fcf227c6c8d55d58fcee8d57c51500dfdc5ec9179e731fd90ef87a451f79fbd0dd6e8661b31dc6ad30a6642f938994de7b9701fdb19566597170589bace02e1ad71eab7086e9784008eeb6324cd8102f1fd9649fb92e4131c2ee1585c77866d9bcb6f5b0b5db4a1de521eeed49ea"], 0x0) splice(r2, &(0x7f0000000240), r1, 0x0, 0x800000000ff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = getpid() sendmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='C', 0x1}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x200080a0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES16=r4, @ANYBLOB="0100000000000000df00000800000018000180140002007b797a7f74756e000000efffffffffff170002800800020009000000040001000800", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x8811) 8.107777812s ago: executing program 1 (id=8626): bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x2, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 7.561390447s ago: executing program 1 (id=8628): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xfc, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x64a2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0xfc}}, 0x20000800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) 7.305969078s ago: executing program 1 (id=8631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2, 0x4, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x8e23}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x40000) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000680)="2f30c8307b0a", 0x6}], 0x1) connect$802154_dgram(r2, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000006c0)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000700)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000740), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000780)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000007c0)=@gcm_256={{0x303}, "c323f43b15005b93", "fab78714f4222717ce8100", "0500", "05637dea583c6e80"}, 0x38) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000840)="8a3deb7cc7", 0x5}], 0x1) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 4.38116642s ago: executing program 9 (id=8642): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 4.022496346s ago: executing program 0 (id=8643): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e6574646576736988636d300000000000000500190000000000422324d5bbe4ce50e17d0161068aca1769ccd73b3f24a5083dfe4ea3073018f5be9edacd40bb324df59a54f12804ceda07eb8cd7e884c78d22ca8fb068dec76dc669ae30138d38934786f97851a23e536c4ddb7d92c46fcab45bad11478aea2b89c6cb9a15dfbf9055457f28f1045815cb8e33b67a8da173ab390372736791b371713638474e799905b7674708212fa728725bbac12f7c1512c3da7649774678e43a23991ca5a75c7e72ac"], 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x7f, 0x6}) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000100)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 3.841640861s ago: executing program 1 (id=8644): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f00000009c0)={'wlan0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) write(r2, &(0x7f0000000280)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x1, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40887}, 0x20000000) sendmsg$nl_route_sched(r6, 0x0, 0x14) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x880) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) getsockname$packet(r8, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$inet(r7, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) socket$inet6_udp(0xa, 0x2, 0x0) connect$packet(r3, &(0x7f00000002c0)={0x11, 0x4, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, 0x14) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local}) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000700)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3.653741453s ago: executing program 9 (id=8645): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000200), 0x12) openat$cgroup_devices(r1, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000500)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00000000000000000000000000ffffff8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 3.534546662s ago: executing program 7 (id=8646): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@expire={0x104, 0x18, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@dev}, {@in6=@mcast2}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef}}}, [@mark={0xc}]}, 0x104}}, 0x0) 3.495479379s ago: executing program 0 (id=8647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 3.168787348s ago: executing program 9 (id=8648): bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x2, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 3.074195159s ago: executing program 0 (id=8649): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000140), 0x0}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x46}, @in=@loopback, 0x0, 0x100, 0x4e23, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x10000, 0x401, 0x63b40c8e, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1, 0x800000000003, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000007c0)={0x28, 0x0, 0x940a505bf821a6d2, @host}, 0x10) connect$vsock_stream(r5, &(0x7f0000000800), 0x10) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, 0x0, &(0x7f00000009c0)) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000840)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r7], 0x1c) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000840)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r7], 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r9) (async) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) pwritev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00!', 0x2}, {&(0x7f0000000500)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17930141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b", 0xb0}, {&(0x7f00000005c0)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a", 0xb7}, {&(0x7f0000000680)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc", 0x7e}], 0x4, 0x5, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f0000000880)={0x3e8c, 0x70000}) (async) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f0000000880)={0x3e8c, 0x70000}) setsockopt$sock_int(r11, 0x1, 0x54, &(0x7f0000000140)=0xfffffffc, 0x4) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0xffffffffffffffc1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000000000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000028000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000180003"], 0xf0}, 0x1, 0x0, 0x0, 0x24002890}, 0x80) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0xffffffffffffffc1, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000000000000000000000000200000a20000000000a05000000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000070000000060a0b040000000000000000028000000900010073797a30000000000900020073797a310000000044000480400001800a0001006d617463680000003000028008000240000000010a0001006f776e6572000000180003"], 0xf0}, 0x1, 0x0, 0x0, 0x24002890}, 0x80) 3.073506836s ago: executing program 7 (id=8650): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="180006bca1000000000000000100000085200000b04c030095"], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.675013991s ago: executing program 9 (id=8651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x5, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x7800, 0x700, 0x4, 0x80000000}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'hsr0\x00', 0x0}) bind$packet(r8, &(0x7f00000004c0)={0x11, 0x17, r9, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f0000000680)={0x1aa8, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x12ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "b66cc4e382a2f2383d4a6778132cffdd4f7c0c8efde7a252459e904d2bea393549054e117463c5688a2b8a8d471b8cb22d59380c809f64468eed0b728b44d311d37af7382f31d2486cfddc36afadd9"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43a7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd1}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "bc1661a5a791b85d753dd5f74e1b86d38b9302bb9a5b5eb642dcb3646741c9916d51060a82a6e40bc7f10ee021cf8c839bf7dfad84522639f56ed18e07e7cdbdaa98ec13"}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "a494e7907b5ae763d3ccdd262d5e400f33fca86492003e8b7a68f3d4d4b575ec1fddec0953675b394d335b65ed2c9021de49"}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "b47f8ed572f783011a54b2bcdefbc447d7e053aef6c69c52f6c6e472360a8520b888c0a81c4025882cd0e0251721c87bff85baefe228e4350d9501772a07a7ef4e13d11416437a3da92652a11be958c427d27e78ab27aed7c3bbe0a5c78f9de23b7c95287b8e55a48b1ad6b49ca2a49160b083886e9f2a167e4eb6984fa1926e6dbd17275aa61c55e27612c3aef547d1c0cca5880e32c373ff68c266e3e328c0bdecc429b2af512336346a8b529b7689eabbac8f1a525425676795f2e118e6e33ebd071d0da368e6ac079d6ca3dabdfa4158c120ad9c5fbd3e00ea034669dab1070778beab8ce93dc0dd7d0e992c41a48af0a174"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "9a7d012a65ff70741e6d75ce3db29ece85d76e49f22d6079631177642fc04c81cdc6e8ddd914c3e36f51969918e2f08713105c703fcf260699340ce2a8afb3b75d2741a4d4f5d538923a8f466e722218088dbcfd187b6a454b0145e98be73b855c014ff4eb60902bca540a06bbddf4aada05de7125a57c7c06dd8757720601a5a4fd3b1d8008f81bd99de74b301199f175ad6be80cac9ccdcddd9d15a373460b89a6e2164a02583d812a5bc867529da0917e959261e10bbd5cea3a7d5174279af27e20cf661e6121d1b3b1ac0c38cc9a47284f58389ead285477942c270dd3b200aab160f01fa0e9ea797e23d935b58c1b71d7d1fcdc6da263d674ee689ca2281e479f067e48af0d96857f62a4018c9d2426019c2244acf5c745a76a3c0e41a6b6529418e2df40df1dce096f96d35534114820cf41ace0a10a9cafd6a84bde99eba6119bfcba371adb6dea82cec88da0c1b08f9ddd2229319d7f6720674dbc65cb793032f1cdfbf91bbdf8c9eaa53ced413afd133cc241e4d9c11aa658b1a3d81c100f6491dd2d3c24231dacdf9fd6e1cabc1e0399808db20bbcc5cb803da69b699fb413d85ac06de2e42018534c9998aca4903adb71d5d7b52d510aa02a0e7d45580e33759d5ea1e5d8788f22dd8ffe4f8e20c560c6cfe5aa4053dbc38a86833297cae2c6a55cc54faf1db1810a83e675af9ff831b1eb4671f9ac4196d99d78f3ff54ff92bac932cc1686c6119fd10cb370e2169069045b9db1d8d4880b692190053fe8806102b312d4e80f50e816df135a2d5213243801ffcb6a682dd5d33f3758b1fa8149b3585fb529981368285ba784d3534087aad88e7620dd2d4a1d271ec2dbf59c4e97489e124da4d3061c413c39c2236052475f0a92222789362709b42918d627ffa6b0356f5a32894938b7e979814f33b8e4c6713105c65c935734090c60f3f96eb81fed9a02343ea356ae29269ccd8f43a00b6e27cdab008ed1f59afb997b9b6b9ca02bbf330ce794d5e88324ca33d8f119657f6d30eb96238233fb8baca1cd59e1a982918b83ed5d7cfc309e7fd78f627329a2edc5c124c7160c8c58c6e9fa8aee6c70cdc21494347a2ff78991b6e09e77251c0693d83b393ac38ad4404935f28ad50f4e5ee40c55a6b04adf5e77872e89562aa701101d249b178ac4ba1d71b40e237b7dee449ee362efb00e2aaed7eeeb172fd4a39234b59047a3478b519bef94415e0ed9c5dfbae7414e1f5ffd3a49435f8d467c8ab315acd394d052a503a031642d1302b8fbdf6b3952d4f9598208a1b04de445037d67e2235efa157d0a6bd3bf345bb3d48fe93418e499a93e16239f559f54bb6a81fb0821275a598e9a8a3dbbc966f1b8513c7b1330970fd53edd4f766145668bbe8b6df2f993895b10052e3e889c1a0f8a6c044def1a8e46215b0bed65485d0cc193f8e69be5b258324fd0550dc206180dbd60c3b11c93a15ad062a49ac2d7623fa3b2bf8805bc06533f3f5dfe9596b5b6cb378952ab9aa10f04d73415622a216f93d8d94714c2241de3f3d8064858821ba00b10c629bceccf5dfa7f1c28bf851e3c5b55ee040ebd68a020b82db59ab53106c144b8855d1cba9f4b32f336e361d048db77468e08df5e3cfd56347656cd73c9f5bf2dc12366ca3ba23130987c308dcf1ea29204cf7ba236610066777c596ba6c389a8314d5505b44461355539e11eac1152dac08e468cad6b3e68ecf88e709e3d445bea7eb9e0e1ea474eeb8e7bee7946303d496e37d5e58e85e6bc78efd5f643566b7ae3bd14f5cc9f6f8d6376a3e1a00d5a4f0d88b4d97bf887677d9caf1742220c37b3419cd25a3e7ddb6e06a6dfb3fabf4b982e0cf7708d64cdcebef6148b35e4523895f86ca4beca2e802cd839fe3214fe4d68faf1ae5ac6a1e6177eec900977c7eb5187900d95c6cb0a7d4a31ad97688c13b777bdca6a4cdf3c54b9986b53de7fbbee5be0c63dbec18dd6ef6bc94c18f8ce930e45755a81511befb677f82657a405900ee79328fe358673f20ee07f84e8df951ad85f1eae1edd1a14f0becfb1bcb2a76a8e4e90d40a09b10ffbed66d13482e9459af5a2700e1a189b06ed60723abec88fd00df885e576aca41d71d115ae90815a1246185a51a3895a5ab2980536a3f13f7695db692bbff657b71aa15181f8ed28e7b401fb2362f260d8fa85a7038d24ab542f1a4d43d2ff97b839697c65c64dccd98e24a56e93c04222f2e492ce21d70c5c6dd2d3ca598d4a640685c86dae499b26aa2d5be53e0a99dd86ee4ca3446ec306de13a323aea8ab77d22bef291f1da058e51b58cce3173baaf45fb4fc2d6e87d961642c24427cf76b58f3589b860e2d9b3ec5d2557743a126f41cf8b399de98e5798bbdab728a838f503f3b19c9227301c0997156b7a213fd1ea7a940d4aef214577c476ea4fb566f45acd4bf791b488b467b456fbf3ab7d040a6ec2e503d8990cce9d85370eb60777e34ef7b191c058d26416fdbb3ea7699dd9e9339145abdfd4376b0d782315879fc449cd4b24527a177fb53e6852b9c1b41c3d39ed6fda26c49ea563404809f722ad546354a1ad11793970746d2429dd5fc9554fa1ea62fb620dd0f33e9823989522f2e0006f6bc9ae1538f4cba2e848eba7200ac2ac23e67c61abbbf5ce2ec3aebe13e5a2cf9483ffe667b20bf5ec0ed99de63a26bbcf0fb9662f6c7d289f7eea4b4aa4d2a3a65f767c531fbe3399083a13c4591307e7bd25909f352814f7da058091a451b93d046403f2da3c3f1761499c707276a51b3819787657bd302d4c1958733bcf84c6bbc7fa45b83c25d93c2c2242c8faed5fb0ec8053cd346aea6811d599ebbc25f82feeb4d3af4432662599ed5d8f40b270499b52476f54ea5f85618618672ce2f321c1bf1958ef296211648ae014f7b1cd476314c055c9894278a8212f856881c97980fbaf8714da0878cd39d0f04fedaeadf0f187c7ef276600ea71243e47c78b876cf7b2eb3bd44dceb215766d1f2466d52764b7f4e4212e59f2f0cf3f89953aaf368c13d1db2bcbae7bf92e5cc7ed74d775a4ca94d205716f957164329f037957f1f3cd18a8715ace9d33782cb253796d3ca3b908a882d9d97086aaaf3dbcba526ffb5ee315d1b2d048ea5ad5fb4df99ae59e363db4b6e68493f88f126450ba9999cef5349920eacc8204a83602a8026cd20abc89d00b9c9ebb51bbfb29edc7039d39a5bb317e8d59a9e160c379a5a45fc8aa8f9ad7ec7b6b398d9efa1177f29c533267b2e9862a317fec1a25b21c0438a9862603989480667c31d6e7a6bc4a71bf177bcc597506567306e41499311ad6481e80d695dad1805c0c2182921046711207ef32f68680f3dad3a4b583e3975fbec8053b1e516bdd930be2c19171ae7e44ec932057adf2e266203aacaf63bc0f3ddbff6429e512ee5bc06c82fe650eee10f61927b90bd2c138fab1162d020eeb65c2f70ba0dc09ffe19013889c2e1d1782759874bb80dbb580a0916d5b61a336b40ba744a144a5518e5cdffd959fd1f9815d40422390c5c0227a32b5ce3350640fb93b626d28afd517dcb98ae9b90778d9352a7abd6903c6a28fbacf03119afc942c7eddc0394882da4b85b27cb6aa1853cb74cbd9ef5db4f7a9f005af3cb00c04c98a14f306c23399e317e9aa88d7dc22ff4e622971c0ac88bf0ac1d4f67d36f212e4a02743dd282c0cf2a03a8160f98b2bbdc5190c006b7db99b62351259d1c36967441d560bf289f33ad1987715691ed820e4547072d0688310ea835eb9018305425ca99a16ab0395b5932e68ed3cfadd63143e325dd0182cb0ac609d12ffef98be084f2f1ccd325d28f8eda8896bd328be32dfee9acc05680d32acf2f3447c3a7a8c95e9eaceb64fd01b029600d9c2d7ed82606ce3115aaca997eb1a77579e5bf22257a5005b3196acc1b9479b4267ccd1e3d3c7f73d1880097bde5316442c924dc30d9732845d4d3ef88bbd73fae7f31f94bf7319817d3521810076519fa699f93972c073e1bd76cc645659c649db0a0e1345edc3543832292a81ace5a9d6ef891e6dc6008c0e44ba34af9c0a0a70a7ce261ea4ad87098cc06c45eed129940ac695a1846739f90ca3bcea27aebd042b1c40da37977bdea418fcedacafceff44dbc978e4d6ff023f6ac796cdc07818fec1abc1aff089b1f7aa4ed4493f254b8bb3f8ef1fc2a9ec39bf42bca70e24f7decbb48ed012f790e702acec85084833d863cc843bcc2dc7f8299ea44b7148210f5ad22a88cc50fee0fc8f8ebe954ea5b24c1767835b4ee1b73fa7fcea08884db773ab3e2a663955e2bcc9c3b82301155ec872bfedb7d8dd3c089599fb7a98c9b506f953d95cc324eeaa8a5a2ee438069f37b0d954d497de4d32b710e26fe2ecf6ec2cca4880a66be03c8aa7b6cdc603167c6b4be5c2eb20f1cd12d39925ceef016a4687718ca31bc913bd464a889e36ef858e6f673777c29f4f4d22fff734e518c690750f495ee3f90252e9aa33b3769e401f479c7b216ef68dc375c578d2ce3da7053b49916fae0cf13fce03f4c28b0daef8ff9ec81c96a497e4d03532ba510940ccf4ff7b306377abf4551688d19e6f22e90a8ac2aceadbb8ab1401ee172054bcb84d071c24b0d8d2aced6d4cf44d736c046c3133cfe6a4842af87bfb902c18d67a59b553737b925390351fe9f8110bbfc2ca4af7a8867eeb9a725d140629c381a8614aa9cd40da6eb5989d3fe6d334319ce33ea803030509bd106af8b70ff411a82dcc762f4487d51dd19839fe3edf2933c1da93c23d08a1e5d233092592d4fa50333322eb6b2a6d9b75f9dd52512cd477ddca05e9f05ab19f7aca4570915674350178f8a4bcf4105fc3748faddede424960f8f0f6d5a06d68bcafe40ebd74a195fd1ae0b36398111f706b6f5fc2474c14cb3bd5afb46831a0dbc81e657a4933cdad9d25c1a95710edc3b15ed6c5179ef2516c29743d0724962c03c38d0cbabffd20a206a15103c8a647c3c0dd5bfc1e35ad13f61e641b90696abdd565f31f1f2da45ccae5b780f358642791471bd001c58a1c6f4fbd2ae510474344e1c6ecb03e92ed32888f991bc81f8aa557de9d9015e43d7861b56a6912f109d560f63e065c25af8f96f3ff84987bb5a9ae694c0b892b790b57d6742fd207da1077b5b28a576e3803e9a4e9d275ae05341e845b57aa3deb1bf01773cff786e092a707582628413a8d3ad8aae51bbe6ef24c1fd9075d99d610c6e1efab313223676c94bb0b1c81e19f5cd7023b051f7a75e71529effd7bcff611a520baf4b8a62a5e513c8dd38657eef168c81587eb646655550fd79324d514e850f8a433ddcaf633ff8ba813f19acb0d6d4f5a0e305fb73a1b4cca07999bc37597eed74e6bc0968f0b0301597f3e83a42b655b6e7d6f805073a2180ecc7c79518a5f75d38da6e1e2506cad06b5055cc2b7691f4a26c014d340f9c5cac9659a1d5448443fc9fd91c5ac9b55dd1cf062294a980746703e0e12d45232729d597f763b781a7d046755d5b74fc6653e8efc76fa3a1464f1e1c221836575549255e09a68908454d2c20b6de21603b8f4d7b85cca86295884b6d775eb38f50966f94d803fd257f576b71602403181252a0005555ec70d7cc96c21964bbdfecce725b3dc6588f80d4828a008bc1f7a13309eab613c02bc20ee95f88b7b25a46b9d8c31df4c1a67904220e4f7abd934d91c1d79c1dc715867b85d68c51231d5191cf28190bddab816be145e74beccd2c7127a4f270db8fe57b9db1068d65717cc8544de380c6d0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5682}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "e2567dbd98ea90556d9e3d758d6055d04eb1f58c6480e96028c37346403c9b7fe4c9eb2e4fc0a4311813cffd3a15df5a61ab70a7a212625ff447cf4c0a326debf2ce46bb187a28a9b1fca0d701d5e570aac4f68a2e8efd781240b73ae9eba5e87189bf457c8bdb6fdd4396195643aae147436370021e4e18b8cd12a0a614a949ab0da9f2b5cdf1b048b107d32a20350993dfbe6e933ea3f9b0524687e47f880823045bec9f87b6a4c9a29e5f0c324403174a73a2b90497ee184a617a35a024c5358a9c9867d025e15969"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "ce1581dea194a67ccce8fa6a959491e549f09e8f71838d8bac4eee3aaf6ecc226acdd0546bd3641d840eeb4724322bf047bf6ccb615cb6eea357cbe88a4e19af627f0313cb78328a1eafd2289c7f703e9ac4cf65fb49739dfc83a5643725167b2371260847cf33f4a56b20472b70073c487787d4032af17cb20432acea9b1914aa853f989d335510f1b0ad1675367c84025456d02f04d189fb9851fbca3a731c76ffaa68f4fcf030fa"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "e2d514298cf684a62120c775b78ee981579ca8b3d94c7036fb6f3b7cd7c7f1f9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "c61beff9fdd436ac34f63ea8a08f614e972abd5c46532970a544e3150499bc1daa229aad0e67c6c9155a90c41ee7c6971f7e58b764fc33bd914608ce238a6e921a69b09bdf363bb6f252acb4785d1dd32949518f0fe867646905bc1dbc45b55daa40efbd0cbef209c074eecf030f8a4376590cb4cd0a0378be56ec401470b2d89f63355f52f75e2f150bda3878da18b8f6555201a0e09739670344eb2fe6fa7427ac0400d6ec5cc82836192a168dbdc5f7d2861ffaf963396c5bf1c257f4e097ede985477b6a42dcb56ccd58c1342fcdbc089b109a79a5f1920a6bf33decb124b008044118dfa7084b6417e4c51a77c8"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x13, 0x5, "beb214051e7527fe2b58675b4f3314"}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x314, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x87-(-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef48}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':,-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'U}{-@/*[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x929}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "4975d6cbb5dd051d62510eda4ad49f41bc309b7ccf935f27cb35aa243ec1a9aa3716601f38b0c352d51caca4404778e3491228c78086786dd1954f22287026e2cde4d0a481c0d9a72cc54d7be79ce155b0de6d3ebf0fa03e070013cc3245009b37d510c67cceed10d5890ffa9f9ccdb621c3f3eafada19d260ee6d5c2c8698fc183eeabdb729841a7f34db123c832c10dfb0abee54cb8ab37003b05394531f419307f39cfc701b68420e5e"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\x9d}P^-((-,%+\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "8cb23ddcc9b1e0b324ea1d969cea308975c3d95c9557e9f90ae6c53228634b4d7bc7215c346e0c03f152de928daafc7fa209ced2d9da9de0c29efa495a083b3abcca2a0fdea81b0b812624a6226339c79e9d4ae3de8e8e414823addf70e548d0eefcbab8282cef728a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "3927da98e51033260f34cd538dd89646769d1b3d8055a86f4690b7bd9ca6955caf6cf30b669ee051277cd1a12784c8312d91fb8f108b0ff2b17840fadfa8a40d8fc866ec5dc186133ffe5e50efb548c7aa599d1018edea87191cc9dd678d07c801cf8c2d80fb83c1ffe8eef497210cedbb038af4c2dd0a0aced33951bf5c3d24a2078ff36eed31fefe7050b83b1d79ff000ab2da433eb1d9b3940ac09a566173fd92495cea6517265718893b0296a808ab25cd323c2f7d927b635831443589d2de62b41b9da49b1c6fc0ef96ccc597badc705b37c76468c154c6424dc965d3340640"}, @ETHTOOL_A_BITSET_VALUE={0x4f, 0x4, "caad2993897ce20dd2d71de22038dc230d3e4ec01cc8ece2a5a20da5f3f3111cb6af77d05897d03455e82cae0babdb714c4dbf642f04c7b3f42a7f4641fe0f46cc6f38a5fcece2e5d15a2d"}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x1aa8}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080003000000f58fa2b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.602799415s ago: executing program 7 (id=8652): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000110001008e44b77dde728a29bd7000fedbdf25000000008573b4a02aefea0cb2df9e6c7007875e3062877c89c89085d8f34312ba58c659638188a8f15ace79c32cbeb3ff0441deef66e47f7f49ef053ddd416d80be37", @ANYRES32=0x0, @ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x810) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000009c0)=0x10000, 0x4) bind$inet(r4, &(0x7f0000000780)={0x2, 0x4e23, @multicast1}, 0x10) splice(r4, &(0x7f0000000500), r2, &(0x7f0000000740)=0x9, 0x8000000000000001, 0x8) sendto$inet(r4, 0x0, 0x0, 0xffd, &(0x7f00000007c0)={0x2, 0x24e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000800)=0x1b32, 0x4) sendto$inet(r4, &(0x7f0000000840)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x8201}], 0x1, 0x40002121, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000540)={0x8}, 0x10) write(r5, &(0x7f0000000580)="2400dbe59be32a0086f70214ffffe9ffffebf8070000b808001d", 0x1a) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x3, {0x2, 0xf0, 0x2}}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES8=r4], 0xac}, 0x1, 0x0, 0x0, 0x6c000}, 0x4800) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYRESHEX=r2], 0xa0}}, 0x4040044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r7, @ANYRES64=r2, @ANYBLOB="cf0401000000fcffffff1300000008000300", @ANYRESOCT, @ANYRESDEC=r6], 0x40}, 0x1, 0x0, 0x0, 0x404c004}, 0x40010) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)="5800000000dc", 0x6}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) 2.4833602s ago: executing program 1 (id=8653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1a, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r3, r3, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x20}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000000), 0x492492492492627, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008005) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000700)={r9, 0xff}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000740)=@sack_info={r9, 0x8, 0x8}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b000100697036677265"], 0x4c}}, 0x0) 1.685694934s ago: executing program 7 (id=8654): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r2, &(0x7f0000000300), 0x4000000000001f2, 0xfc) (async) sendmmsg(r2, &(0x7f0000000300), 0x4000000000001f2, 0xfc) sendmsg$nl_route_sched(r0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000480)=@delchain={0x7f8, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0x9}, {0x4, 0x8}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3d, 0x8}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @random="aa1c114d10f1"}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x4}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x3}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x1f, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x10, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x764, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_CGROUP_ACT={0x50c, 0x1, [@m_skbedit={0x120, 0x13, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffd}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xe}]}, {0xbc, 0x6, "efa8c7b0ef5d39241006c1e73621e63247657a6b8a7b12460ba489b98da0608673138a5aa7008f743a10689196b1c22dbd258712f9f73f4b255e947ae6c5d1182ce2923b45a7f3a21bc7cf1dce2da5040264d435de87e7592f5d0e2e623fe009d13612cf4983b49ea9ca93894e9bb2dacf4feb97a696c443a2a282c5fcee70047d9602889b3add262f3eb6c43f4e69a64655e7543cbb3ae9de0cfa9ac30fb6e6420fa8ddb4c2d0c0c1d880c09ea4493a955a0e38d462082e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x108, 0x8, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x15}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf7c48}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbd2d5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x3, 0x7fff, 0xe}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x8f, 0x6, "971b7f8efd1938ae25ee61f18b4147a66a5e4bf674f64423b79672da835ab5339cdc24bd9d912c4962003f4b15cc68acc6a54ed4e71d6d244024bf144f0ed317a7e6b9503eeed4f2c2c2c3f5e6646d68f0aa3dff7473cf7fb2d639c0a00bd55e6d0d0ca0a653fac50fe1b261ed451f212f6763c6fa2c9c68e596f5d51bbaa2355657d1dbbd93b6f7e00d5b"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x148, 0x15, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x3, 0x8, 0xf9, 0x8}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x110, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x881e8ddf, 0xfff, 0x0, 0x0, 0x7}, 0x4}}]}, {0xc4, 0x6, "e9ee89c16bc0af61c665c332bbb6f6ce15d45a5bfc71b8e983087976b24d4abdb8a2a436e7928cfce1b09c3939aea304c11253e8a7774ad49e6ccbc503856c9c88866e2f4ff9f3242bc1384b9056e1063276a92e5de071bc29e52d7924596939fcd51129355e5eb6f734deaec4389a67cea8b128dca5a48c2492de8618a696b988541879c21afe4c8f5e398970fb70109047648c34fe7b262e760f5992f0aa8f6c296c1e5076de7892c176319190c4a5dd3b54f3e536ef015a45e7216091c371"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x88, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffb}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0xd2, 0x3, 0x6, 0xfffffff7}}]}, {0x2a, 0x6, "4258f7d7bf4be06d907dc12b4220bc7f8179366908c02bbe5b135f23c23fb0af57ffe06ee074"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_ACT={0x238, 0x1, [@m_ct={0x8c, 0x12, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}]}, {0x50, 0x6, "55b49ac0f0b2ed8429e791890b4c74cb37f0bd7066c7c05c7a76cd1997702737e5e79234ab6055427778f6c244fd5de81f16bfc0e2b5296a9ae062d1b4d84627ad6718b7a19e29cf72541e96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x7c, 0xb, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0x3, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x7, 0x10000000, 0x6, 0x26c630ee}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x195a, 0x7}}]}, {0x12, 0x6, "8589a573e113b6d73cf549744206"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x12c, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x2, 0x4, 0x1}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8f88, 0xfffffff7, 0x0, 0x6, 0x1405}, 0x6d}}]}, {0xc8, 0x6, "698d8b399b1633c8cd9fdecbe70e40a30e2bf45bbabe10d09a8813bde493e04e8d4ce40e2727b584c7859e501ec4b1d7880d84089bda146fd5a851692a6963729fbf8ec23c66c99bf9012243d5e74b50c889d45875ceb45d24e1c71c4f57766e9385e9ab80b164e9f38133fdc23224425f18b093ccb5a008775c713adaed303a9b6d293785b95904253c82a9e60561f0e4cd81fc78b564d386f40739d309b9e31510f18625ffde5985ab711a191cfa0263138324b45d3d8f6c79e12fc1c3ce5f6926f1d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xf8}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x48c1}, 0x40) 1.538753554s ago: executing program 0 (id=8655): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x9, @private0, 0x96}}, 0xf458, 0x5, 0x12, 0x1, 0x3}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={r2, @in={{0x2, 0xe, @empty}}}, &(0x7f00000004c0)=0x84) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000ac0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_int(r1, &(0x7f0000000280)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0xffe0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000e4ff8400000000000002000000000000000000000200000003000b00fe7fffffff00000000000000000000000000ba9e2ab20395ae063d19835b785123dd9f0a67ec6b8871f35ff87cc010ab2c9d2b15de349ff06baba713a500faa09e85ae66364660cad9fcdf1a34d45e8edc8fb59145bef379ccb9aa5fc4d2a91f5adb79c80a27fe3d72dc76a0af040733f99d1ae81afc33726a3ad35158432790ec8c0ed870c86a7683cdae6ece34990574a997a801d4f1cc10d65148aba677027bc4e0ea7c9bc62f9b8a8310", @ANYRES32=0x0], 0x38, 0x4014}, 0x2c0408d0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000005c0)={r0, &(0x7f00000002c0)='GPL\x00', 0x0, &(0x7f0000000500)={@align=0xdea, {0x5, 0x6, 0x204000, 0x7fffffff}}, 0x8001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x5}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x1f8, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000600), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff, 0xff], 'pim6reg0\x00', 'dvmrp1\x00', {}, {0xff}, 0x67, 0x0, 0x0, 0x50}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x1}, {0x4, 0x6, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x368, 0x810, 0x8}}, @common=@frag={{0x30}, {[0x7f, 0x3], 0x3, 0x8, 0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff], 'vlan0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x33, 0x8, 0x0, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0x8, "f769", 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="bf160000000000002000000000000000c63496f525b2001f055bbc76fb0f0600003ad6eeadbd"], &(0x7f0000001100)='GPL\x00', 0x2, 0x1000, &(0x7f0000001140)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.406906924s ago: executing program 1 (id=8656): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000700), &(0x7f0000000780), 0x8, 0x26, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0xc044054) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff00"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0x10, 0x1, 0x1, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@fallback, r5, 0x0, 0x2000, 0x0, @value, @void, @void, @void, r7}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r10) sendmsg$NL80211_CMD_GET_REG(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="150326bd910000cec339c957f171"], 0x14}}, 0x20004804) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000fffffffffffffff800000000000000"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x1c, &(0x7f0000000880)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.212525483s ago: executing program 9 (id=8657): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 1.058408265s ago: executing program 7 (id=8658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32], &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000140)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x5}, 0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0xa4e4, @empty, 0x3}, 0x1c) shutdown(r1, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x800}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32], &(0x7f00000005c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100}, 0x94) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x400000001, 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000140)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x5}, 0x8) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0xa4e4, @empty, 0x3}, 0x1c) (async) shutdown(r1, 0x1) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x800}) (async) 844.063288ms ago: executing program 0 (id=8659): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 282.322464ms ago: executing program 9 (id=8660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x2, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000002200)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) 46.408497ms ago: executing program 7 (id=8661): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="7d50681f32e6ce64b33d53a8d29d167ea10d4959a5b513d3795adb6139edfd0dd7e932904d20ab78f1a122ed82d635d7a55f19c9baaf5cbc4c353ac65115b495ab74a619fc83daeaf175c1e19b9beda4cd7cb096a9501c46fcefbe03a5ad1fbd1263a800ee9f55076b6fd9bb7eaf825ab5dcafb3d133f8fafda7aa3beb", 0x7d}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f00000002c0)="c45cc7a1dccf7105000000000000004fe2a546c86cf7a8f2d781a366f7fa1d", 0x1f}, {0x0}], 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="e0000000000000001401000003000000189a844c87f8a0db269f972f0165c31b1468f8ed5db601b2fa205211b7240851c41d2f3dd21344a062f32d7735a8c11a841a88ade828d56ceb47d6504f398498108223ef74edf9a9f8992346cbdc52ba674bdde1c1c2c2881f8355045abe549cb71577df793f41f9874ad622315889acc563dd72d4183e9cb24b29d93aacd8bdc3ac0d9810098d95d8b4a62989aff33cd1d50a158b92104091aeb00dd6ea841636a2000d58552e8cf1d9c812cd5af284537af13823d43dd36d6207b424a571047f8b04f9f8fb1887ef0000000000000070000000000000000d01000003000000c0da39956262538eebf17d3d59faf5ffc1ac1e459897896b6f3a0e1b666229aad0c14fe8d19e4b01ed3d3e4e66b1034289fd1512e67201c0f72bdea073f9e4583cebabcb5ff7ba06100cb00eb6fc9b1de0678dea81361516c8c201aab48ae70048000000000000003902000009000000feba257fec61d4ca8cca69dbc022c1ff12867074e030c91341cb1c10cd7a934a11d911df7666a48043e94ea4b46830c7a581000000000000080100000000000004010000060000006a6fe0d64f1a9593d504ca42c6cb5bd30ca0fabe9d2467f6521e269418ba77d8ddfbc1568423952804445a3a32c783929b1c2de8f24557694ed61f1ce411d7b5a7c889b18b004f584b04037f2c7bd4537ceee452d4c68ffac60beb1c83aaf7cebf4ebfe8c113d095c1c55a2ceb765295fc251ccdc9633d7694d320b165e2f59eb05e3dbd5abc33d8dc8d6e3ada32080eb6ac098e44d1df21d9b75edf7f2b488d0d9dcb989a0f8942604c31fb7bb6ea7e777d69eb1d74fd798b25e7dec40a6ba560105e78462b19bc01a6c112e211e0fc2bf60c4e60c8d3bf0339e9cd6a68f10973f02326c32d9bd96ccd8d8014f4c63d62df31b752629d00e80000000000000002010000070000002c9dd988bf0517585afd5f686ac058cebabe195be82a17b7c579b83b6fc4f4f7536cd610588bb3d433e0e957a1dafa2de25580aa21dbab9fe3be9a7c2c4ecd69bd4d86729f0aba47c1aa385a80c422df8002358a48c3fb66e4140d0dc25389f9a578934510986504db967e2cc43ba67fcc24aa6cd8497295cf1daf5a78682c5e0ff276bf4db7b868cdf6f4ef384f57a56482e22e5f3cbfddd686695362225297cfde07f52d3c0d8199919774e28d9b1bf98f49d5f4097f4122f95040134d73eae7b7770783d626245ce637c796a9b6a74e000000000000007800000000000000140100000b00000083e2bd2222eaefd4c1b8183f259499ca5fac0f83fcd435792a37f64d351b6a952adb532ba1336206ed85102e4ce2383065db42832c0e99f0c390dfa381bb494d7d370175edbdd4806717798b8f0682a54b8416b8527f5d81cd6ce39e4721b573b1a775c12c00000038000000000000000a01000009000000b2cd852702186cb515426cb14ceadbe1505da68acb449c4ee5c793a9499806b48100000000000000f80000000000000002000000090000000ba759fa85b9ab6cc67e082dd73a8fc7b066bccef59b6f771ea5c0e1576d49db1c97e3bfbb8b832848b1d15514a258bc16bea75f8079aaf80c11eda4d6c6eca0fb723ab3adc437a0b664cd2a4aa82e0dc44e85a7406b516359fa6e73aebf7439df16acf85a3a39711e5b157bb11486a6797ec9f7eb10064afb29e5d00da22fd3730eb30d86c910cddebc13cec546e84fd9b23a7a37945e78e9624b9c5c8db396ca746e4461dc1e6315c750149fcafbf7c1cdc9a9ada031768a877cc5ab74c196126a85c6d1ffc739c0445cc9e8cc7622649f56a6781e6cd8ee627539b1af44ba0f04000000000000"], 0x530}}, {{&(0x7f0000000300)=@xdp={0x2c, 0x8, 0x0, 0x39}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000380)="ba39b2af65458ad0ee485570a5db1580a545146c7548ff8dd519044462b35c0bd32a4d7baea1594ed4b7c7f2e8b33f7a821d63ba202fe55854afa5c4e033a9405021289cb19e4145c2cfa792bfbd6b70f43151b4468af30880440830f101ac9512da05609bece9c4cf1b8a382f40b2a19b0f7d666f2999d43a78ab1fe3c86b0d7e795a29e60cc9bfb23de9965c6498c901fa51827329a3f363b66b92fd5310c7c8f476b9075f99", 0xa7}, {&(0x7f0000000540)="469a4360e4e7975a3160dcbbed4ea0b593b78d12a81af3127d7565952a14e3840cf91b62ee7418ac3a6f54625f8ff8170321aa5371f7fb1a54a5c2f8b2c0fdf117ceb3fa6579f5938c9b575e81279d21b0554ebcf8ced0976ac9e279983ae2b4549f3acca8956c061298c9df83f2077f6cb2a0b9feceaf3d44b05bca8bfd376ddc7bd37ea9fc1c004d6ca0378eb42972961054634e6413ab6cc470084ec1ca87085d90c6e30edac215880dbb57906a6dc0efa5c732382ef7b438169e6fe933de23", 0xc1}, {&(0x7f0000000640)="5d10d25831cc26a3e7f7e8cd3d7a8d610a016975ebd8183b4bea6d99e3ac5fca6b249502e89cb532fc36b28d11c5c2586503dc700677835e171c871749ae038a658b7240c968801f84fd44d637477e6695a4c300431ded6ec5e2e5ec0f51dcff25249954a089fd30332cf43d24fb6108added6bf26615779ca9015fc9f6c6463367701fac25514bb7d9b321225157e74c4ce8e66bfd14d4e1a58fc81b4072e8a757e8794f4316bbf48098b7b479db683fdc5e44eab596f35d62ce4df00101898b41c02758c4cfe5c362133fb5a28eeda22bfe8a96a56e9c9f2f95c33f44226d2d5aa0e15e8e768abc4e6611b", 0xec}, {&(0x7f0000000740)="9e6d9e488c727bce988c45d8c0dd65caba48d87d43642a81162c450338238652bdf7313b1fd4e06e7ff2bbafafbf252dccdb8c1ecc300c08fe94a099135ec3e0080bbb46be9e993af778be055a20d0822dc959342d244d02776698608f483ab0b01f776677a064546ae35418ce0e6788310730b44167b2478743005b910cf319470da39ef37e8796c7efe66aded3805ffad2afd828429a8bfb6c2e47818e9dbf742bff6b78b4cab5ae9c545d78ac6975635c5b29c0c69c", 0xb7}, {&(0x7f0000001840)="ba0d8f384219d6a46990050959c795d42b8e977462ffa5f816721fbe00bbcfc5cf43e800ab648990af36561b4f44b11c33134ac90e23545318527445c2b46af08f1a0d8942fe1fa0a54278dfcb6001e5a69ab5bb65905f33daa45b253c5b518b93c545727e1fc989f815c2f3c0f50c1363b2dfb3f604fcba1431888c7417fc331b2e46c014897b31ee388b91a11457bf5e28a270ee89c316e57e5c46", 0x9c}, {&(0x7f0000001900)="87e32cc649c598b565f851e9663beb71619a76842da9260ec0f1d09843c6073b62cb2155489bc9923270a6a01a7fee9271b1993e3e6bbd856ca3a6868f33b992fda2737ba395d9c4fdae1fdf9fc5f8a218f345902f922724009d3f34e034e939abe02b95c02bcf0b08205b6cddb40a521e82a71de114413efb3ebd318e078afac2c868b293d66bad83ced698801679865fdb", 0x92}], 0x6, &(0x7f0000002080)=[{0x20, 0x107, 0x6, "c24c4f4639604782e723"}, {0x20, 0x10e, 0x2, "cf14b8cc749d283a37aa4a8ba90b7021"}, {0x1010, 0x112, 0x4, "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"}, {0xb0, 0x10d, 0x4d9e, "295b59293648322dbb3190313d8560f09fdd24c766316e11f09579b42cd2682d92f1e669adb557b6774ab81d45d938ef6beb2e98ef0308fd085c06381511bdca8ce04bf2f63552399f0ca952ea76f351d1411c06cbbc6c3fbfae48bd909e81356a9e665c74bd574f7161e190a574927b05cc45d9a26318a2a93331bb35e7a582d49f05837f21c87ad41b6bb870dafe3c3ffcfd91edefadfc67ac232e8685"}, {0xf8, 0x116, 0x80000000, "3d158185aa8cad3d7ee9cc06641e5d6d3dfc5692770f3299aef454dfbba743c8eb5c251389de95ba249eb9a1c6ddbe29240340470556b0e67109344b6025cc683e0276544c8b00da1d4ecd677d5ff843d0cbe095f087d739384bd58b328e50ff3a5f468e4818ee9cfd2607d8ea683a806fc4c57bf93a930e812ee1bb172847c8d519b140a11380db92df088530f628a4c7ec81fa7df0042a023c3253cea201c84fe8e86fa65f99ad55f7d7cb782c0ed1d5c2171d5daadb6ca0214de173135af3a1c114ea4fe1d07c19894ae4a3557b60bf78ae918297e900915f0108f86a5bec91e3e6"}, {0xb8, 0x0, 0x6, "707dd22f00bcb08216ea45d06ea31377b4fd305daa34b51a684c51addb104263f3b23e457696ee28a40a6715ac5583d1d8cfe16440f29d6ea52ce5b198509709c7d4e7eb8729129f51a70855bc397e90fff19084815961e7b078a4ba2a46202fbec260552699b9b73369315b18dd29485dc061e0d6ec4ba8c4b7c74ad045d133f349fb117e3e472d221f7f2439f36968bd05ec07efd80009f0c38720bb231fdfb1e7a493d5e7f9b0"}, {0xf8, 0x104, 0xd, "ca13094e503e67e1250c1cef5ce663a4fd771cda390dd0baf2d78b4009f8345d9f021347780dfd8700330752bcf363a9d4a8ce947c17e1d2b7e5c63fa19b1a9f337e0451e681ed82189980630a0500c76125a7f5a32336c0c4948480faa91ddfd852a7277568bb86ed756ecfe4f4bcdea567c5539b9eb6f013378400ba4223a026063b62ba200f345b86f8e6ea7a791596fc278514270185b71bcfb8d142a803574099ed9e8de605524e266d3efc593ca7afe0e71f313e4fae25119175a87b44923b1b3e61c0166ed901aa30ad7b1dce1ed242dd1fd3ea60f9c599b0ef9a8dc4fcda"}], 0x13a8}}], 0x2, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000003600)=0x4c5, 0x4) 0s ago: executing program 0 (id=8662): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f00000009c0)={'wlan0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) write(r2, &(0x7f0000000280)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x1, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40887}, 0x20000000) sendmsg$nl_route_sched(r6, 0x0, 0x14) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x880) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) getsockname$packet(r8, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$inet(r7, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) socket$inet6_udp(0xa, 0x2, 0x0) connect$packet(r3, &(0x7f00000002c0)={0x11, 0x4, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, 0x14) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local}) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000700)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): ff1ca7f718 [ 1389.630091][T30049] [ 1390.155961][T16688] net_ratelimit: 120 callbacks suppressed [ 1390.155988][T16688] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1390.384942][T30060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1390.384979][T30060] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1390.568155][T16738] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1390.582151][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1390.582186][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1390.582208][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1390.582229][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1390.715825][T25341] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1391.087756][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1391.087793][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1391.087816][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1391.229023][T30064] syzkaller0: entered promiscuous mode [ 1391.229052][T30064] syzkaller0: entered allmulticast mode [ 1393.130936][T30113] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7754'. [ 1395.195828][T16738] net_ratelimit: 30 callbacks suppressed [ 1395.195853][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1395.195879][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1395.195902][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1395.195923][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1395.709812][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1395.709851][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1395.709874][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1395.709896][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1396.220951][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1396.220992][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1399.061236][T30120] netlink: 'syz.2.7756': attribute type 1 has an invalid length. [ 1399.459576][T30122] bond7: (slave bridge2): making interface the new active one [ 1399.500872][T30122] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1400.287682][T25345] net_ratelimit: 39 callbacks suppressed [ 1400.287709][T25345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.311079][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1400.311116][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1400.311136][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1400.311154][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1400.392579][T30154] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1400.405719][T25341] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.442933][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7771'. [ 1400.518855][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.627712][T25335] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.721024][T30146] sctp: [Deprecated]: syz.3.7767 (pid 30146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1400.721024][T30146] Use struct sctp_sack_info instead [ 1400.745236][T25341] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1400.813843][T30165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7773'. [ 1400.834241][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1401.562102][T30178] netlink: 'syz.3.7779': attribute type 1 has an invalid length. [ 1401.681274][T30180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7780'. [ 1401.918956][T30186] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1401.921586][T30186] bond6 (unregistering): Released all slaves [ 1402.100127][T30201] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 1402.511602][T30209] Cannot find del_set index 2 as target [ 1403.799801][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7797'. [ 1404.490266][T30251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7802'. [ 1404.490305][T30251] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7802'. [ 1404.883484][T30259] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1404.900790][T30259] bond3 (unregistering): Released all slaves [ 1405.316087][ T12] net_ratelimit: 65 callbacks suppressed [ 1405.316114][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.432238][T25335] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.448355][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1405.448388][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1405.448411][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1405.448432][T25335] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1405.536435][T16735] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.650761][T16735] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.758689][T25341] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1405.815015][T30277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7812'. [ 1405.868322][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1407.069406][T30308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7823'. [ 1407.883070][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7830'. [ 1407.883109][T30330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7830'. [ 1408.070918][T30335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7833'. [ 1408.434525][T30335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7833'. [ 1408.756272][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1409.271341][T30360] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1409.296596][T30360] bond4 (unregistering): Released all slaves [ 1410.192555][T30393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7856'. [ 1410.359284][T30396] Cannot find del_set index 2 as target [ 1410.385452][T25335] net_ratelimit: 123 callbacks suppressed [ 1410.385480][T25335] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.411366][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1410.411400][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1410.411422][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1410.411443][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1410.506327][T23105] IPVS: ip_vs_send_async error -101 [ 1410.508364][T25335] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.564272][T30402] netlink: zone id is out of range [ 1410.564290][T30402] netlink: zone id is out of range [ 1410.564299][T30402] netlink: zone id is out of range [ 1410.564308][T30402] netlink: zone id is out of range [ 1411.018195][T30411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7864'. [ 1412.032882][T30439] Cannot find del_set index 2 as target [ 1412.443693][T30445] syzkaller1: entered promiscuous mode [ 1412.443718][T30445] syzkaller1: entered allmulticast mode [ 1412.731039][T30455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7879'. [ 1413.282634][T30469] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1413.284546][T30469] bond8 (unregistering): Released all slaves [ 1414.222823][T30492] mac80211_hwsim hwsim37 syzkaller0: default FDB implementation only supports local addresses [ 1415.416062][T25335] net_ratelimit: 240 callbacks suppressed [ 1415.416086][T25335] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1415.526652][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1415.639446][T22634] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1415.740846][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1415.740884][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1415.740907][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1415.740928][T16733] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1415.761687][T16738] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1415.868416][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1415.977068][T25345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1416.328656][T30534] FAULT_INJECTION: forcing a failure. [ 1416.328656][T30534] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.328692][T30534] CPU: 0 UID: 0 PID: 30534 Comm: syz.4.7906 Not tainted syzkaller #0 PREEMPT(full) [ 1416.328716][T30534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1416.328729][T30534] Call Trace: [ 1416.328738][T30534] [ 1416.328748][T30534] dump_stack_lvl+0xe8/0x150 [ 1416.328784][T30534] should_fail_ex+0x410/0x560 [ 1416.328820][T30534] should_failslab+0xa8/0x100 [ 1416.328861][T30534] __kmalloc_noprof+0xf9/0x710 [ 1416.328888][T30534] ? bpf_test_init+0x9f/0x150 [ 1416.328912][T30534] ? bpf_test_init+0x9f/0x150 [ 1416.328944][T30534] bpf_test_init+0x9f/0x150 [ 1416.328973][T30534] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1416.329018][T30534] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1416.329049][T30534] ? __fget_files+0x2a/0x420 [ 1416.329078][T30534] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1416.329106][T30534] bpf_prog_test_run+0x2c5/0x340 [ 1416.329139][T30534] __sys_bpf+0xa22/0xd90 [ 1416.329175][T30534] ? __pfx___sys_bpf+0x10/0x10 [ 1416.329214][T30534] ? __fget_files+0x2a/0x420 [ 1416.329255][T30534] ? ksys_write+0x242/0x270 [ 1416.329283][T30534] ? __pfx_ksys_write+0x10/0x10 [ 1416.329313][T30534] __x64_sys_bpf+0xba/0xd0 [ 1416.329341][T30534] do_syscall_64+0x166/0x520 [ 1416.329362][T30534] ? trace_irq_disable+0x3b/0x140 [ 1416.329385][T30534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.329405][T30534] ? clear_bhb_loop+0x70/0xc0 [ 1416.329431][T30534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.329451][T30534] RIP: 0033:0x7f7cf879f559 [ 1416.329472][T30534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.329490][T30534] RSP: 002b:00007f7cf96b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1416.329514][T30534] RAX: ffffffffffffffda RBX: 00007f7cf8a25fa0 RCX: 00007f7cf879f559 [ 1416.329529][T30534] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1416.329543][T30534] RBP: 00007f7cf96b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.329556][T30534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.329573][T30534] R13: 00007f7cf8a26038 R14: 00007f7cf8a25fa0 R15: 00007ffdf9104f38 [ 1416.329608][T30534] [ 1417.152704][T30544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7911'. [ 1417.359182][T30549] netlink: 'syz.4.7911': attribute type 1 has an invalid length. [ 1417.401015][T30549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7911'. [ 1417.492167][T30552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7913'. [ 1417.617919][T30553] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1417.661354][T30553] bond6 (unregistering): Released all slaves [ 1418.164962][T30570] netlink: 'syz.1.7917': attribute type 1 has an invalid length. [ 1418.529799][T30570] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1418.712614][T30573] bond11: (slave geneve3): making interface the new active one [ 1418.800778][T30573] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 1418.818393][T16735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.825022][T25345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.825370][T25345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.848684][T16733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.473026][T30596] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.7924'. [ 1419.751943][T30601] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1419.802057][T30601] bond8 (unregistering): Released all slaves [ 1420.368723][T30620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7935'. [ 1420.395158][T30619] FAULT_INJECTION: forcing a failure. [ 1420.395158][T30619] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.395199][T30619] CPU: 0 UID: 0 PID: 30619 Comm: syz.3.7934 Not tainted syzkaller #0 PREEMPT(full) [ 1420.395222][T30619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1420.395235][T30619] Call Trace: [ 1420.395244][T30619] [ 1420.395253][T30619] dump_stack_lvl+0xe8/0x150 [ 1420.395290][T30619] should_fail_ex+0x410/0x560 [ 1420.395326][T30619] should_failslab+0xa8/0x100 [ 1420.395359][T30619] __kmalloc_noprof+0xf9/0x710 [ 1420.395385][T30619] ? bpf_prog_test_run_sk_lookup+0x4b6/0xbb0 [ 1420.395417][T30619] ? bpf_prog_test_run_sk_lookup+0x4b6/0xbb0 [ 1420.395450][T30619] bpf_prog_test_run_sk_lookup+0x4b6/0xbb0 [ 1420.395499][T30619] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1420.395531][T30619] ? __fget_files+0x2a/0x420 [ 1420.395561][T30619] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1420.395590][T30619] bpf_prog_test_run+0x2c5/0x340 [ 1420.395623][T30619] __sys_bpf+0xa22/0xd90 [ 1420.395659][T30619] ? __pfx___sys_bpf+0x10/0x10 [ 1420.395698][T30619] ? __fget_files+0x2a/0x420 [ 1420.395754][T30619] ? rcu_is_watching+0x16/0xb0 [ 1420.395789][T30619] __x64_sys_bpf+0xba/0xd0 [ 1420.395817][T30619] do_syscall_64+0x166/0x520 [ 1420.395837][T30619] ? trace_irq_disable+0x3b/0x140 [ 1420.395860][T30619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.395881][T30619] ? clear_bhb_loop+0x70/0xc0 [ 1420.395907][T30619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.395927][T30619] RIP: 0033:0x7f33f019f559 [ 1420.395947][T30619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.395966][T30619] RSP: 002b:00007f33f106d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1420.395991][T30619] RAX: ffffffffffffffda RBX: 00007f33f0425fa0 RCX: 00007f33f019f559 [ 1420.396005][T30619] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1420.396020][T30619] RBP: 00007f33f106d090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.396033][T30619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.396046][T30619] R13: 00007f33f0426038 R14: 00007f33f0425fa0 R15: 00007ffc845bef18 [ 1420.396081][T30619] [ 1420.576969][T16738] net_ratelimit: 62 callbacks suppressed [ 1420.576989][T16738] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1420.718745][T25345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1420.742357][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7936'. [ 1420.877845][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1420.877884][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1420.877906][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1420.877927][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1421.047753][T30627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7936'. [ 1421.205812][T16688] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1421.431708][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1421.431745][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1421.431767][T16738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1421.906586][T30646] netlink: 3784 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1423.319122][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.611449][T30690] Cannot find del_set index 2 as target [ 1424.868575][T30710] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.868615][T30710] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.095103][T30710] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.095143][T30710] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.611905][T30725] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1425.644094][T30725] bond12 (unregistering): Released all slaves [ 1425.910285][T30745] FAULT_INJECTION: forcing a failure. [ 1425.910285][T30745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.910326][T30745] CPU: 0 UID: 0 PID: 30745 Comm: syz.2.7973 Not tainted syzkaller #0 PREEMPT(full) [ 1425.910350][T30745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1425.910363][T30745] Call Trace: [ 1425.910372][T30745] [ 1425.910382][T30745] dump_stack_lvl+0xe8/0x150 [ 1425.910423][T30745] should_fail_ex+0x410/0x560 [ 1425.910458][T30745] _copy_to_user+0x31/0xb0 [ 1425.910491][T30745] bpf_test_finish+0x52e/0x690 [ 1425.910522][T30745] ? ktime_get+0x45/0x220 [ 1425.910549][T30745] ? __pfx_bpf_test_finish+0x10/0x10 [ 1425.910579][T30745] ? bpf_test_timer_leave+0xbe/0x290 [ 1425.910607][T30745] ? preempt_count_add+0x6a/0x140 [ 1425.910641][T30745] bpf_prog_test_run_sk_lookup+0x94f/0xbb0 [ 1425.910679][T30745] ? irqentry_exit+0x2a0/0x9b0 [ 1425.910701][T30745] ? lockdep_hardirqs_on+0x7b/0x110 [ 1425.910735][T30745] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1425.910776][T30745] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1425.910804][T30745] bpf_prog_test_run+0x2c5/0x340 [ 1425.910836][T30745] __sys_bpf+0xa22/0xd90 [ 1425.910873][T30745] ? __pfx___sys_bpf+0x10/0x10 [ 1425.910912][T30745] ? __fget_files+0x2a/0x420 [ 1425.910954][T30745] ? ksys_write+0x242/0x270 [ 1425.910981][T30745] ? __pfx_ksys_write+0x10/0x10 [ 1425.911011][T30745] __x64_sys_bpf+0xba/0xd0 [ 1425.911039][T30745] do_syscall_64+0x166/0x520 [ 1425.911059][T30745] ? trace_irq_disable+0x3b/0x140 [ 1425.911082][T30745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.911103][T30745] ? clear_bhb_loop+0x70/0xc0 [ 1425.911129][T30745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.911149][T30745] RIP: 0033:0x7fd32ef9f559 [ 1425.911170][T30745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.911188][T30745] RSP: 002b:00007fd32fe1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1425.911211][T30745] RAX: ffffffffffffffda RBX: 00007fd32f225fa0 RCX: 00007fd32ef9f559 [ 1425.911226][T30745] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1425.911240][T30745] RBP: 00007fd32fe1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.911253][T30745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.911265][T30745] R13: 00007fd32f226038 R14: 00007fd32f225fa0 R15: 00007fff84b790a8 [ 1425.911300][T30745] [ 1426.230802][ T62] net_ratelimit: 61 callbacks suppressed [ 1426.230825][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1426.230850][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1426.230871][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1426.230901][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1426.617148][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1426.739617][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1426.739656][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1426.739678][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1426.739699][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1426.869566][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.191150][T30710] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1427.191190][T30710] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.378080][T30764] netlink: 'syz.2.7975': attribute type 1 has an invalid length. [ 1427.624408][T30767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1427.778784][T30741] syzkaller0: entered promiscuous mode [ 1427.778813][T30741] syzkaller0: entered allmulticast mode [ 1431.339194][ T194] net_ratelimit: 34 callbacks suppressed [ 1431.339219][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1431.339245][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1431.339264][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1431.339284][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1431.846421][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1431.846460][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1431.846482][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1431.846504][ T194] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1432.365556][T25338] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1432.365595][T25338] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1434.824228][T30764] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1434.877292][T30710] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.877332][T30710] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.958995][T30806] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1435.443652][T30823] netlink: 'syz.1.7989': attribute type 1 has an invalid length. [ 1435.833984][ T62] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.834021][ T62] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.852935][ T62] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.852988][ T62] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.035143][T25338] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.035182][T25338] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.126134][T22631] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1436.126173][T22631] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.297745][T30847] FAULT_INJECTION: forcing a failure. [ 1436.297745][T30847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.297791][T30847] CPU: 1 UID: 0 PID: 30847 Comm: syz.2.7996 Not tainted syzkaller #0 PREEMPT(full) [ 1436.297816][T30847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1436.297828][T30847] Call Trace: [ 1436.297837][T30847] [ 1436.297848][T30847] dump_stack_lvl+0xe8/0x150 [ 1436.297886][T30847] should_fail_ex+0x410/0x560 [ 1436.297923][T30847] _copy_from_iter+0x1d3/0x1660 [ 1436.297976][T30847] ? __pfx__copy_from_iter+0x10/0x10 [ 1436.298003][T30847] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 1436.298030][T30847] ? netlink_sendmsg+0x5cd/0xb20 [ 1436.298056][T30847] ? netlink_sendmsg+0x5cd/0xb20 [ 1436.298090][T30847] ? netlink_sendmsg+0x64f/0xb20 [ 1436.298121][T30847] ? skb_put+0x112/0x210 [ 1436.298156][T30847] netlink_sendmsg+0x6bb/0xb20 [ 1436.298190][T30847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.298221][T30847] ? aa_sock_msg_perm+0x144/0x210 [ 1436.298254][T30847] ? apparmor_socket_sendmsg+0x98/0x360 [ 1436.298281][T30847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.298307][T30847] sock_sendmsg_nosec+0x14e/0x190 [ 1436.298336][T30847] ____sys_sendmsg+0x54e/0x850 [ 1436.298375][T30847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1436.298414][T30847] ? import_iovec+0x73/0xa0 [ 1436.298446][T30847] ___sys_sendmsg+0x2a5/0x360 [ 1436.298474][T30847] ? __lock_acquire+0x747/0x2de0 [ 1436.298505][T30847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1436.298575][T30847] ? __fget_files+0x3a2/0x420 [ 1436.298597][T30847] ? __fget_files+0x2a/0x420 [ 1436.298629][T30847] __x64_sys_sendmsg+0x1b1/0x290 [ 1436.298654][T30847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1436.298720][T30847] do_syscall_64+0x166/0x520 [ 1436.298740][T30847] ? trace_irq_disable+0x3b/0x140 [ 1436.298765][T30847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.298786][T30847] ? clear_bhb_loop+0x70/0xc0 [ 1436.298813][T30847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.298834][T30847] RIP: 0033:0x7fd32ef9f559 [ 1436.298855][T30847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.298873][T30847] RSP: 002b:00007fd32fe1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.298897][T30847] RAX: ffffffffffffffda RBX: 00007fd32f225fa0 RCX: 00007fd32ef9f559 [ 1436.298912][T30847] RDX: 000000000000c000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1436.298925][T30847] RBP: 00007fd32fe1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.298939][T30847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.298951][T30847] R13: 00007fd32f226038 R14: 00007fd32f225fa0 R15: 00007fff84b790a8 [ 1436.298988][T30847] [ 1436.357565][T16732] net_ratelimit: 37 callbacks suppressed [ 1436.357586][T16732] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1436.469440][T16733] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1436.486101][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1436.486133][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1436.486153][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1436.486173][T22631] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1436.577181][T25345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1436.590308][T30852] netlink: 'syz.3.7998': attribute type 1 has an invalid length. [ 1436.660821][T30852] gtp0: entered promiscuous mode [ 1436.672439][T30852] gtp0: entered allmulticast mode [ 1436.691834][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1436.797130][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1436.908855][ T194] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.058738][T30862] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8003'. [ 1437.103478][T30858] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1437.131971][T30858] bond4 (unregistering): Released all slaves [ 1437.171559][T30869] netlink: 'syz.2.8005': attribute type 1 has an invalid length. [ 1437.415696][T30875] netlink: 'syz.5.8006': attribute type 5 has an invalid length. [ 1437.415726][T30875] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8006'. [ 1438.539657][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8016'. [ 1438.607901][T30909] FAULT_INJECTION: forcing a failure. [ 1438.607901][T30909] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.607938][T30909] CPU: 0 UID: 0 PID: 30909 Comm: syz.3.8019 Not tainted syzkaller #0 PREEMPT(full) [ 1438.607970][T30909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1438.607984][T30909] Call Trace: [ 1438.607993][T30909] [ 1438.608003][T30909] dump_stack_lvl+0xe8/0x150 [ 1438.608039][T30909] should_fail_ex+0x410/0x560 [ 1438.608074][T30909] should_failslab+0xa8/0x100 [ 1438.608104][T30909] ? skb_clone+0x212/0x3a0 [ 1438.608127][T30909] kmem_cache_alloc_noprof+0x9c/0x600 [ 1438.608154][T30909] ? skb_clone+0x212/0x3a0 [ 1438.608188][T30909] skb_clone+0x212/0x3a0 [ 1438.608214][T30909] __netlink_deliver_tap+0x355/0x6e0 [ 1438.608262][T30909] ? netlink_deliver_tap+0x2e/0x1b0 [ 1438.608290][T30909] netlink_deliver_tap+0x19c/0x1b0 [ 1438.608317][T30909] netlink_unicast+0x8c1/0xa80 [ 1438.608361][T30909] netlink_sendmsg+0x7f0/0xb20 [ 1438.608395][T30909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.608425][T30909] ? aa_sock_msg_perm+0x144/0x210 [ 1438.608457][T30909] ? apparmor_socket_sendmsg+0x98/0x360 [ 1438.608482][T30909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.608507][T30909] sock_sendmsg_nosec+0x14e/0x190 [ 1438.608536][T30909] ____sys_sendmsg+0x54e/0x850 [ 1438.608573][T30909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.608615][T30909] ? import_iovec+0x73/0xa0 [ 1438.608650][T30909] ___sys_sendmsg+0x2a5/0x360 [ 1438.608678][T30909] ? __lock_acquire+0x747/0x2de0 [ 1438.608708][T30909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.608781][T30909] ? __fget_files+0x3a2/0x420 [ 1438.608804][T30909] ? __fget_files+0x2a/0x420 [ 1438.608837][T30909] __x64_sys_sendmsg+0x1b1/0x290 [ 1438.608862][T30909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.608917][T30909] do_syscall_64+0x166/0x520 [ 1438.608937][T30909] ? trace_irq_disable+0x3b/0x140 [ 1438.608973][T30909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.608995][T30909] ? clear_bhb_loop+0x70/0xc0 [ 1438.609021][T30909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.609042][T30909] RIP: 0033:0x7f33f019f559 [ 1438.609062][T30909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.609081][T30909] RSP: 002b:00007f33f106d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.609105][T30909] RAX: ffffffffffffffda RBX: 00007f33f0425fa0 RCX: 00007f33f019f559 [ 1438.609120][T30909] RDX: 000000000000c000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1438.609134][T30909] RBP: 00007f33f106d090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.609148][T30909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.609160][T30909] R13: 00007f33f0426038 R14: 00007f33f0425fa0 R15: 00007ffc845bef18 [ 1438.609196][T30909] [ 1438.806684][T30908] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1438.856310][T30908] bond3 (unregistering): Released all slaves [ 1439.726445][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8023'. [ 1440.409874][T30945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8030'. [ 1440.710118][T30939] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1440.788580][T30939] bond3 (unregistering): Released all slaves [ 1441.220553][T30959] tipc: Failed to remove unknown binding: 66,0,0/84016304:374682820/374682821 [ 1441.242029][T30959] tipc: Failed to remove unknown binding: 66,0,0/84016304:374682820/374682821 [ 1441.416083][T22631] net_ratelimit: 173 callbacks suppressed [ 1441.416109][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1441.527440][T16733] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1441.569602][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8033'. [ 1441.637696][T16732] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1441.665875][T25345] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1441.665912][T25345] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1441.665935][T25345] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1441.665956][T25345] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1441.759884][T25345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1441.881545][ T194] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1441.987080][T16727] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.712825][T30994] netlink: 'syz.1.8042': attribute type 1 has an invalid length. [ 1443.058266][T30994] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1443.463277][T31008] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1443.492912][T31008] bond4 (unregistering): Released all slaves [ 1443.544310][T31020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8049'. [ 1443.656792][T31026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8050'. [ 1445.931080][T31069] macsec1: entered promiscuous mode [ 1446.284817][T31087] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1446.387455][T31090] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8071'. [ 1446.444329][T31086] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1446.463198][T31086] bond3 (unregistering): Released all slaves [ 1446.473811][T31093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1446.613420][T16727] net_ratelimit: 162 callbacks suppressed [ 1446.613446][T16727] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1446.613471][T16727] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1446.613493][T16727] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1446.613514][T16727] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1446.800164][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1446.998603][T16733] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.160704][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1447.160743][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1447.160765][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1447.160786][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1447.764031][T31114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1447.897913][T31114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8076'. [ 1447.954968][T31117] lo: entered promiscuous mode [ 1447.973322][T31117] tunl0: entered promiscuous mode [ 1448.030978][T31117] gre0: entered promiscuous mode [ 1448.070090][T31117] gretap0: entered promiscuous mode [ 1448.125056][T31117] erspan0: entered promiscuous mode [ 1448.163352][T31117] ip_vti0: entered promiscuous mode [ 1448.502559][T31127] FAULT_INJECTION: forcing a failure. [ 1448.502559][T31127] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.502596][T31127] CPU: 0 UID: 0 PID: 31127 Comm: syz.3.8079 Not tainted syzkaller #0 PREEMPT(full) [ 1448.502619][T31127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1448.502631][T31127] Call Trace: [ 1448.502641][T31127] [ 1448.502650][T31127] dump_stack_lvl+0xe8/0x150 [ 1448.502687][T31127] should_fail_ex+0x410/0x560 [ 1448.502724][T31127] should_failslab+0xa8/0x100 [ 1448.502753][T31127] ? skb_clone+0x212/0x3a0 [ 1448.502773][T31127] kmem_cache_alloc_noprof+0x9c/0x600 [ 1448.502800][T31127] ? __netlink_lookup+0xe6/0x8f0 [ 1448.502826][T31127] ? skb_clone+0x212/0x3a0 [ 1448.502855][T31127] skb_clone+0x212/0x3a0 [ 1448.502880][T31127] __netlink_deliver_tap+0x355/0x6e0 [ 1448.502918][T31127] ? netlink_deliver_tap+0x2e/0x1b0 [ 1448.502946][T31127] netlink_deliver_tap+0x19c/0x1b0 [ 1448.502974][T31127] netlink_sendskb+0x68/0x140 [ 1448.503000][T31127] ovs_ct_limit_cmd_set+0xa96/0xc40 [ 1448.503042][T31127] genl_family_rcv_msg_doit+0x233/0x340 [ 1448.503072][T31127] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1448.503138][T31127] ? bpf_lsm_capable+0x9/0x20 [ 1448.503162][T31127] ? security_capable+0x7e/0x2c0 [ 1448.503209][T31127] genl_rcv_msg+0x614/0x7a0 [ 1448.503248][T31127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1448.503278][T31127] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1448.503321][T31127] netlink_rcv_skb+0x226/0x4a0 [ 1448.503348][T31127] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1448.503381][T31127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1448.503425][T31127] ? down_read+0x2b9/0x320 [ 1448.503455][T31127] genl_rcv+0x28/0x40 [ 1448.503482][T31127] netlink_unicast+0x8ef/0xa80 [ 1448.503527][T31127] netlink_sendmsg+0x7f0/0xb20 [ 1448.503560][T31127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.503591][T31127] ? aa_sock_msg_perm+0x144/0x210 [ 1448.503624][T31127] ? apparmor_socket_sendmsg+0x98/0x360 [ 1448.503649][T31127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.503674][T31127] sock_sendmsg_nosec+0x14e/0x190 [ 1448.503702][T31127] ____sys_sendmsg+0x54e/0x850 [ 1448.503740][T31127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1448.503782][T31127] ? import_iovec+0x73/0xa0 [ 1448.503816][T31127] ___sys_sendmsg+0x2a5/0x360 [ 1448.503843][T31127] ? __lock_acquire+0x747/0x2de0 [ 1448.503874][T31127] ? __pfx____sys_sendmsg+0x10/0x10 [ 1448.503948][T31127] ? __fget_files+0x3a2/0x420 [ 1448.503970][T31127] ? __fget_files+0x2a/0x420 [ 1448.504003][T31127] __x64_sys_sendmsg+0x1b1/0x290 [ 1448.504028][T31127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1448.504085][T31127] do_syscall_64+0x166/0x520 [ 1448.504106][T31127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.504129][T31127] ? clear_bhb_loop+0x70/0xc0 [ 1448.504155][T31127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.504175][T31127] RIP: 0033:0x7f33f019f559 [ 1448.504203][T31127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.504221][T31127] RSP: 002b:00007f33f106d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.504245][T31127] RAX: ffffffffffffffda RBX: 00007f33f0425fa0 RCX: 00007f33f019f559 [ 1448.504260][T31127] RDX: 000000000000c000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1448.504275][T31127] RBP: 00007f33f106d090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.504288][T31127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1448.504301][T31127] R13: 00007f33f0426038 R14: 00007f33f0425fa0 R15: 00007ffc845bef18 [ 1448.504338][T31127] [ 1449.027462][T31128] netlink: 'syz.2.8080': attribute type 3 has an invalid length. [ 1449.491305][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1449.491336][T31140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1449.491351][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1449.491535][T31140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1449.491553][T31140] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8085'. [ 1450.327456][T31157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1450.749738][T31163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1451.001987][T31168] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1451.034697][T31168] bond6 (unregistering): Released all slaves [ 1451.170214][T31174] Cannot find add_set index 65532 as target [ 1451.531653][T31182] FAULT_INJECTION: forcing a failure. [ 1451.531653][T31182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.531701][T31182] CPU: 0 UID: 0 PID: 31182 Comm: syz.1.8101 Not tainted syzkaller #0 PREEMPT(full) [ 1451.531725][T31182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1451.531739][T31182] Call Trace: [ 1451.531748][T31182] [ 1451.531758][T31182] dump_stack_lvl+0xe8/0x150 [ 1451.531795][T31182] should_fail_ex+0x410/0x560 [ 1451.531831][T31182] _copy_from_user+0x2d/0xb0 [ 1451.531865][T31182] kstrtouint_from_user+0xd6/0x180 [ 1451.531897][T31182] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1451.531937][T31182] ? lock_acquire+0x115/0x350 [ 1451.531968][T31182] proc_fail_nth_write+0x8e/0x210 [ 1451.531999][T31182] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1451.532037][T31182] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1451.532065][T31182] vfs_write+0x296/0xba0 [ 1451.532101][T31182] ? __pfx_vfs_write+0x10/0x10 [ 1451.532128][T31182] ? __fget_files+0x2a/0x420 [ 1451.532150][T31182] ? __fget_files+0x3a2/0x420 [ 1451.532170][T31182] ? __fget_files+0x2a/0x420 [ 1451.532196][T31182] ? fdget+0x1ac/0x250 [ 1451.532232][T31182] ksys_write+0x150/0x270 [ 1451.532261][T31182] ? __pfx_ksys_write+0x10/0x10 [ 1451.532302][T31182] do_syscall_64+0x166/0x520 [ 1451.532322][T31182] ? trace_irq_disable+0x3b/0x140 [ 1451.532346][T31182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.532368][T31182] ? clear_bhb_loop+0x70/0xc0 [ 1451.532395][T31182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.532417][T31182] RIP: 0033:0x7f27e935fd8e [ 1451.532439][T31182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1451.532458][T31182] RSP: 002b:00007f27ea1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1451.532482][T31182] RAX: ffffffffffffffda RBX: 00007f27ea1f66c0 RCX: 00007f27e935fd8e [ 1451.532498][T31182] RDX: 0000000000000001 RSI: 00007f27ea1f60a0 RDI: 0000000000000004 [ 1451.532512][T31182] RBP: 00007f27ea1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.532526][T31182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1451.532539][T31182] R13: 00007f27e9626038 R14: 00007f27e9625fa0 R15: 00007fff1ca7f718 [ 1451.532574][T31182] [ 1451.673526][T16688] net_ratelimit: 228 callbacks suppressed [ 1451.673547][T16688] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1451.805788][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1451.806006][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1451.806220][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1451.806427][T16688] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1451.897435][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.008390][T16727] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.118368][T16688] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.227075][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.285719][T31188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8104'. [ 1452.307601][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1452.504039][T31190] bond0: (slave syz_tun): Releasing backup interface [ 1452.529911][T31190] bond0: (slave bond_slave_0): Releasing backup interface [ 1452.563522][T31190] bond0: (slave bond_slave_1): Releasing backup interface [ 1452.639384][T31190] team0: Port device team_slave_0 removed [ 1452.660040][T31190] team0: Port device team_slave_1 removed [ 1452.680527][T31190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.685114][T31195] batman_adv: batadv0: Interface deactivated: dummy0 [ 1452.718079][T31204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8108'. [ 1452.721528][T31195] batman_adv: batadv0: Removing interface: dummy0 [ 1453.296739][T31212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1453.671060][T31229] 8021q: VLANs not supported on ipvlan0 [ 1454.421418][T31238] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1454.529496][T31238] __nla_validate_parse: 1 callbacks suppressed [ 1454.529521][T31238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8120'. [ 1454.643357][T31248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8123'. [ 1455.228665][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8126'. [ 1455.309183][T31262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8126'. [ 1455.369032][T31253] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1455.391003][T31253] bond15 (unregistering): Released all slaves [ 1455.599019][T31258] bond4: Invalid ad_actor_system MAC address. [ 1455.599044][T31258] bond4: option ad_actor_system: invalid value (1) [ 1455.631999][T31258] bond4 (unregistering): Released all slaves [ 1455.758640][T31274] netlink: 23 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1455.824516][T31275] x_tables: duplicate underflow at hook 1 [ 1455.944705][T31262] bond4: Invalid ad_actor_system MAC address. [ 1455.944730][T31262] bond4: option ad_actor_system: invalid value (1) [ 1456.028544][T31262] bond4 (unregistering): Released all slaves [ 1456.696732][T31290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1456.698803][T31290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1456.746779][T25338] net_ratelimit: 54 callbacks suppressed [ 1456.746806][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1456.802850][T31295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1456.818257][T31296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8133'. [ 1456.839766][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1456.839801][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1456.839824][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1456.839846][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1456.879128][T16688] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1456.989346][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.100137][T16688] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.206585][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.316189][ T194] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.455975][T31306] netlink: 'syz.3.8136': attribute type 4 has an invalid length. [ 1458.993676][T31342] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8147'. [ 1459.943144][T31367] netlink: 'syz.1.8155': attribute type 4 has an invalid length. [ 1460.112037][T31372] __nla_validate_parse: 1 callbacks suppressed [ 1460.112062][T31372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8157'. [ 1460.168038][ T30] audit: type=1800 audit(1793007959.204:14): pid=31375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8157" name="memory.events" dev="tmpfs" ino=2570 res=0 errno=-22 [ 1460.360924][T31380] netlink: 'syz.2.8158': attribute type 16 has an invalid length. [ 1460.360949][T31380] netlink: 'syz.2.8158': attribute type 17 has an invalid length. [ 1460.563723][T31380] syz_tun: left promiscuous mode [ 1460.653073][T31380] batadv0: left allmulticast mode [ 1460.779956][T25345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.780075][T25345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.818675][T22631] net_ratelimit: 56 callbacks suppressed [ 1461.818701][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1461.927077][T25345] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1461.996415][T16732] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1461.996454][T16732] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 1461.996477][T16732] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 1461.996498][T16732] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 1461.998065][T31401] FAULT_INJECTION: forcing a failure. [ 1461.998065][T31401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.998096][T31401] CPU: 0 UID: 0 PID: 31401 Comm: syz.3.8166 Not tainted syzkaller #0 PREEMPT(full) [ 1461.998119][T31401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1461.998132][T31401] Call Trace: [ 1461.998141][T31401] [ 1461.998151][T31401] dump_stack_lvl+0xe8/0x150 [ 1461.998187][T31401] should_fail_ex+0x410/0x560 [ 1461.998222][T31401] _copy_from_user+0x2d/0xb0 [ 1461.998252][T31401] ___sys_sendmsg+0x1c6/0x360 [ 1461.998293][T31401] ? __lock_acquire+0x747/0x2de0 [ 1461.998322][T31401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1461.998394][T31401] ? __fget_files+0x3a2/0x420 [ 1461.998416][T31401] ? __fget_files+0x2a/0x420 [ 1461.998448][T31401] __x64_sys_sendmsg+0x1b1/0x290 [ 1461.998472][T31401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1461.998527][T31401] do_syscall_64+0x166/0x520 [ 1461.998547][T31401] ? trace_irq_disable+0x3b/0x140 [ 1461.998571][T31401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.998592][T31401] ? clear_bhb_loop+0x70/0xc0 [ 1461.998618][T31401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.998638][T31401] RIP: 0033:0x7f33f019f559 [ 1461.998658][T31401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.998676][T31401] RSP: 002b:00007f33f106d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1461.998699][T31401] RAX: ffffffffffffffda RBX: 00007f33f0425fa0 RCX: 00007f33f019f559 [ 1461.998714][T31401] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1461.998728][T31401] RBP: 00007f33f106d090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.998741][T31401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.998754][T31401] R13: 00007f33f0426038 R14: 00007f33f0425fa0 R15: 00007ffc845bef18 [ 1461.998788][T31401] [ 1462.041968][T16732] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1462.149647][T22634] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1462.265185][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1462.367715][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1462.637947][T31406] batman_adv: batadv0: Interface deactivated: dummy0 [ 1462.666554][T31406] batman_adv: batadv0: Removing interface: dummy0 [ 1462.803892][T31414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1462.997303][T18851] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1463.122337][T31419] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 1463.406605][T31422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8175'. [ 1465.550038][T31468] Cannot find del_set index 2 as target [ 1466.201300][T31485] ip6erspan0: entered allmulticast mode [ 1466.204956][T31487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1466.204980][T31487] netlink: 21 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1466.204997][T31487] netlink: 21 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1466.432839][T31495] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1466.432866][T31495] netlink: 21 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1466.432884][T31495] netlink: 21 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1466.896466][T16732] net_ratelimit: 43 callbacks suppressed [ 1466.896492][T16732] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1466.973619][T31506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8207'. [ 1466.975294][T31505] xt_IDLETIMER: label is empty or not nul-terminated [ 1467.037578][T31506] veth4: entered promiscuous mode [ 1467.037613][T31506] veth4: entered allmulticast mode [ 1467.099807][T22631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.116411][T31506] smc: net device lo applied user defined pnetid SYZ0 [ 1467.116515][T31506] smc: smcd device lo applied user defined pnetid SYZ0 [ 1467.205644][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.316293][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.425658][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.535775][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.646174][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.755613][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.867229][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1468.050034][T31522] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1468.178229][T31522] bond15 (unregistering): Released all slaves [ 1468.338756][T31528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8215'. [ 1468.444299][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1468.508137][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1468.509809][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1468.510916][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1468.511587][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1468.632037][T25338] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1469.134380][T31542] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1469.224472][T31543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8219'. [ 1469.579955][T31555] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8220'. [ 1469.581803][T31553] netlink: 'syz.3.8220': attribute type 21 has an invalid length. [ 1469.624641][T31543] bond15: Invalid ad_actor_system MAC address. [ 1469.624665][T31543] bond15: option ad_actor_system: invalid value (1) [ 1469.654191][T31543] bond15 (unregistering): Released all slaves [ 1470.388571][T25338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.588693][T18851] Bluetooth: hci3: command tx timeout [ 1470.815230][T25338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.004282][T25338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.275135][T25338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.353725][T31529] rxe_eth0 speed is unknown, defaulting to 1000 [ 1472.095878][T16727] net_ratelimit: 10 callbacks suppressed [ 1472.095903][T16727] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1472.249494][ T194] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1472.267364][T25338] bridge_slave_1: left allmulticast mode [ 1472.267396][T25338] bridge_slave_1: left promiscuous mode [ 1472.267659][T25338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.311018][T25338] bridge_slave_0: left allmulticast mode [ 1472.311049][T25338] bridge_slave_0: left promiscuous mode [ 1472.315300][T25338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.565220][T25338] bond_slave_0: left promiscuous mode [ 1472.565295][T25338] bond_slave_1: left promiscuous mode [ 1472.668783][T18851] Bluetooth: hci3: command tx timeout [ 1473.200881][T25338] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1473.220399][T25338] ip6gretap1 (unregistering): left allmulticast mode [ 1473.649418][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.654300][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1473.655207][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1473.688647][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1473.689352][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1473.762664][T31608] __nla_validate_parse: 2 callbacks suppressed [ 1473.762688][T31608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8234'. [ 1474.311600][T25338] bond6 (unregistering): (slave gre1): Releasing backup interface [ 1474.620640][T25338] bond7 (unregistering): (slave bridge2): Releasing active interface [ 1474.732115][T25338] bond0 (unregistering): left allmulticast mode [ 1474.732141][T25338] bond_slave_0: left allmulticast mode [ 1474.732160][T25338] bond_slave_1: left allmulticast mode [ 1474.749612][ T5640] Bluetooth: hci3: command tx timeout [ 1474.766978][T25338] bond2 (unregistering): (slave macvlan0): Removing an active aggregator [ 1474.767468][T25338] bond2 (unregistering): (slave macvlan0): Releasing backup interface [ 1474.769581][T25338] macvlan0 (unregistering): left allmulticast mode [ 1474.814069][T25338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1474.830008][T25338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1474.831893][T25338] bond0 (unregistering): Released all slaves [ 1474.857706][T25338] bond1 (unregistering): Released all slaves [ 1474.879312][T25338] bond2 (unregistering): Released all slaves [ 1474.910711][T25338] bond3 (unregistering): Released all slaves [ 1474.964011][T25338] bond4 (unregistering): Released all slaves [ 1475.000623][T25338] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1475.002429][T25338] bond5 (unregistering): Released all slaves [ 1475.061075][T25338] bond6 (unregistering): Released all slaves [ 1475.150723][T25338] bond7 (unregistering): Released all slaves [ 1475.213184][T25338] bond8 (unregistering): Released all slaves [ 1475.313702][ T5291] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1475.778060][T25338] tipc: Disabling bearer [ 1475.793980][ T5640] Bluetooth: hci4: command tx timeout [ 1475.796770][T25338] tipc: Left network mode [ 1475.845017][T25338] IPVS: stopping master sync thread 21940 ... [ 1476.829308][ T5640] Bluetooth: hci3: command tx timeout [ 1477.440016][T31654] lo: entered promiscuous mode [ 1477.440353][T31654] tunl0: entered promiscuous mode [ 1477.440640][T31654] gre0: entered promiscuous mode [ 1477.444217][T31654] gretap0: entered promiscuous mode [ 1477.444559][T31654] erspan0: entered promiscuous mode [ 1477.444832][T31654] ip_vti0: entered promiscuous mode [ 1477.867800][ T5640] Bluetooth: hci4: command tx timeout [ 1478.692827][T31605] rxe_eth0 speed is unknown, defaulting to 1000 [ 1478.954721][T31672] veth1_to_bond: entered allmulticast mode [ 1479.112028][T31671] veth1_to_bond: left allmulticast mode [ 1479.492420][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1479.492457][T31685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8244'. [ 1479.564429][T31529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.564551][T31529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.564713][T31529] bridge_slave_0: entered allmulticast mode [ 1479.599804][T31529] bridge_slave_0: entered promiscuous mode [ 1479.625691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.631574][T31529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.634493][T31529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.634664][T31529] bridge_slave_1: entered allmulticast mode [ 1479.693548][T31529] bridge_slave_1: entered promiscuous mode [ 1479.793359][T25338] hsr_slave_0: left promiscuous mode [ 1479.802495][T25338] hsr_slave_1: left promiscuous mode [ 1479.805297][T25338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.805321][T25338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.857484][T25338] veth1_macvtap: left promiscuous mode [ 1479.857529][T25338] veth0_macvtap: left promiscuous mode [ 1479.946137][ T5640] Bluetooth: hci4: command tx timeout [ 1480.605234][T25338] team0 (unregistering): Port device team_slave_1 removed [ 1480.656673][T25338] team0 (unregistering): Port device team_slave_0 removed [ 1481.259193][T18851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1481.267276][T18851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1481.299771][T18851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1481.310516][T18851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1481.323854][T18851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1481.390873][ T5291] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1481.421110][T31687] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1481.720261][T31529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.893916][T31529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.026136][T18851] Bluetooth: hci4: command tx timeout [ 1482.428014][T31529] team0: Port device team_slave_0 added [ 1482.546843][T25338] IPVS: stop unused estimator thread 0... [ 1482.554476][T31529] team0: Port device team_slave_1 added [ 1482.981075][T31529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.981097][T31529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.981126][T31529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.064288][T31529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.064308][T31529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.064336][T31529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.386191][T18851] Bluetooth: hci5: command tx timeout [ 1483.412699][T31529] hsr_slave_0: entered promiscuous mode [ 1483.430739][T31529] hsr_slave_1: entered promiscuous mode [ 1483.431914][T31529] debugfs: 'hsr0' already exists in 'hsr' [ 1483.431937][T31529] Cannot create hsr debugfs directory [ 1484.718801][T31696] rxe_eth0 speed is unknown, defaulting to 1000 [ 1484.752257][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.466882][T18851] Bluetooth: hci5: command tx timeout [ 1485.630257][T31605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.630378][T31605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.630547][T31605] bridge_slave_0: entered allmulticast mode [ 1485.667408][T31605] bridge_slave_0: entered promiscuous mode [ 1485.927905][T31605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.928025][T31605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.928193][T31605] bridge_slave_1: entered allmulticast mode [ 1485.959819][T31605] bridge_slave_1: entered promiscuous mode [ 1486.174534][ T5291] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1486.203232][T31605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.298882][T31605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.823476][T31605] team0: Port device team_slave_0 added [ 1486.870006][T31605] team0: Port device team_slave_1 added [ 1487.022797][T31779] Cannot find del_set index 2 as target [ 1487.102643][T31605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1487.102664][T31605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.102694][T31605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.442913][T31605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.442934][T31605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.442962][T31605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.545732][T18851] Bluetooth: hci5: command tx timeout [ 1488.164651][T31605] hsr_slave_0: entered promiscuous mode [ 1488.193067][T31605] hsr_slave_1: entered promiscuous mode [ 1488.194943][T31605] debugfs: 'hsr0' already exists in 'hsr' [ 1488.194966][T31605] Cannot create hsr debugfs directory [ 1489.598754][T31822] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8273'. [ 1489.625795][T18851] Bluetooth: hci5: command tx timeout [ 1489.840836][T31829] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8274'. [ 1489.952852][T31529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1489.986201][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1489.989210][T31529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1490.041410][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1490.071320][T31696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.071442][T31696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.071620][T31696] bridge_slave_0: entered allmulticast mode [ 1490.106821][T31696] bridge_slave_0: entered promiscuous mode [ 1490.128206][T31529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1490.176501][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1490.182256][T31696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.182411][T31696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.182588][T31696] bridge_slave_1: entered allmulticast mode [ 1490.223999][T31696] bridge_slave_1: entered promiscuous mode [ 1490.761100][T31837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1490.783375][T31529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1490.801146][T31529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1490.882726][T31696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.883658][T31830] syzkaller1: entered promiscuous mode [ 1490.883679][T31830] syzkaller1: entered allmulticast mode [ 1491.161062][T31696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.459827][T31696] team0: Port device team_slave_0 added [ 1491.681700][T31696] team0: Port device team_slave_1 added [ 1492.108695][T31696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.108718][T31696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.108746][T31696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.171846][T31696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.171864][T31696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.171892][T31696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.784466][T31696] hsr_slave_0: entered promiscuous mode [ 1492.796177][T31696] hsr_slave_1: entered promiscuous mode [ 1492.803436][T31696] debugfs: 'hsr0' already exists in 'hsr' [ 1492.803462][T31696] Cannot create hsr debugfs directory [ 1493.272574][T31879] netlink: del zone limit has 8 unknown bytes [ 1493.702816][T31884] Cannot find del_set index 2 as target [ 1493.820840][T31605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1493.870272][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.940493][T31605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1493.969975][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1493.972502][T31605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1494.008798][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.058696][T31605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1494.092026][T31605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.283251][T31529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.524096][T31891] syzkaller1: entered promiscuous mode [ 1494.524121][T31891] syzkaller1: entered allmulticast mode [ 1494.813161][T31906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.919014][T31529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.985641][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1495.978666][T31696] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.130131][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.130250][T16732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.454187][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.454318][T16727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.133841][T31696] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.317554][T31929] mac80211_hwsim hwsim37 syzkaller0: default FDB implementation only supports local addresses [ 1497.816470][T31696] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.940828][T31949] netlink: del zone limit has 8 unknown bytes [ 1498.224567][T31696] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.585018][T31605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.720749][T31605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.772615][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.772745][T16732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.841734][T16733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.841861][T16733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.309837][T31974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8295'. [ 1499.343523][T31974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8295'. [ 1499.584614][T31696] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1499.609312][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1499.614258][T31696] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1499.642904][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1499.686693][T31696] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1499.715902][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1499.732075][T31696] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1499.760129][T31696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1499.909320][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8298'. [ 1499.922620][T31990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8298'. [ 1501.098790][T31696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.278752][T31696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.389776][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.389895][T16738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.440398][T32015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1501.457705][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.457820][T16738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.947208][T31529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.289996][T31529] veth0_vlan: entered promiscuous mode [ 1502.348610][T31529] veth1_vlan: entered promiscuous mode [ 1502.365269][T32030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8305'. [ 1502.953687][T31529] veth0_macvtap: entered promiscuous mode [ 1503.017245][T31529] veth1_macvtap: entered promiscuous mode [ 1503.090142][T31529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.105097][T31529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.312957][T25341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.317472][T25337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.338297][T25343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.339896][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.391281][T25338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.391308][T25338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.479941][T31605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.758335][T16727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.758360][T16727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.558272][T32077] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1505.598020][T32077] bond7 (unregistering): Released all slaves [ 1505.847001][T32089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1505.847029][T32089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1505.897038][T32086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1506.184857][T32086] bond4 (unregistering): Released all slaves [ 1506.561843][T32104] netlink: zone id is out of range [ 1506.561866][T32104] netlink: del zone limit has 4 unknown bytes [ 1506.783001][T31696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.205309][T31605] veth0_vlan: entered promiscuous mode [ 1507.280248][T31605] veth1_vlan: entered promiscuous mode [ 1507.524185][T32114] Bluetooth: MGMT ver 1.23 [ 1507.641827][T31605] veth0_macvtap: entered promiscuous mode [ 1507.776235][T31605] veth1_macvtap: entered promiscuous mode [ 1507.794254][T32117] Cannot find del_set index 2 as target [ 1507.811971][T32118] netlink: zone id is out of range [ 1507.811999][T32118] netlink: del zone limit has 4 unknown bytes [ 1508.096654][T31605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.166936][T31605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.247249][T22634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.247423][T22634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.247460][T22634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.247494][T22634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.953161][T25345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.953218][T25345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.384898][T25337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.384925][T25337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.772604][T31696] veth0_vlan: entered promiscuous mode [ 1509.834050][T32141] netlink: 'syz.3.8322': attribute type 19 has an invalid length. [ 1509.874471][T31696] veth1_vlan: entered promiscuous mode [ 1510.088840][T31696] veth0_macvtap: entered promiscuous mode [ 1510.123699][T31696] veth1_macvtap: entered promiscuous mode [ 1510.311791][T31696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.383042][T31696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.485893][T22634] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.487208][T22634] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.494265][T22634] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.494313][T22634] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.319876][T16732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.319902][T16732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.435298][T32155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.508622][T32164] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 1511.651994][T25341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.652019][T25341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.175250][T32176] sctp: [Deprecated]: syz.7.8330 (pid 32176) Use of int in maxseg socket option. [ 1512.175250][T32176] Use struct sctp_assoc_value instead [ 1512.224900][T32176] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8330'. [ 1512.244636][T32176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8330'. [ 1512.244686][T32176] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8330'. [ 1512.841632][T32187] Cannot find set identified by id 0 to match [ 1513.214170][T32199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1513.839756][T32212] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8338'. [ 1513.964777][T16738] IPVS: starting estimator thread 0... [ 1514.047594][T32217] IPVS: using max 27 ests per chain, 64800 per kthread [ 1514.117501][T32213] netlink: zone id is out of range [ 1514.117523][T32213] netlink: del zone limit has 4 unknown bytes [ 1514.822494][T32226] smc: net device team0 applied user defined pnetid SYZ2 [ 1515.046332][T32228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1515.112871][T32228] tipc: Enabling of bearer rejected, media not registered [ 1515.293922][T32229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8343'. [ 1515.363129][T32228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1515.451394][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1515.477273][ T5640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1515.488356][ T5640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1515.507871][ T5640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1515.523791][ T5640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1516.841137][T21685] syz_tun (unregistering): left allmulticast mode [ 1517.627290][T18851] Bluetooth: hci7: command tx timeout [ 1517.709719][T32280] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8351'. [ 1518.652803][T32291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.654377][T32293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.654674][T32293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.654955][T32293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.655250][T32293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.701683][T32293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.771033][T32293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1518.899586][T32240] rxe_eth0 speed is unknown, defaulting to 1000 [ 1519.443793][T32305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8356'. [ 1519.443833][T32305] netlink: 'syz.7.8356': attribute type 30 has an invalid length. [ 1519.566118][T32307] Cannot find set identified by id 0 to match [ 1519.706125][T18851] Bluetooth: hci7: command tx timeout [ 1519.736646][T25343] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.736696][T25343] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.736732][T25343] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1519.736766][T25343] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.786623][T18851] Bluetooth: hci7: command tx timeout [ 1522.402085][T32240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.405281][T32240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.423669][T32240] bridge_slave_0: entered allmulticast mode [ 1522.442630][T32240] bridge_slave_0: entered promiscuous mode [ 1522.462046][T32240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.462199][T32240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.462372][T32240] bridge_slave_1: entered allmulticast mode [ 1522.464590][T32240] bridge_slave_1: entered promiscuous mode [ 1522.472545][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8365'. [ 1522.472570][T32352] openvswitch: netlink: Flow key attr not present in new flow. [ 1522.571161][T32240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.590721][T32240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.656737][T32240] team0: Port device team_slave_0 added [ 1522.660182][T32240] team0: Port device team_slave_1 added [ 1522.763975][T32240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.763996][T32240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.764024][T32240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.816504][T32240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.816525][T32240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.816554][T32240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.007294][T32240] hsr_slave_0: entered promiscuous mode [ 1523.013375][T32240] hsr_slave_1: entered promiscuous mode [ 1523.029648][T32240] debugfs: 'hsr0' already exists in 'hsr' [ 1523.029673][T32240] Cannot create hsr debugfs directory [ 1523.852410][T32371] bridge2: entered allmulticast mode [ 1523.866973][T18851] Bluetooth: hci7: command tx timeout [ 1524.062227][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1524.086408][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1524.088076][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1524.091271][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1524.092927][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1525.286605][T32240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.656883][T32240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.921785][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f078400: rx timeout, send abort [ 1525.922020][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f078400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 1525.988342][T32240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.197030][T18851] Bluetooth: hci0: command tx timeout [ 1526.273607][T32240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.539244][T32377] rxe_eth0 speed is unknown, defaulting to 1000 [ 1527.792047][T32240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1527.832606][T32240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1527.841973][T32240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1527.879267][T32240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1527.893443][T32240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1527.930644][T32240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1527.943901][T32240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1527.999848][T32240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1528.226495][T32447] __nla_validate_parse: 1 callbacks suppressed [ 1528.226520][T32447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8384'. [ 1528.269032][T18851] Bluetooth: hci0: command tx timeout [ 1528.323018][T32447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.433948][T32447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.076209][T32240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.152870][T32240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.224777][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.224897][T16727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.503589][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.503708][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.632687][T32468] netlink: zone id is out of range [ 1529.632707][T32468] netlink: del zone limit has 4 unknown bytes [ 1530.189814][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880652b0800: rx timeout, send abort [ 1530.190249][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880652b0800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 1530.345920][T18851] Bluetooth: hci0: command tx timeout [ 1531.709339][T32377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.712673][T32377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.712861][T32377] bridge_slave_0: entered allmulticast mode [ 1531.741244][T32377] bridge_slave_0: entered promiscuous mode [ 1531.767733][T32377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.767873][T32377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.768055][T32377] bridge_slave_1: entered allmulticast mode [ 1531.770309][T32377] bridge_slave_1: entered promiscuous mode [ 1532.214029][T32377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.292768][T32377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.427547][T18851] Bluetooth: hci0: command tx timeout [ 1533.173615][T32377] team0: Port device team_slave_0 added [ 1533.209865][T32377] team0: Port device team_slave_1 added [ 1533.496914][T32377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1533.496936][T32377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.496964][T32377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.569329][T32377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.569351][T32377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.569382][T32377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1533.839003][T32377] hsr_slave_0: entered promiscuous mode [ 1533.840205][T32377] hsr_slave_1: entered promiscuous mode [ 1533.864524][T32377] debugfs: 'hsr0' already exists in 'hsr' [ 1533.864550][T32377] Cannot create hsr debugfs directory [ 1534.064905][T32528] xt_hashlimit: size too large, truncated to 1048576 [ 1534.221880][T32533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1534.373944][T32536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8396'. [ 1534.870141][T32240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.910506][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1536.000119][T32240] veth0_vlan: entered promiscuous mode [ 1536.400161][T32240] veth1_vlan: entered promiscuous mode [ 1537.054752][T32240] veth0_macvtap: entered promiscuous mode [ 1537.109351][T32240] veth1_macvtap: entered promiscuous mode [ 1537.299773][T32240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.418111][T32240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.616926][T25341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.617578][T25341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.617736][T25341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.878323][T25341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.602160][T32377] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1538.628059][T32377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1538.632602][T32377] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1538.657071][T32377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1538.662835][T32377] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1538.672955][T16738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.672977][T16738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.704196][T32377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1538.783178][T32377] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1538.841453][T32377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1538.864108][T32588] IPv4: Oversized IP packet from 127.202.26.0 [ 1539.043293][T32588] dvmrp1: entered allmulticast mode [ 1539.085911][T32591] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8410'. [ 1539.086878][T32589] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8410'. [ 1539.092752][T22634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.092776][T22634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.804492][T32377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.930318][T32377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.977538][T25345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.977684][T25345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.011606][T25345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.011730][T25345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.127564][T32612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1540.215323][T32612] sctp: [Deprecated]: syz.1.8341 (pid 32612) Use of int in max_burst socket option deprecated. [ 1540.215323][T32612] Use struct sctp_assoc_value instead [ 1540.271410][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1542.400102][T32649] Bluetooth: MGMT ver 1.23 [ 1542.850567][T32656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8423'. [ 1543.870960][T20227] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1543.879843][T20227] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1543.883342][T20227] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1543.894030][T20227] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1543.903391][T20227] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1544.015204][T32377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.428339][ T5640] Bluetooth: hci0: command 0x0c3a tx timeout [ 1544.428502][T18851] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 1544.655268][T32703] tc_dump_action: action bad kind [ 1544.708484][T32703] tc_dump_action: action bad kind [ 1545.536291][T32721] netlink: zone id is out of range [ 1545.536331][T32721] netlink: get zone limit has 8 unknown bytes [ 1546.028084][T18851] Bluetooth: hci8: command tx timeout [ 1546.191128][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.433921][T32377] veth0_vlan: entered promiscuous mode [ 1546.528201][T32377] veth1_vlan: entered promiscuous mode [ 1546.851540][T32674] rxe_eth0 speed is unknown, defaulting to 1000 [ 1546.890136][T32377] veth0_macvtap: entered promiscuous mode [ 1546.939504][T32377] veth1_macvtap: entered promiscuous mode [ 1547.141832][T32377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1547.244303][T32377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.340040][T22634] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.340335][T22634] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.341111][T22634] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.341182][T22634] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.106218][ T5640] Bluetooth: hci8: command tx timeout [ 1548.254364][T32752] netlink: 30 bytes leftover after parsing attributes in process `syz.1.8441'. [ 1548.357255][T25338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.357284][T25338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.405341][T32757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1548.445158][T32757] batadv0: left allmulticast mode [ 1548.561434][T32757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1548.848859][T32757] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8443'. [ 1548.930943][T32767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8444'. [ 1548.930979][T32767] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8444'. [ 1548.930997][T32767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8444'. [ 1549.179281][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.179304][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.393202][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1549.393239][ T308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1550.189282][T18851] Bluetooth: hci8: command tx timeout [ 1550.318043][ T320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8449'. [ 1551.924171][ T337] : renamed from bond0 (while UP) [ 1552.265754][T18851] Bluetooth: hci8: command tx timeout [ 1552.591294][T32674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.591425][T32674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.591919][T32674] bridge_slave_0: entered allmulticast mode [ 1552.635938][T32674] bridge_slave_0: entered promiscuous mode [ 1552.796968][T32674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.799569][T32674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.799747][T32674] bridge_slave_1: entered allmulticast mode [ 1552.851371][T32674] bridge_slave_1: entered promiscuous mode [ 1553.263398][ T373] lo: left promiscuous mode [ 1553.264486][ T373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1553.753728][T32674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.794782][T32674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.142545][T32674] team0: Port device team_slave_0 added [ 1554.183533][T32674] team0: Port device team_slave_1 added [ 1554.244978][ T396] __nla_validate_parse: 6 callbacks suppressed [ 1554.245002][ T396] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8467'. [ 1554.245029][ T396] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8467'. [ 1554.299002][ T397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8465'. [ 1554.638619][T32674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.638641][T32674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.638669][T32674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.704160][T32674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.704180][T32674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.704208][T32674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.194084][T32674] hsr_slave_0: entered promiscuous mode [ 1555.230654][T32674] hsr_slave_1: entered promiscuous mode [ 1555.231464][T32674] debugfs: 'hsr0' already exists in 'hsr' [ 1555.231486][T32674] Cannot create hsr debugfs directory [ 1555.894344][ T421] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8473'. [ 1555.984889][ T424] rds_bind: 23 callbacks suppressed [ 1555.984912][ T424] RDS: rds_bind could not find a transport for ::ffff:10.1.0.255, load rds_tcp or rds_rdma? [ 1556.311018][ T419] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8475'. [ 1556.544064][ T430] netlink: 'syz.1.8477': attribute type 4 has an invalid length. [ 1558.610770][ T470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1558.683295][ T473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8482'. [ 1559.526891][ T470] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1559.941423][ T476] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8484'. [ 1560.043744][ T499] netlink: 'syz.1.8487': attribute type 1 has an invalid length. [ 1562.483804][ T536] lo: entered promiscuous mode [ 1562.484275][ T536] tunl0: entered promiscuous mode [ 1562.554111][ T536] gre0: entered promiscuous mode [ 1562.716738][ T536] gretap0: entered promiscuous mode [ 1562.836526][ T536] erspan0: entered promiscuous mode [ 1562.882420][ T536] ip_vti0: entered promiscuous mode [ 1563.094670][T32674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1563.140249][T32674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1563.161316][T32674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1563.211451][T32674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1563.212679][T32674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1563.294455][ T562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1563.469056][T32674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1564.035215][ T558] syzkaller0: entered promiscuous mode [ 1564.035245][ T558] syzkaller0: entered allmulticast mode [ 1571.139036][T32674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1571.143430][T32674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1571.836643][ T615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1571.888514][ T623] SET target dimension over the limit! [ 1572.322002][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1572.322041][ T631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1572.903451][T32674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.031849][T32674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.141415][T25341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.141532][T25341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.254395][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.254540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.351234][ T643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1573.351254][ T643] IPv6: NLM_F_CREATE should be set when creating new route [ 1573.793736][ T650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8520'. [ 1574.663379][ T671] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1574.728815][ T671] xt_hashlimit: size too large, truncated to 1048576 [ 1575.969364][ T693] IPv6: addrconf: prefix option has invalid lifetime [ 1576.539588][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1577.043054][ T715] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1577.303813][T32674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.364715][ T724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8538'. [ 1578.002842][T32674] veth0_vlan: entered promiscuous mode [ 1578.064198][T32674] veth1_vlan: entered promiscuous mode [ 1578.350570][T32674] veth0_macvtap: entered promiscuous mode [ 1578.420764][T32674] veth1_macvtap: entered promiscuous mode [ 1578.503993][ T740] FAULT_INJECTION: forcing a failure. [ 1578.503993][ T740] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.504028][ T740] CPU: 0 UID: 0 PID: 740 Comm: syz.3.8542 Not tainted syzkaller #0 PREEMPT(full) [ 1578.504052][ T740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1578.504065][ T740] Call Trace: [ 1578.504075][ T740] [ 1578.504084][ T740] dump_stack_lvl+0xe8/0x150 [ 1578.504124][ T740] should_fail_ex+0x410/0x560 [ 1578.504161][ T740] should_failslab+0xa8/0x100 [ 1578.504191][ T740] ? skb_ext_add+0x148/0x8e0 [ 1578.504223][ T740] kmem_cache_alloc_noprof+0x9c/0x600 [ 1578.504261][ T740] ? skb_ext_add+0x148/0x8e0 [ 1578.504300][ T740] skb_ext_add+0x148/0x8e0 [ 1578.504334][ T740] ? __local_bh_enable_ip+0xd6/0x140 [ 1578.504365][ T740] j1939_sk_sendmsg+0x6c5/0x1310 [ 1578.504499][ T740] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1578.504535][ T740] ? apparmor_socket_sendmsg+0x98/0x360 [ 1578.504563][ T740] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1578.504591][ T740] sock_sendmsg_nosec+0x14e/0x190 [ 1578.504621][ T740] sock_write_iter+0x2de/0x3e0 [ 1578.504648][ T740] ? __pfx_sock_write_iter+0x10/0x10 [ 1578.504695][ T740] do_iter_readv_writev+0x612/0x8c0 [ 1578.504727][ T740] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1578.504759][ T740] ? bpf_lsm_file_permission+0x9/0x20 [ 1578.504781][ T740] ? security_file_permission+0x75/0x260 [ 1578.504806][ T740] ? rw_verify_area+0x203/0x4c0 [ 1578.504835][ T740] vfs_writev+0x343/0x990 [ 1578.504876][ T740] ? __pfx_vfs_writev+0x10/0x10 [ 1578.504922][ T740] ? __fget_files+0x2a/0x420 [ 1578.504945][ T740] ? __fget_files+0x3a2/0x420 [ 1578.504975][ T740] ? fdget+0x1ac/0x250 [ 1578.505006][ T740] do_writev+0x154/0x2e0 [ 1578.505039][ T740] ? __pfx_do_writev+0x10/0x10 [ 1578.505082][ T740] do_syscall_64+0x166/0x520 [ 1578.505103][ T740] ? trace_irq_disable+0x3b/0x140 [ 1578.505128][ T740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.505150][ T740] ? clear_bhb_loop+0x70/0xc0 [ 1578.505177][ T740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.505198][ T740] RIP: 0033:0x7f33f019f559 [ 1578.505221][ T740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.505239][ T740] RSP: 002b:00007f33f106d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1578.505273][ T740] RAX: ffffffffffffffda RBX: 00007f33f0425fa0 RCX: 00007f33f019f559 [ 1578.505289][ T740] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1578.505303][ T740] RBP: 00007f33f106d090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.505316][ T740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.505330][ T740] R13: 00007f33f0426038 R14: 00007f33f0425fa0 R15: 00007ffc845bef18 [ 1578.505365][ T740] [ 1578.922385][T32674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.028759][T32674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.482978][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.483358][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.509741][T16688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.511262][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.696323][ T753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8545'. [ 1579.696353][ T753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8545'. [ 1579.748535][ T753] netlink: 'syz.1.8545': attribute type 1 has an invalid length. [ 1580.258598][ T756] bond1: (slave gretap2): making interface the new active one [ 1580.262633][ T756] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1580.298551][ T758] macvlan4: entered promiscuous mode [ 1580.298576][ T758] macvlan4: entered allmulticast mode [ 1580.299359][ T758] bond1: entered promiscuous mode [ 1580.299377][ T758] gretap2: entered promiscuous mode [ 1580.300509][ T758] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1580.301664][ T758] bond1: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1580.301934][ T758] bond1: left promiscuous mode [ 1580.301951][ T758] gretap2: left promiscuous mode [ 1580.724658][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.724683][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.249825][T16688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.249849][T16688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.013604][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8554'. [ 1582.630521][ T803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8559'. [ 1582.655704][ T804] Cannot find set identified by id 0 to match [ 1583.413820][ T810] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1583.492038][ T810] bond1 (unregistering): Released all slaves [ 1584.391371][ T5640] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1584.441821][ T5640] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1584.467047][ T5640] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1584.469161][ T5640] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1584.469818][ T5640] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1584.946955][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8568'. [ 1585.664799][ T851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8571'. [ 1586.467679][T21844] bond0: (slave syz_tun): Releasing backup interface [ 1586.508311][T18851] Bluetooth: hci9: command tx timeout [ 1587.998887][ T896] Cannot find del_set index 2 as target [ 1588.453417][ T828] rxe_eth0 speed is unknown, defaulting to 1000 [ 1588.472099][ T901] netlink: 'syz.0.8581': attribute type 4 has an invalid length. [ 1588.525741][ T902] netlink: 'syz.0.8581': attribute type 4 has an invalid length. [ 1588.586177][ T5640] Bluetooth: hci9: command tx timeout [ 1588.769701][ T901] netlink: 'syz.0.8581': attribute type 4 has an invalid length. [ 1588.771378][ T902] netlink: 'syz.0.8581': attribute type 4 has an invalid length. [ 1589.994749][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054d6c800: rx timeout, send abort [ 1589.994996][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054d6c800: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 1590.471186][ T960] ieee802154 phy1 wpan1: encryption failed: -22 [ 1590.666123][ T5640] Bluetooth: hci9: command tx timeout [ 1591.589760][ T976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8595'. [ 1592.747165][ T5640] Bluetooth: hci9: command tx timeout [ 1592.818055][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.818249][ T828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.818409][ T828] bridge_slave_0: entered allmulticast mode [ 1592.820346][ T828] bridge_slave_0: entered promiscuous mode [ 1592.851956][ T828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.852147][ T828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.852319][ T828] bridge_slave_1: entered allmulticast mode [ 1592.854205][ T828] bridge_slave_1: entered promiscuous mode [ 1592.975716][ T997] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8599'. [ 1593.410279][ T997] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8599'. [ 1593.410325][ T997] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8599'. [ 1593.475292][ T828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.542584][ T828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.989990][ T828] team0: Port device team_slave_0 added [ 1594.033870][ T828] team0: Port device team_slave_1 added [ 1594.353631][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 1594.408945][ T828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.408967][ T828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.408995][ T828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.476990][ T828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.477010][ T828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.477038][ T828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.894734][ T1025] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8603'. [ 1594.894769][ T1025] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8603'. [ 1595.049515][ T1015] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1595.049614][ T1015] syzkaller1: linktype set to 823 [ 1595.273875][ T828] hsr_slave_0: entered promiscuous mode [ 1595.288088][ T828] hsr_slave_1: entered promiscuous mode [ 1595.292326][ T828] debugfs: 'hsr0' already exists in 'hsr' [ 1595.292350][ T828] Cannot create hsr debugfs directory [ 1595.382384][ T1030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8606'. [ 1595.382417][ T1030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8606'. [ 1595.526738][T18851] Bluetooth: hci8: connection err: -111 [ 1595.526830][T18851] Bluetooth: hci8: connection err: -111 [ 1595.526907][T18851] Bluetooth: hci8: connection err: -111 [ 1595.526980][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527053][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527142][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527222][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527297][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527369][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527441][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527516][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527590][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527664][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527747][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527819][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527894][T18851] Bluetooth: hci8: connection err: -111 [ 1595.527998][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528072][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528146][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528251][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528326][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528400][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528475][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528548][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528620][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528702][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528776][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528849][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528922][T18851] Bluetooth: hci8: connection err: -111 [ 1595.528996][T18851] Bluetooth: hci8: connection err: -111 [ 1595.529070][T18851] Bluetooth: hci8: connection err: -111 [ 1595.529143][T18851] Bluetooth: hci8: connection err: -111 [ 1595.529215][T18851] Bluetooth: hci8: connection err: -111 [ 1596.740572][ T1056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8608'. [ 1596.740609][ T1056] netlink: 'syz.9.8608': attribute type 10 has an invalid length. [ 1596.740627][ T1056] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8608'. [ 1596.868063][ T1066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8608'. [ 1596.868115][ T1066] netlink: 'syz.9.8608': attribute type 10 has an invalid length. [ 1596.868133][ T1066] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8608'. [ 1597.073557][ T1056] geneve2: entered promiscuous mode [ 1597.073584][ T1056] geneve2: entered allmulticast mode [ 1597.195738][ T1084] FAULT_INJECTION: forcing a failure. [ 1597.195738][ T1084] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.195775][ T1084] CPU: 0 UID: 0 PID: 1084 Comm: syz.0.8610 Not tainted syzkaller #0 PREEMPT(full) [ 1597.195799][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1597.195811][ T1084] Call Trace: [ 1597.195820][ T1084] [ 1597.195830][ T1084] dump_stack_lvl+0xe8/0x150 [ 1597.195868][ T1084] should_fail_ex+0x410/0x560 [ 1597.195904][ T1084] should_failslab+0xa8/0x100 [ 1597.195933][ T1084] ? skb_clone+0x212/0x3a0 [ 1597.195955][ T1084] kmem_cache_alloc_noprof+0x9c/0x600 [ 1597.195987][ T1084] ? skb_clone+0x212/0x3a0 [ 1597.196016][ T1084] skb_clone+0x212/0x3a0 [ 1597.196042][ T1084] __netlink_deliver_tap+0x355/0x6e0 [ 1597.196082][ T1084] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.196109][ T1084] netlink_deliver_tap+0x19c/0x1b0 [ 1597.196137][ T1084] netlink_sendskb+0x68/0x140 [ 1597.196163][ T1084] netlink_rcv_skb+0x2a4/0x4a0 [ 1597.196190][ T1084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1597.196222][ T1084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1597.196263][ T1084] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.196288][ T1084] ? netlink_deliver_tap+0x2e/0x1b0 [ 1597.196320][ T1084] netlink_unicast+0x8ef/0xa80 [ 1597.196364][ T1084] netlink_sendmsg+0x7f0/0xb20 [ 1597.196397][ T1084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.196427][ T1084] ? aa_sock_msg_perm+0x144/0x210 [ 1597.196459][ T1084] ? apparmor_socket_sendmsg+0x98/0x360 [ 1597.196485][ T1084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.196509][ T1084] sock_sendmsg_nosec+0x14e/0x190 [ 1597.196538][ T1084] ____sys_sendmsg+0x54e/0x850 [ 1597.196576][ T1084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.196617][ T1084] ? import_iovec+0x73/0xa0 [ 1597.196652][ T1084] ___sys_sendmsg+0x2a5/0x360 [ 1597.196680][ T1084] ? __lock_acquire+0x747/0x2de0 [ 1597.196717][ T1084] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.196790][ T1084] ? __fget_files+0x3a2/0x420 [ 1597.196812][ T1084] ? __fget_files+0x2a/0x420 [ 1597.196846][ T1084] __x64_sys_sendmsg+0x1b1/0x290 [ 1597.196870][ T1084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1597.196926][ T1084] do_syscall_64+0x166/0x520 [ 1597.196946][ T1084] ? trace_irq_disable+0x3b/0x140 [ 1597.196970][ T1084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.196991][ T1084] ? clear_bhb_loop+0x70/0xc0 [ 1597.197018][ T1084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.197038][ T1084] RIP: 0033:0x7f3c6cf9f559 [ 1597.197060][ T1084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.197077][ T1084] RSP: 002b:00007f3c6b172028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.197101][ T1084] RAX: ffffffffffffffda RBX: 00007f3c6d226360 RCX: 00007f3c6cf9f559 [ 1597.197117][ T1084] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1597.197130][ T1084] RBP: 00007f3c6b172090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.197144][ T1084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.197157][ T1084] R13: 00007f3c6d2263f8 R14: 00007f3c6d226360 R15: 00007ffeaa11d348 [ 1597.197192][ T1084] [ 1598.113722][ T1066] geneve2: entered promiscuous mode [ 1598.119805][ T1066] geneve2: entered allmulticast mode [ 1598.153086][ T1094] ip6t_hbh: Not strict - not implemented [ 1598.212905][ T1090] ip_tables: iptables: counters copy to user failed while replacing table [ 1599.252667][ T828] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.252714][ T828] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.468599][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 1599.678826][ T828] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.678866][ T828] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.162914][ T828] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1600.162955][ T828] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.489151][ T828] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1600.489193][ T828] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.363479][ T1143] bond2: Removing last ns target with arp_interval on [ 1602.318767][ T1166] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8627'. [ 1602.365779][ T828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1602.696216][ T828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1602.742129][ T828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1602.769226][ T828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1602.770302][ T828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1602.814486][ T828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1602.843709][ T828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1602.981475][ T828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1604.150121][ T828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.281448][ T828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.310590][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.310744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.367868][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.368001][T16738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.586407][T18851] Bluetooth: hci5: command 0x0406 tx timeout [ 1604.906904][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026da2400: rx timeout, send abort [ 1604.907087][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026da2400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1605.112189][ T1223] netlink: 277 bytes leftover after parsing attributes in process `syz.7.8637'. [ 1605.209763][ T1227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8639'. [ 1606.048502][ T1241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8643'. [ 1606.350776][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8645'. [ 1607.466829][ T1277] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8652'. [ 1607.632167][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.833496][ T1284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8653'. [ 1609.141972][ T1295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1609.142004][ T1295] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1609.553881][ T828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1609.821045][ T1295] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1609.821072][ T1295] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1609.922377][ T828] veth0_vlan: entered promiscuous mode [ 1609.925032][ T1295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1609.925057][ T1295] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1610.017090][ T828] veth1_vlan: entered promiscuous mode [ 1610.046966][ T1295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1610.046992][ T1295] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1610.111342][ T828] veth0_macvtap: entered promiscuous mode [ 1610.134213][ T828] veth1_macvtap: entered promiscuous mode [ 1610.189732][ T33] INFO: task syz.4.8199:31480 blocked for more than 143 seconds. [ 1610.189760][ T33] Not tainted syzkaller #0 [ 1610.189773][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1610.189783][ T33] task:syz.4.8199 state:D stack:27168 pid:31480 tgid:31478 ppid:21854 task_flags:0x400140 flags:0x00080002 [ 1610.189853][ T33] Call Trace: [ 1610.189872][ T33] [ 1610.189888][ T33] __schedule+0x17dd/0x5820 [ 1610.189960][ T33] ? __pfx___schedule+0x10/0x10 [ 1610.190000][ T33] ? schedule+0x90/0x2b0 [ 1610.190035][ T33] schedule+0x164/0x2b0 [ 1610.190068][ T33] schedule_preempt_disabled+0x13/0x30 [ 1610.190098][ T33] __mutex_lock+0x7c4/0x15a0 [ 1610.190126][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1610.190152][ T33] ? nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1610.190267][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1610.190287][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 1610.190323][ T33] ? kern_path+0xd1/0x150 [ 1610.190350][ T33] nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1610.190375][ T33] ? __nla_parse+0x40/0x60 [ 1610.190399][ T33] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1610.190425][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1610.190447][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1610.190478][ T33] genl_family_rcv_msg_doit ** replaying previous printk message ** [ 1610.190478][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 1610.190509][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1610.190555][ T33] ? bpf_lsm_capable+0x9/0x20 [ 1610.190575][ T33] ? security_capable+0x7e/0x2c0 [ 1610.190606][ T33] genl_rcv_msg+0x614/0x7a0 [ 1610.190639][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1610.190667][ T33] ? __pfx_nfsd_nl_unlock_export_doit+0x10/0x10 [ 1610.190717][ T33] netlink_rcv_skb+0x226/0x4a0 [ 1610.190745][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1610.190778][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1610.190823][ T33] ? down_read+0x2b9/0x320 [ 1610.190851][ T33] genl_rcv+0x28/0x40 [ 1610.190878][ T33] netlink_unicast+0x8ef/0xa80 [ 1610.190923][ T33] netlink_sendmsg+0x7f0/0xb20 [ 1610.190957][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.190989][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 1610.191021][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 1610.191047][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.191073][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 1610.191103][ T33] ____sys_sendmsg+0x54e/0x850 [ 1610.191142][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1610.191516][ T33] ? import_iovec+0x73/0xa0 [ 1610.191555][ T33] ___sys_sendmsg+0x2a5/0x360 [ 1610.191585][ T33] ? __lock_acquire+0x747/0x2de0 [ 1610.191615][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 1610.191652][ T33] ? futex_wait+0x2a2/0x390 [ 1610.191721][ T33] ? __fget_files+0x3a2/0x420 [ 1610.191744][ T33] ? __fget_files+0x2a/0x420 [ 1610.191779][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 1610.191804][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1610.191862][ T33] do_syscall_64+0x166/0x520 [ 1610.191883][ T33] ? trace_irq_disable+0x3b/0x140 [ 1610.191914][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.191937][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1610.191964][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.191985][ T33] RIP: 0033:0x7f7cf879f559 [ 1610.192007][ T33] RSP: 002b:00007f7cf96b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1610.192031][ T33] RAX: ffffffffffffffda RBX: 00007f7cf8a25fa0 RCX: 00007f7cf879f559 [ 1610.192048][ T33] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1610.192063][ T33] RBP: 00007f7cf8836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1610.192077][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.192091][ T33] R13: 00007f7cf8a26038 R14: 00007f7cf8a25fa0 R15: 00007ffdf9104f38 [ 1610.192130][ T33] [ 1610.192182][ T33] [ 1610.192182][ T33] Showing all locks held in the system: [ 1610.192195][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 1610.192277][ T33] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1610.192368][ T33] locks held by kworker/u8:4/62: 4, last CPU#0: [ 1610.192384][ T33] #0: ffff88807c0b0948 ((wq_completion)krds_cp_wq#12/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.192816][ T33] #1: ffffc9000204fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.192878][ T33] #2: ffff8880558a9280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1610.192988][ T33] #3: ffff888032b8e2a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1610.193071][ T33] locks held by udevd/4996: 3, last CPU#1: [ 1610.193087][ T33] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 1610.193468][ T33] #1: ffff8880378e4cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1610.193528][ T33] #2: ffff88807fbb7180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1610.195021][ T33] locks held by getty/5387: 2, on CPU#0: [ 1610.195038][ T33] #0: ffff8880376170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1610.195148][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1610.195208][ T33] locks held by kworker/u8:17/16688: 3, last CPU#0: [ 1610.195224][ T33] #0: ffff88802d71f948 ((wq_completion)krds_cp_wq#22/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.195287][ T33] #1: ffffc9000a0ffc40 ((work_completion)(&(&cp->cp_recv_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.195519][ T33] #2: ffff888053817060 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 1610.195584][ T33] locks held by kworker/u8:30/16738: 3, last CPU#0: [ 1610.195601][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.195657][ T33] #1: ffffc9000267fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.195724][ T33] #2: ffff888076f9b258 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1610.195823][ T33] locks held by ipvs-m:22:0/23105: 1, on CPU#1: [ 1610.195839][ T33] #0: ffff8880b8528618 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_interrupt+0xfd/0xaa0 [ 1610.195899][ T33] locks held by kworker/u8:10/25337: 4, last CPU#0: [ 1610.195915][ T33] #0: ffff888076be5948 ((wq_completion)krds_cp_wq#12/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.195972][ T33] #1: ffffc90003f1fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.196031][ T33] #2: ffff8880558a8c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1610.196093][ T33] #3: ffff888053814720 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1610.196155][ T33] locks held by kworker/u8:22/25343: 3, on CPU#1: [ 1610.196171][ T33] #0: ffff88801cb64948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.196227][ T33] #1: ffffc90002e0fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.196284][ T33] #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1610.196362][ T33] locks held by kworker/0:9/25742: 3, on CPU#0: [ 1610.196379][ T33] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.196436][ T33] #1: ffffc90005437c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.196494][ T33] #2: ffff88807ba6d258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1610.196570][ T33] locks held by syz.5.8138/31313: 2, on CPU#0: [ 1610.196586][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1610.196644][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 1610.336801][ T33] locks held by syz.4.8199/31480: 2, on CPU#0: [ 1610.336817][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1610.337073][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1610.337125][ T33] locks held by kworker/0:0/31944: 3, on CPU#0: [ 1610.337139][ T33] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.337189][ T33] #1: ffffc900046afc40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1610.337249][ T33] #2: ffffffff915806e0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1610.337355][ T33] locks held by syz.2.8319/32122: 2, on CPU#0: [ 1610.337369][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1610.337420][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1610.337468][ T33] locks held by syz-executor/32377: 1, last CPU#1: [ 1610.337482][ T33] #0: ffff888033d42ce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 1610.337572][ T33] locks held by syz.8.8380/32428: 2, on CPU#0: [ 1610.337586][ T33] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1610.337635][ T33] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_export_doit+0x2ef/0x580 [ 1610.337689][ T33] locks held by syz.1.8656/1295: 4, on CPU#1: [ 1610.337702][ T33] #0: ffffffff915806e0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x196/0x560 [ 1610.337746][ T33] #1: ffff888055cc0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x28/0xc0 [ 1610.337797][ T33] #2: ffff888055cc00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5e6/0xf90 [ 1610.337875][ T33] #3: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 1610.337928][ T33] locks held by udevd/1299: 1, on CPU#1: [ 1610.337941][ T33] #0: ffff88802ced0890 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x221/0x1970 [ 1610.337996][ T33] locks held by udevd/1302: 1, on CPU#1: [ 1610.338008][ T33] #0: ffff88802ced0890 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x221/0x1970 [ 1610.338059][ T33] locks held by udevd/1308: 1, on CPU#1: [ 1610.338072][ T33] #0: ffff88802ced0890 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x221/0x1970 [ 1610.338124][ T33] locks held by udevd/1309: 2, last CPU#1: [ 1610.338137][ T33] #0: ffff88802d600460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1610.338190][ T33] #1: ffff88802ced0890 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 1610.338259][ T33] locks held by syz.7.8661/1324: 2, last CPU#1: [ 1610.338272][ T33] #0: ffff888079bc8088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1610.338318][ T33] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1610.338363][ T33] locks held by sed/1327: 1, last CPU#1: [ 1610.338377][ T33] #0: ffff88801c09a800 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1610.338428][ T33] locks held by udevd/1331: 1, on CPU#1: [ 1610.338441][ T33] #0: ffff88802ced0890 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0x221/0x1970 [ 1610.338495][ T33] [ 1610.338500][ T33] ============================================= [ 1610.338500][ T33] [ 1610.338509][ T33] NMI backtrace for cpu 1 [ 1610.338523][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1610.338543][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1610.338555][ T33] Call Trace: [ 1610.338563][ T33] [ 1610.338572][ T33] dump_stack_lvl+0xe8/0x150 [ 1610.338601][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1610.338627][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1610.338650][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1610.338679][ T33] sys_info+0x135/0x170 [ 1610.338701][ T33] watchdog+0xfd2/0x1030 [ 1610.338729][ T33] ? watchdog+0x1c7/0x1030 [ 1610.338758][ T33] kthread+0x38b/0x480 [ 1610.338778][ T33] ? __pfx_watchdog+0x10/0x10 [ 1610.338798][ T33] ? __pfx_kthread+0x10/0x10 [ 1610.338818][ T33] ret_from_fork+0x514/0xb70 [ 1610.338842][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1610.338862][ T33] ? __switch_to+0xc78/0x1410 [ 1610.338891][ T33] ? __pfx_kthread+0x10/0x10 [ 1610.338911][ T33] ret_from_fork_asm+0x1a/0x30 [ 1610.338946][ T33] [ 1610.338954][ T33] Sending NMI from CPU 1 to CPUs 0: [ 1610.338979][ C0] NMI backtrace for cpu 0 [ 1610.338994][ C0] CPU: 0 UID: 0 PID: 32 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1610.339014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1610.339025][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1610.339046][ C0] Code: 1b 50 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 dc 12 c1 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 d7 02 7f 06 cc 44 89 f9 80 e1 07 38 c1 [ 1610.339062][ C0] RSP: 0018:ffffc90000a87900 EFLAGS: 00000002 [ 1610.339079][ C0] RAX: 0000000000000069 RBX: 0000000000000069 RCX: 0000000000000000 [ 1610.339092][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 1610.339104][ C0] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 1610.339115][ C0] R10: dffffc0000000000 R11: ffffffff85784a80 R12: dffffc0000000000 [ 1610.339129][ C0] R13: 0000000000000069 R14: ffffffff9bda1b20 R15: 0000000000000000 [ 1610.339142][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 1610.339157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1610.339170][ C0] CR2: 00007ffd0e2a0eb8 CR3: 0000000071886000 CR4: 00000000003526f0 [ 1610.339189][ C0] Call Trace: [ 1610.339196][ C0] [ 1610.339206][ C0] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 1610.339233][ C0] serial8250_console_write+0xa7e/0x1200 [ 1610.339289][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1610.339312][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1610.339337][ C0] ? __schedule+0x17f3/0x5820 [ 1610.339370][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1610.339399][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1610.339424][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1610.339452][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1610.339497][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 1610.339521][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 1610.339540][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1610.339564][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1610.339589][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1610.339616][ C0] kthread+0x38b/0x480 [ 1610.339633][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1610.339652][ C0] ? __pfx_kthread+0x10/0x10 [ 1610.339670][ C0] ret_from_fork+0x514/0xb70 [ 1610.339690][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1610.339715][ C0] ? __switch_to+0xc78/0x1410 [ 1610.339741][ C0] ? __pfx_kthread+0x10/0x10 [ 1610.339759][ C0] ret_from_fork_asm+0x1a/0x30 [ 1610.339785][ C0] [ 1610.339977][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1611.638863][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1611.647983][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1611.658041][ T33] Call Trace: [ 1611.661327][ T33] [ 1611.664260][ T33] vpanic+0x56d/0xa60 [ 1611.668259][ T33] ? __pfx_vpanic+0x10/0x10 [ 1611.672775][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 1611.678333][ T33] panic+0xc5/0xd0 [ 1611.682063][ T33] ? __pfx_panic+0x10/0x10 [ 1611.686490][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 1611.691524][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1611.697693][ T33] watchdog+0x102b/0x1030 [ 1611.702035][ T33] ? watchdog+0x1c7/0x1030 [ 1611.706466][ T33] kthread+0x38b/0x480 [ 1611.710541][ T33] ? __pfx_watchdog+0x10/0x10 [ 1611.715224][ T33] ? __pfx_kthread+0x10/0x10 [ 1611.719821][ T33] ret_from_fork+0x514/0xb70 [ 1611.724452][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1611.729572][ T33] ? __switch_to+0xc78/0x1410 [ 1611.734262][ T33] ? __pfx_kthread+0x10/0x10 [ 1611.738854][ T33] ret_from_fork_asm+0x1a/0x30 [ 1611.743636][ T33] [ 1611.746920][ T33] Kernel Offset: disabled [ 1611.751240][ T33] Rebooting in 86400 seconds..